Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
File: 07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft (raw, json)
Hash identifier: B7hgaSlZgsIMn02oTCkHUSzuN5dQ/7Emd7jxyEqAlXE=
Subject key identifier: 28:FC:FD:36:73:E2:73:84:EC:14:90:46:CE:70:43:EE:3C:E1:1F:D2
Authority key identifier: 07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE
Certificate issuer: /CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe
Certificate serial: 4B41D3725774DF045A02423F91B37D4ABC9A05CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
Manifest number: 3B
Signing time: Fri 18 Apr 2025 19:46:08 +0000
Manifest this update: Fri 18 Apr 2025 19:41:08 +0000
Manifest next update: Sat 19 Apr 2025 20:05:08 +0000
Files and hashes: 1: 07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl (hash: +qn43TXy0R8qn/KgJVPWOGK5yD6/cZCce13pYhN69HI=)
2: 326131343a333030303a3a2f32392d3438203d3e20323136313338.roa (hash: md/+wqbJ3H+kkEZwDt/4Y8xfAoML1rGfQ9Cm9/0s+PE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:41:d3:72:57:74:df:04:5a:02:42:3f:91:b3:7d:4a:bc:9a:05:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe
Validity
Not Before: Apr 18 19:41:08 2025 GMT
Not After : Apr 19 20:05:08 2025 GMT
Subject: CN=28FCFD3673E27384EC149046CE7043EE3CE11FD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:6e:21:bc:1c:10:f4:02:a8:4b:6d:b5:ee:
ba:92:bc:44:4f:a1:16:c5:7f:2f:da:bf:4c:4e:3e:
21:9c:96:a7:40:41:dc:93:44:68:85:ed:e2:e4:fb:
a6:d6:6b:88:41:5d:bb:14:e6:a3:7c:8c:25:11:87:
b5:42:13:18:ac:b3:60:b5:98:d6:1d:24:8a:e1:ca:
c7:14:70:62:4e:c4:c1:3b:06:f0:72:78:62:aa:af:
09:12:0d:3d:4c:f1:e9:08:b6:04:a9:00:89:a0:9a:
53:2d:90:df:c4:89:db:ef:c1:11:ce:4a:27:c4:2b:
46:29:94:c8:6b:0e:39:37:ac:66:67:e0:e0:1c:89:
89:1c:af:1e:b9:23:d7:83:2a:4e:12:1d:b3:b8:cc:
f0:c1:ee:8b:11:91:b6:79:0a:ff:23:ec:66:ec:19:
be:4c:db:96:0d:1f:31:06:3b:fb:a0:9c:5f:c7:8b:
6f:cd:16:0d:d7:bc:ad:c8:f1:5f:e2:fd:90:8e:68:
9b:2c:1d:12:9a:d3:80:af:82:d9:bf:fb:d5:d6:02:
69:89:38:e9:b0:73:2e:57:46:3d:bb:90:99:e2:17:
9f:c4:94:b6:d3:cf:f7:36:7d:9d:2c:e4:15:09:2e:
50:f4:0e:d8:80:a6:8f:9c:2f:0b:e1:55:6c:2f:49:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FC:FD:36:73:E2:73:84:EC:14:90:46:CE:70:43:EE:3C:E1:1F:D2
X509v3 Authority Key Identifier:
keyid:07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0b:45:e3:72:04:6d:cd:3d:02:85:16:ea:9e:0b:9e:70:e3:
ee:d7:8f:a4:b9:46:11:d1:4a:12:f9:d6:b3:1d:1b:84:da:c8:
ae:ad:44:d0:9e:1e:5c:f8:66:ef:42:a2:b5:de:bb:cf:02:43:
b9:35:f4:6c:03:a2:74:0d:2c:44:fe:78:77:ed:25:41:d2:c3:
b2:16:26:22:c0:3c:74:7c:42:6a:3d:5b:41:22:e7:e7:90:c6:
be:72:e2:dc:95:8d:e0:00:84:6c:e5:b2:55:ff:e6:c0:43:9b:
4b:d4:04:6a:f5:1e:5b:18:6f:8d:f1:c2:a3:2a:0c:e5:53:54:
24:5b:6f:21:8c:02:45:9f:2d:16:f7:be:25:31:3a:59:ce:2b:
31:c6:27:d7:c6:15:7d:23:11:2f:90:15:dc:00:56:17:16:a4:
bb:19:62:69:67:aa:71:11:d2:28:b0:5c:ce:ae:fd:f2:e1:16:
b1:c8:aa:73:11:7f:d5:6c:93:52:a2:c4:50:01:19:49:5f:10:
a0:c6:df:86:2f:7f:dc:61:7e:22:af:04:1d:92:eb:e3:0e:a5:
e0:a9:9d:9d:5e:87:f1:5e:a7:9b:c4:69:05:ba:56:2e:a7:17:
27:c0:b0:35:56:e8:30:77:81:1b:d9:7b:b8:be:c3:31:d2:26:
fa:c6:ab:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:12 2025 by rpki-client