Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: aIiRNdT09mczOmYdlF+FBW4Y8bxtfJ3+g8xx9MQcpUY=
Subject key identifier: 58:C5:6C:CE:5A:FA:0B:3A:D5:78:D7:B8:3F:4E:FE:41:63:96:2A:F9
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 2F2C661AD7C25CF42EA1D4F3B58BFC8C4FA82E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 0331
Signing time: Wed 06 Aug 2025 02:07:32 +0000
Manifest this update: Wed 06 Aug 2025 02:02:32 +0000
Manifest next update: Thu 07 Aug 2025 03:21:32 +0000
Files and hashes: 1: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
2: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: XL6US0An98xPzqDkSmmsQ/A2pY3jEWx/noy7TrW/Uto=)
3: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: 2Q+wT7pRpsHsZT80CISh9LY1IztyQMWM3rqRLmlQR0c=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 03:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2c:66:1a:d7:c2:5c:f4:2e:a1:d4:f3:b5:8b:fc:8c:4f:a8:2e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Aug 6 02:02:32 2025 GMT
Not After : Aug 7 03:21:32 2025 GMT
Subject: CN=58C56CCE5AFA0B3AD578D7B83F4EFE4163962AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:c7:e6:6e:35:10:43:e9:ad:e3:e9:44:62:
c9:77:ad:b0:ba:09:c9:92:f5:a4:ea:ff:a6:d2:b9:
81:fc:81:66:dd:ce:6e:01:c9:a0:f2:d0:d5:4a:38:
b9:20:8e:6a:34:50:59:0c:09:54:08:08:61:d6:a2:
fb:f8:27:30:c6:37:eb:98:ea:e2:d2:d5:1a:a8:9a:
78:93:84:85:a6:3c:2a:a3:91:6a:bc:0a:bd:7a:d9:
54:00:ba:44:5a:36:8b:1c:e7:1f:89:e3:ba:cc:ac:
ff:48:61:d2:bc:af:1d:df:e0:64:9e:a1:2f:8b:66:
74:1a:4e:20:a3:e7:29:eb:87:d0:c3:1b:d2:18:a4:
2e:5b:2f:4c:8b:0c:e0:83:8d:cb:ac:b2:80:f2:22:
12:be:24:84:96:31:9a:ac:81:82:67:b1:9f:77:aa:
f0:64:91:df:67:38:71:50:9c:9f:0d:ba:b7:37:6e:
8b:d5:6a:68:73:20:cf:79:05:4f:0b:06:6c:e1:6a:
70:72:ca:3b:95:1c:39:8c:e1:01:22:b7:2f:eb:13:
3c:53:aa:f4:38:15:7e:85:84:66:e5:c7:4e:70:b8:
a4:95:5a:11:51:d7:c4:3c:73:53:8b:e4:c8:fc:df:
2d:47:3f:44:44:31:b0:e5:b1:97:0d:e7:23:26:5f:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C5:6C:CE:5A:FA:0B:3A:D5:78:D7:B8:3F:4E:FE:41:63:96:2A:F9
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0d:6b:6a:f6:dc:29:5e:cc:91:b0:93:95:09:a5:eb:b1:d5:
98:d7:2c:fc:45:fb:c9:0c:77:5b:13:44:8d:6d:e6:bb:19:92:
9d:da:23:1b:72:19:49:5e:f1:76:98:53:52:d6:8a:f3:9d:70:
7e:05:7c:db:d6:e1:47:1e:40:01:65:09:ec:74:45:5f:5d:9a:
91:1e:32:45:48:9c:5a:e1:da:92:ac:55:4d:d4:cb:6b:53:fd:
58:ea:e2:be:93:11:c5:bf:6e:c4:43:37:51:c3:ee:3c:4a:a6:
32:62:79:ba:e6:a8:67:91:6c:05:9c:3c:6b:77:7e:f9:da:20:
18:bd:66:1c:21:e6:5e:62:7a:cf:24:6a:8f:91:ff:0f:7c:b5:
29:ac:c7:42:cd:a4:34:f3:88:b0:78:a5:e4:0d:68:73:6c:bc:
3e:8e:bc:33:87:b8:1a:23:2b:c6:d9:e6:89:06:4b:c2:38:b7:
ae:04:c4:1b:2a:4e:67:b7:b6:c1:51:32:05:c7:86:52:0d:99:
e6:34:64:d3:71:6b:cc:93:23:32:6a:03:fc:ef:7d:f6:75:08:
37:58:42:31:6a:ee:1a:0e:0c:f9:f8:be:ca:74:42:f6:48:e7:
28:ba:23:99:5c:db:8c:98:2b:c0:30:1b:f1:87:5b:65:b4:5e:
99:45:fd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:02:17 2025 by rpki-client