Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File: 3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier: YWRU7ABg3Qe7ACtOovnyPKsHoKcD2t9/YqFgEPJOwWQ=
Subject key identifier: 4B:60:0F:3D:36:08:37:42:86:D9:88:CD:D0:06:F8:4B:8E:67:BF:86
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer: /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial: 46617F3FAF24AD29B3CAA6D71DB7ECCB85B39B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number: 0297
Signing time: Fri 06 Jun 2025 14:33:26 +0000
Manifest this update: Fri 06 Jun 2025 14:28:26 +0000
Manifest next update: Sat 07 Jun 2025 17:26:26 +0000
Files and hashes: 1: AS48606.asa (hash: 5NWb4N+D0OquyokzVrf8CTeFzp8KBWxtJJ16mYNyMNg=)
2: AS59678.asa (hash: MrrWJ9l8lgWoC35oKfd53MWxXqNmbveRovZsM7Giidk=)
3: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: giBJ0KV7EbXr6DHD38vQNrST/O8DS/2f3MJqPtphpek=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:61:7f:3f:af:24:ad:29:b3:ca:a6:d7:1d:b7:ec:cb:85:b3:9b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
Validity
Not Before: Jun 6 14:28:26 2025 GMT
Not After : Jun 7 17:26:26 2025 GMT
Subject: CN=4B600F3D3608374286D988CDD006F84B8E67BF86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:09:90:4f:9d:59:7e:ac:4e:44:5b:0a:12:
78:ce:0d:3a:73:c5:d2:5b:ec:b0:63:7c:db:87:89:
bf:64:5a:8c:94:8d:59:7e:cb:04:a4:18:a2:fa:84:
9a:cf:a5:89:77:1d:e1:d3:dd:91:7d:8b:f4:94:cb:
22:87:0a:63:90:b3:49:23:4c:cb:a2:10:50:9c:dd:
ea:e1:13:98:69:62:11:18:50:53:5f:c2:c9:06:79:
fd:8d:b8:37:bf:82:f4:5c:c9:e2:74:24:56:c1:c8:
46:ec:7f:ad:94:0a:6c:39:d8:89:5c:b4:47:7e:f4:
99:79:88:89:05:67:e5:e8:a7:cd:46:39:ce:b0:00:
d9:30:8d:71:34:92:03:a5:63:64:e3:7c:e3:d4:d8:
90:4d:49:61:a4:2e:05:76:25:8a:8b:7b:33:37:5e:
d0:10:49:01:54:93:73:2e:e4:a1:9c:f8:35:ee:c5:
9c:8a:00:11:2c:fd:1c:ab:c7:6b:3f:ee:4b:bb:b1:
09:2b:55:5e:3c:f1:4a:0a:22:fd:e8:08:65:78:33:
e0:7c:6e:5f:a2:fb:f8:45:e7:09:7c:ca:4a:a5:3c:
f5:ff:2f:30:82:dd:3e:4b:50:17:23:3a:c4:7c:97:
a9:ea:57:e6:5d:b7:3b:9e:cd:77:19:4e:c1:8e:c2:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:60:0F:3D:36:08:37:42:86:D9:88:CD:D0:06:F8:4B:8E:67:BF:86
X509v3 Authority Key Identifier:
keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b4:1f:ca:75:7a:e2:ac:5f:23:34:f6:23:4a:9c:1d:ef:2f:
38:90:b2:05:9d:b4:2e:a0:c3:85:8f:60:b2:1d:bb:48:4e:1e:
47:1b:b7:66:ce:9e:51:0e:d2:ef:2d:27:06:76:f8:a0:d5:ff:
8d:d1:66:06:1a:5d:b8:e1:3b:b3:25:91:c9:0a:ca:5e:65:7a:
29:01:c2:c0:44:21:7b:99:11:ba:c3:9f:de:e4:5a:5d:a8:92:
54:6e:87:f3:43:62:be:53:78:67:0c:d4:bf:e4:a0:2c:99:db:
3e:72:33:1f:28:a2:42:62:8a:06:0e:53:72:c3:c9:85:d8:a5:
47:f5:fb:5b:ce:e1:a2:20:51:43:f4:d8:5d:3b:bd:22:a9:63:
9f:9c:a2:55:90:37:6c:2c:39:f8:43:37:54:d9:4c:7a:21:64:
e2:34:20:c9:07:16:a3:b4:3c:83:79:3b:6b:cd:03:1c:41:69:
80:c3:3c:d0:ae:98:6d:13:77:e2:03:4a:4a:40:07:af:d5:36:
4a:b1:16:35:91:c8:f3:a7:44:29:9c:ad:40:16:d4:c6:08:23:
a2:7c:d6:84:7f:ef:79:b2:09:50:62:4d:d4:68:fa:17:fb:50:
e4:5d:11:f3:49:00:e0:be:fe:98:c1:05:ae:a3:c8:a8:4c:7f:
ca:58:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:05:50 2025 by rpki-client