Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: OGdZfesj28/Hyou1AThfMI33HIaLWB2pU3YAz6Nd+m4=
Subject key identifier: 06:DC:AE:6A:11:B2:8D:B2:B1:A7:90:C3:09:6C:C7:1B:FC:6D:2A:C3
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 2F8129F9D3156F69B1AF60B9879E942B368F1B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 019E
Signing time: Sat 30 Aug 2025 19:04:12 +0000
Manifest this update: Sat 30 Aug 2025 18:59:12 +0000
Manifest next update: Sun 31 Aug 2025 21:41:12 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: VYHEkGbLnxRWJ3X9nGduQFVh6Ut0G3Ya4zX82jXDDhU=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 Aug 2025 21:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:81:29:f9:d3:15:6f:69:b1:af:60:b9:87:9e:94:2b:36:8f:1b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Aug 30 18:59:12 2025 GMT
Not After : Aug 31 21:41:12 2025 GMT
Subject: CN=06DCAE6A11B28DB2B1A790C3096CC71BFC6D2AC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:3c:aa:a4:42:09:0e:95:8e:ba:29:bc:b8:
f4:c0:14:ec:f1:ca:45:d1:58:63:f0:c0:d2:59:c6:
fe:8c:2e:ad:b6:44:0c:a8:c6:d2:e3:85:95:5d:ef:
33:12:f9:ee:48:da:59:76:0f:e4:69:7b:04:4d:39:
8b:bb:96:9c:78:20:09:3e:7e:e2:1e:c2:77:55:3c:
e8:85:15:be:a0:6d:af:47:53:8f:80:6e:ae:ee:fe:
d2:f5:30:04:88:23:70:bd:a8:24:41:66:e2:c9:f6:
3c:35:b9:83:2c:be:39:ab:83:85:6d:fe:c4:1f:b1:
1f:f7:0e:a1:e8:2b:3e:4d:9a:84:af:31:d1:9b:4f:
a0:bc:ed:12:9c:40:60:cb:ec:43:ac:22:d1:7e:6e:
a9:e3:68:ab:25:6f:48:6a:78:ae:39:62:32:09:8e:
e6:49:24:bd:ef:91:19:15:bf:4c:6c:45:b6:9c:6f:
9d:65:f8:78:bc:0f:10:87:d0:f5:87:b0:c3:df:02:
9f:a7:ef:a3:8e:86:38:ad:3f:56:de:68:1e:8d:e1:
64:1f:95:43:2c:8a:af:a3:d1:43:50:f2:d2:c5:dc:
2e:af:8a:c7:a0:f8:7f:ef:d2:92:8e:72:32:bc:b6:
ed:59:ed:7f:6f:49:f3:3d:fa:1d:cb:7a:fd:e0:6b:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DC:AE:6A:11:B2:8D:B2:B1:A7:90:C3:09:6C:C7:1B:FC:6D:2A:C3
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d6:a7:a0:45:2e:ad:41:9b:b3:68:7e:3a:6c:0d:fe:d5:75:
64:85:76:de:50:a4:b3:97:87:c3:3b:0f:c4:77:a0:ef:e9:28:
1f:09:cd:6a:a5:34:c5:b5:27:78:9b:52:89:18:6d:65:64:b6:
57:1c:b7:e6:23:04:1c:33:95:d8:8a:d7:54:0d:b5:72:cf:5a:
02:3b:b1:0f:17:a7:50:fb:1f:af:99:38:97:6e:e2:17:2c:e5:
4e:15:8a:2a:82:5b:9f:a0:f7:79:67:b0:60:18:50:ff:2c:67:
86:02:65:1f:2b:f8:e4:0c:3f:7a:30:75:b4:6a:62:a4:49:6d:
2c:a1:a3:f0:f9:fd:36:4b:2c:af:79:84:3a:d4:22:9c:02:45:
dc:bb:32:3a:89:f9:c9:e5:10:18:44:17:51:56:a5:54:ee:df:
ad:7f:53:04:85:56:b5:94:cc:b8:4d:57:4f:34:9c:72:85:17:
a3:d3:6f:29:74:3e:06:11:54:c5:06:c4:8d:52:0c:14:15:1b:
99:85:f3:01:85:60:0b:0b:c1:9a:c5:8b:70:59:0d:ac:99:19:
da:82:dc:41:1a:03:f3:31:99:be:36:36:7e:3e:8f:d9:62:71:
d5:30:95:93:fe:f1:2b:01:ae:07:f3:69:91:0e:a0:03:80:68:
6b:c7:83:6c
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUL4Ep+dMVb2mxr2C5h56UKzaPGyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNTA4MzAxODU5MTJaFw0yNTA4MzEyMTQxMTJaMDMxMTAvBgNV
BAMTKDA2RENBRTZBMTFCMjhEQjJCMUE3OTBDMzA5NkNDNzFCRkM2RDJBQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLjyqpEIJDpWOuim8uPTAFOzx
ykXRWGPwwNJZxv6MLq22RAyoxtLjhZVd7zMS+e5I2ll2D+RpewRNOYu7lpx4IAk+
fuIewndVPOiFFb6gba9HU4+Abq7u/tL1MASII3C9qCRBZuLJ9jw1uYMsvjmrg4Vt
/sQfsR/3DqHoKz5NmoSvMdGbT6C87RKcQGDL7EOsItF+bqnjaKslb0hqeK45YjIJ
juZJJL3vkRkVv0xsRbacb51l+Hi8DxCH0PWHsMPfAp+n76OOhjitP1beaB6N4WQf
lUMsiq+j0UNQ8tLF3C6viseg+H/v0pKOcjK8tu1Z7X9vSfM9+h3Lev3gaxhtAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUBtyuahGyjbKxp5DDCWzHG/xtKsMwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAmNanoEUurUGbs2h+OmwN/tV1ZIV23lCks5eHwzsPxHeg7+koHwnNaqU0
xbUneJtSiRhtZWS2Vxy35iMEHDOV2IrXVA21cs9aAjuxDxenUPsfr5k4l27iFyzl
ThWKKoJbn6D3eWewYBhQ/yxnhgJlHyv45Aw/ejB1tGpipEltLKGj8Pn9Nkssr3mE
OtQinAJF3LsyOon5yeUQGEQXUValVO7frX9TBIVWtZTMuE1XTzSccoUXo9NvKXQ+
BhFUxQbEjVIMFBUbmYXzAYVgCwvBmsWLcFkNrJkZ2oLcQRoD8zGZvjY2fj6P2WJx
1TCVk/7xKwGuB/NpkQ6gA4Boa8eDbA==
-----END CERTIFICATE-----
Generated at Sun Aug 31 13:57:25 2025 by rpki-client