Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 5XETDtawXfxQicLidGwNZNtVKuROBtc4kGdaJtajur8=
Subject key identifier: 43:92:1A:58:33:CF:7D:A5:27:85:56:56:E7:F2:15:71:83:17:7A:17
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 667D740AAB66FA344899FB705B038902C175EB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 014D
Signing time: Tue 01 Jul 2025 07:16:32 +0000
Manifest this update: Tue 01 Jul 2025 07:11:32 +0000
Manifest next update: Wed 02 Jul 2025 07:31:32 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Ta61qaOjxR7htPEwhzBNWpuwAEEfl8yd6GNM83J+OCY=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: y9YmktivJBbKPHh8hEM7zR9L9cZ6v0kH5w91NUKXhuA=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:7d:74:0a:ab:66:fa:34:48:99:fb:70:5b:03:89:02:c1:75:eb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jul 1 07:11:32 2025 GMT
Not After : Jul 2 07:31:32 2025 GMT
Subject: CN=43921A5833CF7DA527855656E7F2157183177A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:1d:23:a7:8a:37:ef:31:dd:d2:95:43:b5:
f2:0e:f8:22:e8:17:6e:7a:71:84:f6:18:3c:a8:6a:
76:d6:ae:85:45:37:c9:29:bc:6c:b4:01:10:c0:41:
fd:66:db:f8:e7:0b:5b:83:d4:56:38:8d:f4:39:ab:
91:cf:fe:97:c8:67:bd:ea:9f:f5:7f:9f:c8:59:23:
dc:e2:5c:e3:32:0f:73:13:f4:99:4e:6e:b1:7e:11:
96:06:e1:b3:7d:af:7b:bb:97:2b:aa:6f:ce:88:08:
a0:c3:0f:b8:95:de:36:d3:5c:39:b5:a0:e6:20:a2:
4e:7e:d2:97:eb:5a:ba:3f:53:fe:b4:1e:b8:3a:ff:
06:20:d8:3f:f9:53:cb:b7:d2:38:55:ee:0d:86:d3:
f2:d2:4f:10:c5:9a:65:15:17:d4:37:13:72:f0:c4:
73:bf:ec:40:78:40:4b:6c:ce:60:ec:29:64:27:56:
65:af:5f:ad:ac:25:29:a2:5b:b4:1c:5f:e4:5e:f4:
48:dc:37:1e:40:52:77:25:fa:b9:78:29:ab:cb:25:
98:5c:44:9a:39:70:59:36:27:e3:1b:01:ad:8f:08:
6e:24:fe:c5:cf:e6:31:d3:86:f8:96:85:23:2a:68:
6b:be:06:a7:81:6f:dc:23:5d:f4:ae:4c:1b:80:70:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:1A:58:33:CF:7D:A5:27:85:56:56:E7:F2:15:71:83:17:7A:17
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a4:72:42:0f:56:23:a8:98:a3:2c:49:b7:7a:fc:c2:de:3f:
11:f8:39:9e:63:98:5f:62:73:5c:04:04:70:64:e6:5d:0d:a3:
7e:b6:d4:74:91:6d:7f:e1:b2:d7:37:24:9a:25:82:d7:9c:4b:
7e:dd:83:83:fc:73:0f:76:eb:c0:1a:9c:cd:f6:90:bf:be:e4:
64:e2:37:c1:31:91:f7:27:4a:51:e4:e0:2a:c1:71:9f:17:cb:
6e:a3:15:c8:dc:58:a5:13:b9:64:6e:ec:c2:64:5c:2c:85:95:
9b:49:bf:5a:e5:99:af:65:08:f9:4f:a5:fe:0b:88:64:1c:b3:
c6:1b:7a:2c:8d:33:2c:d6:6f:3e:15:27:58:f3:b0:a1:8d:2f:
ef:21:2a:98:9e:f3:93:4a:44:e7:b3:62:17:ba:52:25:73:cd:
16:41:24:69:28:f9:82:81:d6:64:a5:d1:0f:fa:65:12:15:9c:
84:9d:e9:aa:41:8b:7f:28:1d:2b:31:a5:e1:82:20:83:51:a6:
f7:31:3a:dc:28:66:1e:b5:31:56:17:33:64:e2:d9:4b:94:90:
c0:8f:aa:ed:9b:7d:8f:ff:61:54:5a:7a:28:d0:21:d3:7f:5b:
f4:dd:f8:e2:d8:ef:bc:61:5b:59:b5:7c:e6:66:69:15:dd:3d:
81:20:7a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:49:15 2025 by rpki-client