Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: NQfkHiyh3fRKCD3ESK4GFwF0FoRdhptZ9p+zOcK5O7Q=
Subject key identifier: F7:5F:9E:0D:92:F0:9A:B5:78:9C:3B:F6:C0:C0:D8:05:75:1E:84:25
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 7209264ACC9CB25EB157B551560A999384BEDCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 02FE
Signing time: Sat 28 Jun 2025 15:15:19 +0000
Manifest this update: Sat 28 Jun 2025 15:10:19 +0000
Manifest next update: Sun 29 Jun 2025 18:56:19 +0000
Files and hashes: 1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: oL2Eac60HynCFh0O+qYATegFYS5VzM4VATWQOjG+yAs=)
2: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
3: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: XL6US0An98xPzqDkSmmsQ/A2pY3jEWx/noy7TrW/Uto=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:09:26:4a:cc:9c:b2:5e:b1:57:b5:51:56:0a:99:93:84:be:dc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Jun 28 15:10:19 2025 GMT
Not After : Jun 29 18:56:19 2025 GMT
Subject: CN=F75F9E0D92F09AB5789C3BF6C0C0D805751E8425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c7:c8:71:43:c5:3d:da:a7:f3:d8:7d:12:9e:
0e:56:eb:ad:11:1b:23:69:1e:70:4e:bd:b7:82:ae:
cd:e9:54:81:0e:65:c9:7f:7d:b5:5d:87:0c:1e:b3:
d5:94:f8:0e:b9:d7:d2:5b:3f:ad:2a:7a:c2:52:1a:
c9:18:9c:2f:6a:79:0a:e8:e8:cd:ed:3e:c4:83:63:
d4:9e:3d:f5:c5:24:9a:c2:1a:92:e0:74:fe:2a:c2:
0e:35:81:08:61:54:49:a7:bb:3c:22:21:ce:32:91:
7b:17:65:da:f2:65:fe:3b:1c:4d:7b:92:6d:10:77:
e1:1f:b3:9d:f2:2f:73:5e:2d:8d:57:19:94:58:8b:
cd:8e:75:a5:df:37:c5:24:64:dc:52:7e:d3:6c:eb:
a4:d0:79:d6:fe:d2:a2:26:a0:09:d5:9c:a8:f8:65:
67:26:a2:ef:5e:f5:b3:36:d1:bc:9b:06:68:c6:da:
b1:80:c2:a9:a1:d0:1f:f3:ec:8b:6c:96:60:bf:67:
24:46:16:99:cb:34:0a:fc:ed:87:d3:c2:eb:1f:1d:
f4:89:f5:bc:7f:c5:26:0d:dc:a7:a7:ca:0d:cf:fa:
c7:d4:cb:cc:33:7a:f3:55:66:e8:a2:cd:6f:b1:30:
92:49:84:d3:54:fd:50:74:cc:23:a1:56:b2:94:fc:
df:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5F:9E:0D:92:F0:9A:B5:78:9C:3B:F6:C0:C0:D8:05:75:1E:84:25
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f1:38:6a:89:64:a2:59:cc:db:7c:d5:08:37:64:59:38:d7:
73:34:c0:5b:df:48:db:de:9e:0f:1e:73:ae:ae:61:94:94:0f:
9b:ee:ab:54:6b:85:52:96:da:b5:67:73:00:a9:9d:be:75:5e:
4d:86:df:1a:cd:3a:12:85:98:3b:e1:7d:ab:e7:ad:65:0e:1f:
b0:6f:cf:2e:4d:9d:b3:2b:d4:79:4c:94:67:88:79:54:12:04:
ac:a2:24:81:03:a2:9f:d8:89:22:e7:f2:c8:9e:f2:d4:ed:fc:
99:c4:eb:fa:52:4b:ea:f3:30:57:03:80:52:22:55:9d:d8:21:
88:02:8b:60:05:78:6d:22:7f:0a:50:49:e6:ec:a1:7b:46:7e:
23:34:ab:4c:9f:a9:17:fd:b5:81:76:9c:3a:4a:60:f8:99:17:
21:6e:69:cc:69:0c:c7:7d:be:94:54:e1:44:2d:ef:37:50:10:
0b:ee:8b:94:56:48:30:71:26:f2:f8:3b:2c:ed:c5:7d:f7:79:
cb:94:5d:e9:06:38:e4:15:0a:2e:8c:fe:ac:d9:38:fe:9b:ec:
d8:65:28:98:37:af:a0:97:ca:c9:ab:96:f5:27:cf:42:8a:99:
7b:8a:2b:ea:e8:da:46:95:c1:40:01:e6:4d:88:53:ce:30:a9:
be:17:90:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:20 2025 by rpki-client