Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
File: E84B072599A643FE71F171B15ED724213D43CE5B.mft (raw, json)
Hash identifier: nb8EbHXyh1GJFHDafyaz1whtdVDzfK4/gluNg5bLtd0=
Subject key identifier: 86:19:64:60:0D:56:DD:D1:A4:CE:26:C7:77:08:62:06:2B:F6:73:9D
Authority key identifier: E8:4B:07:25:99:A6:43:FE:71:F1:71:B1:5E:D7:24:21:3D:43:CE:5B
Certificate issuer: /CN=e84b072599a643fe71f171b15ed724213d43ce5b
Certificate serial: 1FF85527A4A8BD7C70E4048FA32661EA15EAD29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer
Subject info access: rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
Manifest number: A1
Signing time: Tue 11 Nov 2025 09:13:23 +0000
Manifest this update: Tue 11 Nov 2025 09:08:23 +0000
Manifest next update: Wed 12 Nov 2025 09:51:23 +0000
Files and hashes: 1: AS214768.asa (hash: jXPXFYdvxRTO4xZ1QtAhRs/urzNWFCHEnbmEMExacrU=)
2: E84B072599A643FE71F171B15ED724213D43CE5B.crl (hash: D9P7Q/DEwg1/svCXEacag9+Cu76BdkIyrtH6mLvmeV4=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.crl
rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f8:55:27:a4:a8:bd:7c:70:e4:04:8f:a3:26:61:ea:15:ea:d2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84b072599a643fe71f171b15ed724213d43ce5b
Validity
Not Before: Nov 11 09:08:23 2025 GMT
Not After : Nov 12 09:51:23 2025 GMT
Subject: CN=861964600D56DDD1A4CE26C7770862062BF6739D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:49:1a:19:74:02:88:08:f8:2b:38:0d:ed:
9c:fe:18:a6:5f:43:54:23:2f:e3:93:72:9f:78:84:
22:f6:4f:b2:8b:af:d4:2e:fa:cb:61:76:a3:81:ce:
0e:f6:b2:77:e7:71:ac:98:a7:cb:6f:dc:d3:7b:a4:
da:ea:35:87:cb:be:1b:56:1a:67:d9:52:c0:df:d2:
e0:6a:ba:23:b6:22:e2:ca:0e:01:e1:6b:36:93:f0:
2a:79:b0:ad:d1:d4:3f:c2:55:14:d1:4d:c4:1d:94:
9d:92:d0:2a:2f:01:41:45:ac:c6:45:fe:39:38:d8:
28:97:2a:86:15:f3:a4:e4:87:97:b9:ee:29:12:20:
0f:5e:68:33:f1:cf:aa:8a:b9:83:40:49:78:d5:53:
45:d4:5d:15:e1:32:a0:b8:76:fa:16:81:e6:e7:5d:
3c:53:87:e6:35:1c:5e:5e:6d:7c:18:ca:02:cf:f1:
ad:68:8f:02:35:17:2f:9e:e9:eb:aa:ba:06:6b:d5:
22:ba:32:3c:12:47:ee:13:a0:7c:cd:a6:3b:b1:e1:
a9:bf:69:98:4c:a7:8b:e4:2f:45:8d:f9:f3:0e:b2:
a5:de:de:f6:a0:41:7b:6f:2b:8a:82:ef:d9:e5:7b:
da:8b:46:4c:f4:2a:c8:f4:50:32:c5:e9:9b:e3:04:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:19:64:60:0D:56:DD:D1:A4:CE:26:C7:77:08:62:06:2B:F6:73:9D
X509v3 Authority Key Identifier:
keyid:E8:4B:07:25:99:A6:43:FE:71:F1:71:B1:5E:D7:24:21:3D:43:CE:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:01:99:77:fe:cf:12:e6:c2:36:44:3f:ee:b5:67:4e:31:10:
7e:60:04:b2:ce:bb:87:60:f5:cc:a2:da:2f:e7:9b:11:4f:1c:
57:ab:c4:9b:5e:88:e2:91:34:43:9e:c0:20:64:db:19:a6:0c:
d3:71:53:96:56:f7:5a:3d:5b:0d:ac:9d:8f:28:71:5a:e0:7b:
18:6a:8f:b6:11:f3:e6:60:7c:d3:27:aa:38:07:15:d5:c3:bc:
42:9a:5e:62:d1:8c:6e:62:54:9b:11:c9:86:33:d9:5f:60:23:
4d:7d:e9:bf:52:36:58:fb:83:6b:6f:22:ae:6d:9d:df:ba:99:
2d:62:b6:9c:1f:77:1a:f8:37:ca:61:cb:83:fd:84:5c:26:0a:
a6:db:6e:f5:50:4a:4e:07:16:fb:14:89:82:35:87:6b:77:86:
f4:82:4d:82:5c:21:30:cb:1d:a9:2b:b0:81:a8:25:04:23:b3:
0a:79:1d:8b:38:df:7a:4b:fa:f5:13:7e:f8:99:eb:b1:2d:16:
4e:bc:50:3d:32:f5:c0:07:2c:c0:7b:2e:be:37:6b:b3:f3:d4:
22:31:f5:2e:54:7b:a7:c7:f0:7d:4d:cb:cb:6d:a7:ff:ac:04:
e7:a5:93:7e:6f:77:4d:91:fc:c9:d8:0c:66:90:8c:8e:3c:84:
24:7b:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:02 2025 by rpki-client