Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: HpH4hpKYtY/wI3XIfWCX1QVuvp5ueRKKolMhm2h1K9Q=
Subject key identifier: 32:AA:BF:28:70:FA:ED:8A:BD:54:7C:A4:44:7F:9C:A1:23:46:62:9C
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 3ED6B77B1E52BDF59B73B44E7788A399BBF8E21B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 03AB
Signing time: Tue 04 Nov 2025 16:13:45 +0000
Manifest this update: Tue 04 Nov 2025 16:08:45 +0000
Manifest next update: Wed 05 Nov 2025 19:56:45 +0000
Files and hashes: 1: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
2: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: 5OwzkaLUii9ngjYoZbrYO2htCcGwx8PARIooVDvbl7k=)
3: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: U1b6iopNgvKlTyuI9+daSHWzsI6hi40lV9VaHm3qJpw=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 19:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d6:b7:7b:1e:52:bd:f5:9b:73:b4:4e:77:88:a3:99:bb:f8:e2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Nov 4 16:08:45 2025 GMT
Not After : Nov 5 19:56:45 2025 GMT
Subject: CN=32AABF2870FAED8ABD547CA4447F9CA12346629C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:0a:fa:97:b0:2c:c6:d6:c6:17:43:77:32:
9e:a9:ad:3f:90:03:68:78:20:79:87:cf:7d:6b:fc:
d9:b5:7e:66:be:71:b0:05:a4:34:35:4b:0b:3e:70:
84:5d:8e:21:7c:6f:93:f5:38:08:b6:cf:8a:7b:0c:
9e:44:0f:ad:80:86:ab:95:ae:30:ea:89:67:5b:1f:
72:bd:5d:9a:36:6b:78:35:a1:16:3b:a6:5e:a4:ab:
91:d2:39:41:19:78:ef:ba:88:a0:7f:eb:49:8d:db:
bc:a2:3e:6e:23:13:96:f8:39:10:34:91:a3:51:04:
89:27:18:92:a8:7b:2d:43:9e:de:cc:fc:b0:30:ae:
1f:ad:44:54:c9:47:4a:3b:27:8d:78:92:40:05:ea:
24:9b:57:b1:e9:ea:c9:ac:1b:a3:71:55:00:4f:fb:
be:59:78:f4:a6:2a:be:2b:05:4a:dc:2f:67:3c:28:
f8:48:0c:0c:59:af:46:a0:3d:38:7d:42:7c:72:cd:
8b:ed:90:4a:4b:61:d3:b1:09:89:e1:75:b3:5f:20:
73:b2:62:86:89:06:38:3f:19:57:28:f2:3f:5a:5b:
97:03:bf:0f:de:a3:05:6b:6e:1a:90:a9:4e:47:58:
cf:13:81:34:48:2e:e7:88:36:c7:19:8e:6e:cd:35:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AA:BF:28:70:FA:ED:8A:BD:54:7C:A4:44:7F:9C:A1:23:46:62:9C
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:43:7e:92:75:4b:a6:81:53:d4:a4:57:b8:fd:f5:08:4d:01:
4a:55:7d:ce:33:54:83:f0:fa:0d:4e:c3:7a:63:76:53:93:c2:
2c:58:aa:f9:8a:c2:7c:31:a8:d6:3b:c7:f4:2d:4d:e0:d2:07:
b3:6a:9b:e8:99:bf:bf:66:db:9a:5c:5f:1c:2f:46:d0:fa:b1:
73:09:0f:ff:61:78:a3:35:8f:34:43:dc:f5:db:a0:e3:2d:44:
a4:3d:d7:9b:f6:35:45:fa:6b:33:ae:f9:14:98:25:ad:7e:12:
ac:3d:bd:16:40:e3:8b:79:23:79:cf:5d:93:3c:72:50:cc:71:
4f:96:eb:4a:de:51:1f:be:cc:6f:aa:9c:92:57:d3:fe:ed:38:
6e:bc:7b:29:b8:87:79:a8:d9:32:7d:92:e7:6c:b3:72:e9:e4:
a3:56:81:fb:12:90:38:33:39:86:9f:e6:50:aa:3d:20:7f:ee:
62:11:35:8f:45:d2:f4:fa:83:cb:66:01:48:21:28:0f:70:b9:
3a:51:b1:e5:63:c5:90:6f:ea:22:da:63:58:a6:04:d6:26:61:
2e:b9:5b:0b:59:4f:61:c5:06:cd:bb:86:bc:e4:df:90:7d:44:
c2:75:5f:be:ba:56:21:ff:0f:6c:d6:fb:a7:17:3e:41:fe:db:
ab:b9:ca:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:21:15 2025 by rpki-client