Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File: 3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier: Zp5nOrZUpOyH0j+/8twOPFdfpOSeZCzVvKGllHeqeLE=
Subject key identifier: 8C:43:72:34:6D:0D:41:FE:24:05:A3:21:D3:9E:B2:D6:72:5E:73:6C
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer: /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial: 077220213CE21F4827F26B8484BBA7B870281761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number: 0371
Signing time: Mon 10 Nov 2025 21:02:32 +0000
Manifest this update: Mon 10 Nov 2025 20:57:32 +0000
Manifest next update: Tue 11 Nov 2025 22:20:32 +0000
Files and hashes: 1: AS59678.asa (hash: MrrWJ9l8lgWoC35oKfd53MWxXqNmbveRovZsM7Giidk=)
2: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: 0clcEAI5DOG0CsXBjGV4AeRcMaUqiU+o2pYogLI7KsU=)
3: AS48606.asa (hash: 5NWb4N+D0OquyokzVrf8CTeFzp8KBWxtJJ16mYNyMNg=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 22:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:72:20:21:3c:e2:1f:48:27:f2:6b:84:84:bb:a7:b8:70:28:17:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
Validity
Not Before: Nov 10 20:57:32 2025 GMT
Not After : Nov 11 22:20:32 2025 GMT
Subject: CN=8C4372346D0D41FE2405A321D39EB2D6725E736C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:51:ad:9b:24:02:fd:d2:85:c8:b6:91:b8:
a0:39:4d:95:04:14:c6:5d:f9:2e:dc:1d:35:dc:93:
76:90:63:4e:2e:00:8b:0f:85:ca:d4:48:19:0c:98:
4d:75:cc:bf:66:31:11:5d:62:53:a5:71:92:c0:19:
ff:e6:e6:a9:7a:e4:ea:1b:6a:ee:65:24:50:2a:bd:
47:5e:9d:8c:79:d1:75:a7:6d:0c:6d:1e:be:05:f6:
eb:50:ad:7d:52:be:1d:cd:20:ab:95:a3:40:61:18:
0f:e8:12:c1:49:92:40:64:be:43:77:8d:b0:fe:92:
c4:af:5e:2c:a1:07:4c:97:dc:0f:95:d2:68:a1:2f:
c5:02:2f:9c:f6:b4:26:15:c0:07:3a:31:57:52:35:
2c:cc:d0:06:c2:9a:09:3b:10:ac:92:87:6e:3e:2d:
1c:bc:cd:d2:34:8a:80:0b:7b:37:2e:0d:0d:c8:0b:
bc:e8:25:6c:2d:a5:92:0d:11:22:83:b3:d6:7e:61:
8d:c5:db:1b:4e:28:a5:ed:1c:9f:72:00:f5:88:bd:
db:4d:30:8d:a2:63:84:57:7e:a6:88:38:71:22:c2:
57:b4:20:e3:c5:d8:62:fa:da:a9:32:27:28:ad:71:
24:23:b4:82:d3:05:90:89:92:25:f1:fb:bf:c7:b8:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:43:72:34:6D:0D:41:FE:24:05:A3:21:D3:9E:B2:D6:72:5E:73:6C
X509v3 Authority Key Identifier:
keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b4:40:c9:8d:55:47:19:bb:6f:d1:fa:90:4e:16:8c:2d:94:
dd:b9:93:8e:0d:67:23:9b:ae:02:42:50:e0:b6:a4:b6:24:07:
bf:5a:8e:ae:9a:5f:b1:9b:fe:83:9c:4d:0c:85:a1:98:57:9f:
d4:2a:fd:6d:69:be:39:53:ff:6c:03:a0:fc:b3:12:07:75:b5:
ae:81:51:b5:b7:43:a5:c9:13:21:94:fd:67:6f:37:3c:89:f1:
d5:4c:2a:5b:65:34:9e:76:f2:00:c4:7c:04:19:fb:fc:7b:b1:
43:9e:a8:90:c7:95:15:fe:78:ee:65:af:50:02:be:52:e6:b1:
aa:a7:69:50:c4:1a:b5:d1:b8:67:05:6b:ad:56:50:dd:41:7c:
0c:22:b2:02:df:5c:41:f3:db:91:22:20:54:3b:51:d0:28:2c:
cd:54:e8:ef:77:0e:1c:cc:26:dd:c3:bb:7c:ee:11:38:e8:99:
5e:08:51:d9:f8:b5:fd:4f:8d:7a:e1:1c:9c:9a:99:94:4c:da:
4a:ef:45:2d:85:b7:5f:da:b2:be:30:76:0c:27:c5:44:bd:3d:
f3:10:30:fa:38:15:31:f0:25:ae:c8:4f:b0:83:70:47:81:cb:
b0:b7:71:f5:5a:02:5e:21:68:52:80:63:0f:96:54:65:9a:a7:
38:9e:db:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:19 2025 by rpki-client