Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: MdAX3mqhiFmo0eatGJoi40E0PfnKDKWZbhtDDEpOGb8=
Subject key identifier: 79:11:6B:5C:96:AD:C1:64:F6:7A:39:66:2E:C7:84:CE:7E:60:B9:1A
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 2E4B2479CA220C812A780C895E4F3E3CD821C8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 03AC
Signing time: Wed 05 Nov 2025 11:58:45 +0000
Manifest this update: Wed 05 Nov 2025 11:53:45 +0000
Manifest next update: Thu 06 Nov 2025 15:06:45 +0000
Files and hashes: 1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: 05nSsYm7DFnGYcUUfeUNvsaDRZlO8W3Mx3q/vZqrqtg=)
2: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: 5OwzkaLUii9ngjYoZbrYO2htCcGwx8PARIooVDvbl7k=)
3: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4b:24:79:ca:22:0c:81:2a:78:0c:89:5e:4f:3e:3c:d8:21:c8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Nov 5 11:53:45 2025 GMT
Not After : Nov 6 15:06:45 2025 GMT
Subject: CN=79116B5C96ADC164F67A39662EC784CE7E60B91A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:64:f4:ba:50:3f:0e:e8:53:3d:e4:37:5a:
f5:2e:16:11:69:b9:04:ea:88:57:e2:db:4a:37:7e:
ec:32:54:ab:18:3d:c8:97:34:b2:48:68:a7:04:fb:
3e:cd:66:40:25:39:95:28:6b:88:c2:82:92:2e:d8:
3c:0e:ca:42:50:9e:68:26:b9:2a:87:9a:fa:db:a6:
bd:3c:f9:57:48:8a:ec:4f:9b:b1:0d:1e:be:22:64:
95:71:2f:88:19:f4:67:17:37:bf:e3:21:27:20:0e:
43:64:df:e0:c3:3e:b5:8b:8e:40:dc:ce:be:57:c0:
ef:ed:a6:3d:5c:15:5a:80:d0:cc:bb:39:b7:36:b0:
7c:25:7e:d6:13:82:3e:69:6a:eb:5f:a9:84:a6:d2:
45:a7:89:9e:e4:c3:94:49:c0:c8:22:9b:02:94:43:
09:ec:8b:26:8c:30:bd:88:41:53:9d:26:90:52:57:
e2:07:90:06:2d:2f:12:64:c0:37:72:48:f8:31:16:
0e:8e:95:af:15:cf:82:d0:80:63:30:1f:50:7a:f6:
e8:14:b6:b1:f9:4a:6a:c0:50:db:19:6a:a7:57:32:
26:ee:49:d0:c2:af:ea:5f:7c:96:29:36:b4:1d:08:
6f:37:8e:e9:20:e4:2d:af:ba:4a:b8:8b:9b:82:fd:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:11:6B:5C:96:AD:C1:64:F6:7A:39:66:2E:C7:84:CE:7E:60:B9:1A
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0a:28:bd:a2:a5:14:5e:6e:61:31:e7:d1:b7:8a:04:c3:a8:
c8:68:da:1a:8e:c6:b7:25:59:15:89:bb:13:9f:dc:0a:46:9f:
88:47:ae:87:3b:64:4a:71:17:2d:2c:e8:71:a0:1d:14:7e:79:
4a:cb:19:f0:b1:73:69:b0:5e:02:db:c9:85:50:94:69:b5:5f:
72:9f:c7:7c:14:47:a3:35:b6:1d:8b:a6:40:cb:28:db:9c:57:
12:b4:1f:b2:47:93:7a:1b:fa:d7:67:10:a9:2f:4f:d8:76:9a:
25:1c:4e:ec:23:73:62:22:15:1d:cd:d6:9f:9b:08:7a:b6:46:
46:41:46:6d:9c:bb:9c:be:84:40:48:2e:11:59:54:1b:e5:3f:
4a:e0:35:7a:70:3a:ca:85:37:d8:70:e3:50:ee:56:74:57:ed:
8f:80:5e:ef:36:b1:6e:6f:36:08:f6:0c:9c:58:1c:2e:72:67:
c2:00:ec:48:ac:e8:37:4f:c6:ac:73:80:af:4a:ba:c6:93:6e:
c7:8b:e7:ab:b8:23:b0:5a:88:83:8b:de:81:f2:58:d2:02:b8:
5b:2d:40:2e:d9:2b:1c:a7:14:00:86:70:af:c9:f5:9f:f9:1f:
c0:49:0e:14:11:db:6d:20:47:84:23:ad:5a:f8:53:68:82:31:
3f:e4:21:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:07:51 2025 by rpki-client