
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
File: D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft (raw, json)
Hash identifier: L3bymFU7UfMFIvOank6mAC3rzZhHnCoscv60MPeSpAw=
Subject key identifier: F0:AC:1E:C0:77:0A:52:62:A7:2B:52:FC:C7:B0:17:83:F9:60:7A:8F
Authority key identifier: D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
Certificate issuer: /CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Certificate serial: 5DDCA5C71E812CCAD7FB0DCC4465CEDE977B296D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
Manifest number: E3
Signing time: Wed 29 Oct 2025 18:34:35 +0000
Manifest this update: Wed 29 Oct 2025 18:29:35 +0000
Manifest next update: Thu 30 Oct 2025 22:03:35 +0000
Files and hashes: 1: D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl (hash: rL3bYEwFRHvJorGrSmiXfdyoGv9QkoX44bRiJrZSPmc=)
2: 326131333a633030373a383031303a3a2f34352d3438203d3e2030.roa (hash: jXSyObdaIfoxdZWPXkVrtrLjNc9eUeccuHBi6nz0ja4=)
3: 326131333a633030373a613030303a3a2f33352d3438203d3e2030.roa (hash: t1VC4uavhMwi+rLajyzifqq7lHEKSJvbn1aUAzhK6Vw=)
4: 326131333a633030373a383031383a3a2f34372d3438203d3e2030.roa (hash: /XizzDEjWfHtXHc0Ab5o0ZbY35Db7SjtES+r1/OhmjA=)
5: 326131333a633030373a3a2f33332d3438203d3e2030.roa (hash: 4ogO7FSYIWTMHa7NHAKjnemXmD5Q4AEg/2Lor8ugtNI=)
6: 3138352e3135352e37352e302f32342d3234203d3e203439383637.roa (hash: 2BM7Up/uRpC2kGUw5rjIZjF1FqK6q9BWKbfrDV6CTuE=)
7: 326131333a633030373a383038303a3a2f34312d3438203d3e2030.roa (hash: F3j42vEXuR9TD5CGRl6IWwbxl3bjJmLrzfF1Jm3xeG8=)
8: 326131333a633030373a383032303a3a2f34332d3438203d3e2030.roa (hash: lS/+eqejkM/rl3fdhtwfs2NHf4fMlzt/WaaRv3PSNX8=)
9: 326131333a633030373a383830303a3a2f33372d3438203d3e2030.roa (hash: qwC4gOoNRPJmvwdKsOW1qnXkKg6zUfo4tNiu1ZwNGIw=)
10: 3138352e3135352e37352e302f32342d3234203d3e20393435.roa (hash: WPn5J0ZJyOxbzpBehWL9SeR3ZFEYJFenOXb3iX/q+Zc=)
11: 326131333a633030373a633030303a3a2f33342d3438203d3e2030.roa (hash: /v4SqfX+BigD9dMYATYfyaCFabkOlXsoTeJ2iudcdLE=)
12: 326131333a633030363a3a2f33322d3438203d3e2030.roa (hash: PEHCNRXMCXL+HEcUr83e5fTmiot0KdUcnmEHSoSVK1I=)
13: 326131333a633030373a383430303a3a2f33382d3438203d3e2030.roa (hash: d6N0+0TZNxx3tF0UVuD1QxzSk1b8yaiVA5XlfyW++pE=)
14: 326131333a633030343a3a2f33312d3438203d3e2030.roa (hash: VTk49chKjpiGUIW6naR7NDQ2bm7mg+x/mnjZWs6qxJ8=)
15: 326131333a633030373a383034303a3a2f34322d3438203d3e2030.roa (hash: mKh9yX+9Ow/gLw9uVu5d28cdHUwWXdzVGDlkC7RkriM=)
16: 326131333a633030373a393030303a3a2f33362d3438203d3e2030.roa (hash: IpqOgnJCnuHs3dbg22KA9hao6/QT7x8yp0d5Q6WeR40=)
17: 326131333a633030373a383031613a3a2f34382d3438203d3e2030.roa (hash: IG+vZ/fPQSrx47BMYI7QMTGbob3LNGJ8H7YniLo/348=)
18: 326131333a633030373a383130303a3a2f34302d3438203d3e2030.roa (hash: 9TmRdtFuh9L1/cYO0eIjBNXNZCtbMYGiVPpJ+wymmgs=)
19: 326131333a633030373a383230303a3a2f33392d3438203d3e2030.roa (hash: hhEj2TPgfyTRfuPypwsku9jubrEB+Go1ofo7gyUb+jE=)
20: 326131333a633030303a3a2f33302d3438203d3e2030.roa (hash: O6U7denQKZOkjD1O7JC+xkyevhCiAPrAfcyp00txZ7M=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:dc:a5:c7:1e:81:2c:ca:d7:fb:0d:cc:44:65:ce:de:97:7b:29:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Validity
Not Before: Oct 29 18:29:35 2025 GMT
Not After : Oct 30 22:03:35 2025 GMT
Subject: CN=F0AC1EC0770A5262A72B52FCC7B01783F9607A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:7c:ac:59:7f:a8:b2:e6:2d:75:86:7d:1f:
56:b2:b2:64:16:25:e0:d1:bc:b4:7d:82:8d:c7:30:
ad:4b:f5:aa:5b:d4:11:78:8c:b9:27:65:8a:c8:2f:
81:cd:6d:c3:a5:00:9e:0c:ab:19:21:07:81:e3:6b:
2d:98:db:d7:7f:4d:25:6f:8b:91:b9:cf:d1:d2:82:
1e:e2:6c:88:2f:15:16:31:c6:af:a7:65:df:ba:32:
e4:08:c0:67:b5:18:c4:11:6f:0b:28:11:e2:71:c8:
5d:ca:74:1a:99:22:89:bb:a0:60:4a:6d:df:d1:ef:
25:b2:45:d8:40:8b:6e:6a:f8:71:a7:16:df:a5:9d:
40:a0:f6:e8:11:51:87:31:dc:39:7d:b1:fa:ac:9a:
69:87:15:da:dc:1e:e3:9b:ba:bc:2e:c8:aa:b8:c5:
4a:68:33:77:6c:e6:dc:e1:1b:1c:83:1e:8c:90:83:
30:98:83:3c:21:49:b7:2e:4b:5a:20:10:0f:10:93:
b3:99:f2:7f:76:fe:f5:5f:d8:b8:93:6e:52:73:f2:
aa:59:be:2b:cd:34:91:40:c0:35:a5:f5:b2:9d:3b:
cd:64:11:eb:48:9c:2e:20:71:51:b3:9b:1b:c0:69:
00:f9:8f:73:42:6a:e6:48:a1:03:52:9f:af:fe:d2:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:1E:C0:77:0A:52:62:A7:2B:52:FC:C7:B0:17:83:F9:60:7A:8F
X509v3 Authority Key Identifier:
keyid:D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8d:f0:c7:22:a8:ee:a6:f6:65:64:55:a2:b6:d3:fb:b9:5f:
15:d3:e5:14:19:d1:ef:46:ce:f8:7d:7b:35:f1:68:05:1b:82:
28:ec:d8:ec:ab:87:4f:53:79:1d:f2:f1:48:e7:c1:ca:ba:30:
d1:e3:4a:69:01:b6:8b:cb:31:32:ac:95:f2:67:6f:c3:78:bc:
8b:fb:d1:76:87:48:d8:5a:b5:82:8e:4f:e6:91:2b:5a:0a:4f:
88:73:cf:0f:ef:bb:3b:a5:60:f8:4f:5b:17:ac:59:3a:da:1e:
93:39:40:4d:98:de:c5:74:16:9b:c6:d2:73:f0:18:99:ad:9e:
e7:4b:d4:b4:95:04:d4:b6:53:d2:9c:19:a7:2a:cb:f5:93:81:
62:b1:84:6f:25:84:93:c7:e6:a5:f0:d3:3a:e8:6a:6c:7b:b8:
0f:9c:c4:1c:78:02:64:fa:07:73:ca:43:3a:27:2f:7f:e9:d1:
7d:8e:70:11:f6:58:db:a1:51:4d:b7:f9:84:fb:1a:94:52:52:
71:32:44:83:37:5c:2d:84:3c:ab:cf:57:aa:4d:f1:02:f1:56:
77:df:f5:b3:1a:25:04:97:30:67:2e:f0:31:d3:2e:69:6a:4b:
a2:9d:e1:c7:9b:74:77:f8:96:de:be:79:78:32:85:b7:83:62:
d4:ac:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:59:40 2025 by rpki-client