Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: TOlC0leqzJaVEl1GBfZnq9pQYiO52SENo/0lNty6tgs=
Subject key identifier: 22:94:E7:6D:F5:9E:44:6D:B9:DC:47:BD:E3:AA:1B:11:F3:5F:BB:4E
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 330604B32C0BA0E0B337CE96B4867F8F565E44F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 02BF
Signing time: Mon 12 May 2025 11:14:44 +0000
Manifest this update: Mon 12 May 2025 11:09:44 +0000
Manifest next update: Tue 13 May 2025 11:46:44 +0000
Files and hashes: 1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: mc1zlIYWfyG2sGSiiWAzUE/FOlGBikl0LFFM32e/KTg=)
2: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: XL6US0An98xPzqDkSmmsQ/A2pY3jEWx/noy7TrW/Uto=)
3: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:06:04:b3:2c:0b:a0:e0:b3:37:ce:96:b4:86:7f:8f:56:5e:44:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: May 12 11:09:44 2025 GMT
Not After : May 13 11:46:44 2025 GMT
Subject: CN=2294E76DF59E446DB9DC47BDE3AA1B11F35FBB4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7d:fe:43:f9:f3:d0:4c:cb:cd:a9:55:85:d8:
bb:97:de:f6:6e:02:25:1d:39:5e:43:df:b4:ab:1d:
b3:a2:98:86:be:91:17:89:08:b5:31:03:e9:ab:65:
a3:13:ed:97:db:3d:6f:16:1a:94:34:9f:3b:e7:16:
0c:8c:00:d0:c8:c8:e7:1c:6b:b6:a7:bc:db:91:23:
7e:7d:7f:f6:0b:b2:7d:2f:47:ec:36:ac:f7:ee:8c:
3a:dc:f8:10:0d:92:b4:07:8a:71:67:b2:cc:c9:6f:
6e:1b:d2:21:5d:90:c1:98:8d:30:95:5d:2f:eb:1f:
5a:b9:97:12:26:80:ce:47:69:65:94:41:10:e8:35:
76:c8:f9:89:0e:f3:82:da:7f:1b:1c:7c:e4:22:bb:
aa:aa:13:47:0b:e8:cc:1c:1d:57:c9:68:39:74:f8:
64:02:b1:20:57:c0:54:5f:2f:53:e3:3b:2c:1c:77:
b5:53:6b:f1:bc:c2:8d:12:00:7d:c3:e6:8d:39:b2:
ed:90:7d:4f:9e:6a:28:bb:64:41:ac:ce:4f:48:62:
77:1c:9c:c9:29:60:47:3a:c5:92:60:34:a2:e6:da:
21:4f:dd:df:24:db:1f:2c:d7:cc:19:15:60:8a:40:
12:ac:fa:b7:15:17:f0:ce:03:1e:b1:85:50:4c:3b:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:94:E7:6D:F5:9E:44:6D:B9:DC:47:BD:E3:AA:1B:11:F3:5F:BB:4E
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cf:50:e8:8e:fd:bd:5a:4e:85:b1:e0:ee:fa:c5:3a:42:35:
97:6e:1e:02:ab:e3:5c:9e:83:b5:b4:4d:c0:ee:15:3b:a1:db:
59:b5:e8:fb:45:fb:cc:86:92:b7:45:bf:62:30:8b:44:a6:4f:
ba:b0:75:7f:64:3e:19:62:ee:ef:ad:65:4b:ff:9c:82:e4:84:
10:19:7b:41:bf:65:a2:9e:19:6d:b2:d8:13:80:f6:60:33:bd:
3d:ac:0d:85:f2:1e:7d:97:5a:8f:7c:f6:89:99:ee:44:4b:ee:
1c:4b:47:e1:1c:36:73:ea:2f:74:f8:98:4c:8f:de:03:f7:91:
16:a5:b7:4a:d0:5b:93:58:bf:83:07:16:28:3e:82:9e:18:59:
c6:9b:33:60:ab:1a:a8:6a:6b:ee:37:df:e9:cc:07:7b:76:69:
4b:ae:3e:07:23:bb:1f:88:d2:79:1b:c0:5e:59:69:0e:98:ac:
2e:fb:a1:29:71:ed:29:f2:13:60:55:44:c5:3c:3e:01:2b:16:
ef:4e:fe:fb:7f:a9:3b:7c:ab:96:5b:ec:16:e8:5c:a4:fb:3e:
d0:a8:d9:ea:43:c7:5b:4c:81:e3:e3:d8:0f:f8:98:8d:bc:be:
e7:d7:0a:a6:ab:09:a9:68:08:ff:75:57:db:2e:4d:0d:95:ea:
8a:25:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:48:22 2025 by rpki-client