Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
File: D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft (raw, json)
Hash identifier: UXU5qpTnr8tarXcO3zKvnc1xWNT68E769iYNv5xgejc=
Subject key identifier: 91:50:D9:CE:F3:EC:F8:B3:E5:C6:30:25:53:26:E2:03:3B:5B:A4:C9
Authority key identifier: D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A
Certificate issuer: /CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
Certificate serial: 5C4C31DC4333B3A0C24D8700ECDB5B351DD53FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
Manifest number: 02DD
Signing time: Tue 11 Nov 2025 03:22:43 +0000
Manifest this update: Tue 11 Nov 2025 03:17:43 +0000
Manifest next update: Wed 12 Nov 2025 04:16:43 +0000
Files and hashes: 1: D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl (hash: /mNrUrxqVqsbte3JtGCfjmuoXWfzlc9ZYAghmqm0yNQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl
rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:4c:31:dc:43:33:b3:a0:c2:4d:87:00:ec:db:5b:35:1d:d5:3f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
Validity
Not Before: Nov 11 03:17:43 2025 GMT
Not After : Nov 12 04:16:43 2025 GMT
Subject: CN=9150D9CEF3ECF8B3E5C630255326E2033B5BA4C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:56:f7:3d:f5:c7:5a:3c:91:1f:8b:6d:83:
5d:f1:51:e7:f3:10:1a:79:9a:69:e3:68:58:5d:f8:
6d:92:3f:e7:50:da:52:b6:11:47:b2:be:a8:b8:8e:
15:f9:e3:e6:ec:03:7f:2b:99:5a:24:c7:b8:eb:7e:
8f:98:96:6b:5a:1e:58:37:a8:12:96:cf:d3:b5:5f:
09:77:06:47:86:c7:89:28:f8:63:91:6d:95:d6:b6:
79:45:73:26:84:dd:48:d1:c0:4e:2b:0d:14:6d:3f:
24:c1:65:dd:86:60:56:28:ec:24:14:a4:6e:8d:7a:
2b:65:85:df:f3:8c:9d:69:09:ab:e0:61:52:d2:29:
ad:f7:7b:be:48:05:65:88:b1:03:8c:e4:f3:4d:e3:
01:63:14:da:7f:33:4f:ec:76:d2:2e:83:2f:65:2a:
0d:e6:81:cd:5d:bd:0d:69:d8:51:73:1b:ac:a4:32:
43:6e:ae:e1:bf:60:b0:b5:64:6d:ba:f2:51:42:52:
dc:58:9d:8c:5b:d8:15:be:f0:9e:56:d4:1c:98:1c:
80:7a:e5:85:7e:9c:de:6e:94:38:f1:22:f6:20:ab:
6b:0c:6b:b6:d7:91:0e:66:dc:ef:e4:b4:5e:67:b9:
e2:2c:4d:b7:3b:96:c2:31:a2:cf:7e:0c:d5:af:86:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:50:D9:CE:F3:EC:F8:B3:E5:C6:30:25:53:26:E2:03:3B:5B:A4:C9
X509v3 Authority Key Identifier:
keyid:D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d2:22:57:ed:0c:2b:65:86:73:7e:c1:e5:0a:dd:9f:ec:20:
64:09:b1:14:69:bd:f0:9d:7f:53:d3:76:73:b4:29:8d:08:d6:
8c:79:09:49:0e:87:17:bf:1d:6d:94:c5:a7:2f:b8:ee:d6:54:
4f:4e:eb:ef:15:82:a8:21:b6:a5:59:f9:7b:d7:4d:50:94:53:
2a:df:5d:db:cb:d1:fb:92:01:c2:72:df:3a:47:83:44:1f:72:
57:c0:f6:f5:26:b5:53:2f:1d:fa:51:ca:90:8e:f4:ee:a0:3d:
f5:79:ae:4c:e5:c5:54:9f:c3:6f:4a:b3:5c:2e:81:95:99:27:
6a:ca:d6:e0:c4:5a:8c:f4:d4:3f:e6:2f:73:e4:c2:60:97:24:
10:94:d2:45:d9:6c:d5:60:98:43:5d:ba:80:94:0f:d1:12:9a:
83:3b:7c:e2:86:b9:c1:24:26:2a:80:e2:4a:8d:f2:35:c8:14:
f7:c6:76:c3:6e:af:95:48:b9:cd:ec:17:66:cc:4a:61:9c:d1:
08:ed:35:1f:90:2e:6d:7b:65:d8:7a:4c:eb:29:a7:fe:08:9b:
ea:11:7a:40:85:62:5c:e4:c2:7b:33:d3:16:4b:38:37:a0:2f:
1a:93:70:21:9b:05:07:f5:35:26:36:17:ba:0f:b8:fd:8f:13:
49:1f:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:10 2025 by rpki-client