Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: uIzWINkX6xdsxmgfdH71j4bJEkiwafHWV4lTNmpDhxg=
Subject key identifier: 4C:AB:9D:D8:3D:18:90:1E:CC:84:97:44:13:7B:8E:94:77:A5:2F:20
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 47C294EDB534694E36201E3BA7D11B415D3B9FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 0395
Signing time: Sun 19 Oct 2025 06:13:31 +0000
Manifest this update: Sun 19 Oct 2025 06:08:31 +0000
Manifest next update: Mon 20 Oct 2025 09:31:31 +0000
Files and hashes: 1: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: 5OwzkaLUii9ngjYoZbrYO2htCcGwx8PARIooVDvbl7k=)
2: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: rViKUeFWiotnBZ2tnjDGO2BvjAs7qGObw14O/Oef1Vw=)
3: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:c2:94:ed:b5:34:69:4e:36:20:1e:3b:a7:d1:1b:41:5d:3b:9f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Oct 19 06:08:31 2025 GMT
Not After : Oct 20 09:31:31 2025 GMT
Subject: CN=4CAB9DD83D18901ECC849744137B8E9477A52F20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:5e:49:5c:74:a6:52:19:9d:cc:20:c9:f3:
6a:d1:c7:78:d7:1e:fc:5d:90:98:04:e3:cb:0f:0b:
e8:b4:1b:1d:6c:ec:4f:d7:49:b8:48:8f:9c:50:74:
94:62:2e:78:c1:50:60:0c:e7:ac:1f:d7:fe:50:f6:
fb:85:53:50:3e:df:93:2f:52:0b:e4:d8:a9:6a:fa:
85:f0:15:dc:a7:f4:a1:80:cc:4f:f1:1b:46:6a:ce:
a8:59:18:b8:99:c7:90:0f:ca:52:44:f8:8c:be:f4:
c1:a0:ce:23:52:65:90:a5:c9:04:9f:20:49:09:2b:
ee:2a:a6:19:50:0b:4b:74:5c:20:2e:a0:07:c9:b5:
15:88:7d:5e:24:2f:ab:de:38:d3:f5:40:20:46:03:
f9:54:ac:ee:fc:7e:31:3c:bf:66:e4:c5:cb:e7:8a:
97:c0:9d:bf:93:a4:00:1f:de:62:3f:55:a0:c3:9b:
03:9c:34:27:d3:12:2e:f2:b0:f0:56:bb:26:32:fc:
f5:e3:bc:4b:b3:c7:c2:e8:a7:82:ec:47:4f:4c:74:
e0:be:a4:e1:32:a4:bf:58:2e:ed:67:5c:37:4c:f9:
3f:14:f9:bc:4a:09:dd:c1:98:f6:09:66:06:f8:4c:
75:db:f6:25:71:86:b1:be:b0:3e:94:f8:4a:c9:ef:
73:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AB:9D:D8:3D:18:90:1E:CC:84:97:44:13:7B:8E:94:77:A5:2F:20
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:52:41:63:fd:32:17:87:22:ec:01:34:0d:5d:d8:f5:cb:5f:
0f:61:19:7a:e0:c7:76:7c:14:dd:4c:7c:02:8c:f3:08:36:38:
31:76:7a:f5:f7:ed:ad:fe:8b:1d:78:bd:f0:3a:30:d2:73:26:
17:35:ef:ee:e2:99:1a:9a:25:56:51:a6:e4:4f:3d:42:8b:97:
bf:b4:21:fd:af:b5:d5:86:b5:b5:7c:65:2c:c8:e8:8d:f2:55:
55:f3:72:d2:2c:c4:c1:d0:5d:8d:e4:33:a6:aa:c4:f6:7a:52:
e0:2a:f4:e8:ad:0a:17:d0:90:8e:b4:10:bd:ac:d8:10:4f:b8:
d9:fd:6f:65:06:df:44:db:67:61:15:10:3a:24:f1:67:f1:1e:
37:bf:af:e3:c9:73:ca:fa:4d:78:3f:34:95:c0:6e:a7:3c:dc:
fd:9b:ea:e3:e6:e6:d9:5b:ff:34:2e:c2:55:6c:81:3a:a9:79:
85:8c:ca:f1:61:22:81:90:be:41:21:30:3e:4a:74:57:7f:14:
82:1e:16:61:7c:d0:59:3e:47:26:af:be:05:66:9a:ab:18:19:
41:60:8c:a8:45:f0:f2:62:8b:d4:ab:da:de:81:bf:b1:50:b4:
b8:e7:b3:41:6b:04:38:ec:76:9d:17:db:a9:f3:48:0a:3f:3d:
7f:b2:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:40 2025 by rpki-client