Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: 4ysyasm+1yRTzaIp8KyUUBltmNM6JZzJFi8zXvUnJfc=
Subject key identifier: 55:1E:E0:03:13:F8:89:ED:87:41:92:F8:43:99:48:66:5D:2F:4C:E7
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 553F0BB80D4987A3093107990E7D6B67C9CD258C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 0348
Signing time: Sat 23 Aug 2025 04:52:43 +0000
Manifest this update: Sat 23 Aug 2025 04:47:43 +0000
Manifest next update: Sun 24 Aug 2025 07:38:43 +0000
Files and hashes: 1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: ADIWBZQaQVsK7dijSkTkVRm5yBFuhsWPh0sDcShYGXI=)
2: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
3: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: XL6US0An98xPzqDkSmmsQ/A2pY3jEWx/noy7TrW/Uto=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:3f:0b:b8:0d:49:87:a3:09:31:07:99:0e:7d:6b:67:c9:cd:25:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Aug 23 04:47:43 2025 GMT
Not After : Aug 24 07:38:43 2025 GMT
Subject: CN=551EE00313F889ED874192F8439948665D2F4CE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:1e:bf:58:44:cc:4e:c3:6f:24:57:75:e3:
2a:0d:3a:3e:ed:6d:6d:80:d9:23:9f:2f:b9:d3:80:
5b:b5:9a:d9:3c:34:88:1d:8e:ec:f1:1d:9b:88:c9:
48:cb:ec:a4:3f:ed:3b:46:81:0c:81:01:39:08:6d:
1f:be:18:92:22:71:be:0d:b7:16:0c:5f:37:cb:20:
c7:23:28:cb:41:a8:79:21:1b:61:1e:83:d7:c7:b3:
ca:e2:11:fd:2e:6e:de:6f:6c:9f:ee:4b:12:cd:be:
8e:e5:e4:75:e7:d7:ab:a7:e7:b2:16:ea:82:72:36:
d7:7e:a3:8b:bc:7a:91:59:ca:fc:0c:28:fb:7c:8b:
4d:27:62:b7:6a:5c:16:9c:c0:ec:74:ae:96:2d:b7:
c5:1a:9c:92:78:53:25:5e:9a:a9:24:ac:7f:c4:24:
b4:e5:94:6c:92:e9:3e:18:66:fb:23:8f:36:52:9d:
f0:c2:af:13:4c:86:a9:e7:dd:05:33:b4:fc:87:a9:
eb:a0:37:ef:44:f6:f7:a5:b5:8b:2a:f2:3f:38:1c:
53:9a:af:13:85:59:54:54:ba:48:0b:61:36:6e:01:
fe:21:75:1f:d5:a1:4f:bf:72:ef:c4:5e:03:9d:de:
02:49:73:5a:0a:5c:a0:0d:9c:89:53:ce:7c:d7:83:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1E:E0:03:13:F8:89:ED:87:41:92:F8:43:99:48:66:5D:2F:4C:E7
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:60:b7:b9:30:15:76:e0:05:82:b7:70:48:d0:c7:8b:4d:8e:
36:76:48:5f:5e:40:23:56:d2:43:d0:5a:22:49:c0:1f:fa:fe:
93:d4:1a:34:43:25:f5:76:b2:76:24:37:7d:3f:64:85:a4:19:
7f:47:58:63:cb:8f:fb:89:2d:b2:b7:37:64:55:89:22:81:9e:
8a:9a:1d:cf:3b:fd:2d:c0:d8:e5:54:6b:f9:4a:aa:d6:09:d0:
0f:66:13:23:b2:3e:8b:9d:9f:d7:e9:e0:ff:46:f0:11:8f:71:
0e:9b:61:f6:80:d6:58:ab:3c:db:94:ce:d1:46:5b:4c:bc:36:
8f:fc:e3:24:ad:f4:2a:bd:8d:15:c1:40:c6:fd:fc:e2:14:8d:
69:f9:f1:7c:15:7b:c4:fb:03:39:db:52:d5:d4:fe:b0:e2:8e:
56:36:bc:b5:1e:51:1c:0f:fb:de:03:f7:1c:fa:8a:5d:59:98:
e8:06:c4:44:76:85:1a:44:a7:fc:11:83:2a:34:d7:8f:d3:48:
a3:d7:57:86:f2:cb:6b:26:11:68:75:72:8a:b2:c9:a9:c6:fc:
0f:ec:53:23:17:a9:40:d1:c5:62:05:83:19:fd:f6:0c:2a:be:
fb:7b:17:1d:50:df:6a:78:21:90:a6:fc:83:98:b1:c1:b7:d8:
e5:a5:ab:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:51:15 2025 by rpki-client