Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: AFe20dCL6hRwlVQE9KH7ed6OsxMBTTBPpNMMV3w1OmQ=
Subject key identifier: 7D:15:9F:66:73:66:C7:F8:97:88:0D:BA:D0:6C:7E:1B:AD:7F:7C:36
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 600BE898A6D3508865F913E2FFF1649D0D3E788D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 01DE
Signing time: Fri 17 Oct 2025 16:57:23 +0000
Manifest this update: Fri 17 Oct 2025 16:52:23 +0000
Manifest next update: Sat 18 Oct 2025 19:08:23 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 6REWjSqneDmmdUaVWi9Yy88gwDsQ6es8eVUItUYbl+s=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 19:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:0b:e8:98:a6:d3:50:88:65:f9:13:e2:ff:f1:64:9d:0d:3e:78:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Oct 17 16:52:23 2025 GMT
Not After : Oct 18 19:08:23 2025 GMT
Subject: CN=7D159F667366C7F897880DBAD06C7E1BAD7F7C36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:b3:5c:bb:22:e1:dc:08:28:3e:24:89:3a:
94:6d:83:5e:ec:f6:63:c8:9d:93:e8:bb:82:2b:4c:
58:78:38:53:e8:5f:14:5b:18:da:ae:ef:3e:29:8f:
d6:e9:35:50:7a:0c:4b:f7:74:fc:fd:78:4b:4c:fc:
b6:5b:ce:24:b8:93:a2:df:45:66:18:37:59:43:75:
2a:90:4c:75:ee:db:23:0c:29:dc:8a:13:b6:ee:a3:
20:7e:e1:ae:1f:22:92:6e:90:72:74:83:ec:31:46:
e8:77:5c:4a:bb:88:f6:8a:ae:73:33:14:b2:de:49:
7d:48:d5:27:a8:8f:1e:70:ad:e7:3a:36:59:56:b0:
12:2e:c2:5d:a8:2c:07:50:5c:86:ec:83:27:48:00:
52:08:0b:a8:8d:3d:2c:6e:39:5a:5b:bf:37:60:86:
57:c2:9f:a9:b0:7c:ca:70:86:8b:81:8a:8c:61:ad:
92:00:da:ad:eb:5e:5c:83:40:c7:ad:73:bd:00:13:
4b:be:96:77:83:23:6f:10:71:d4:9d:78:f5:74:e1:
aa:81:e1:6f:81:06:1a:9c:db:c2:df:6a:b7:bc:b4:
39:72:7d:06:72:56:af:69:e9:03:40:6a:33:bf:1f:
06:4a:b8:39:ef:76:d0:f3:19:65:31:bc:10:55:37:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:15:9F:66:73:66:C7:F8:97:88:0D:BA:D0:6C:7E:1B:AD:7F:7C:36
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:96:34:35:56:01:6e:0b:02:e1:fc:1f:56:ee:f4:7d:e2:85:
c1:86:91:a4:f0:58:63:43:36:15:17:4e:36:78:54:0b:ae:2c:
0d:ff:9e:41:3e:73:de:3a:d8:e1:c7:d0:cf:09:49:da:ca:e8:
95:1b:96:c6:a5:3d:96:dc:76:59:be:9c:73:f3:38:0c:37:14:
f5:15:ae:65:ed:ce:a7:60:2a:eb:e9:82:26:e4:85:bf:9c:59:
b6:12:a3:65:44:3d:29:75:2b:d4:ae:b8:03:85:44:9a:76:3a:
bf:0e:c8:75:d7:23:6b:41:c2:01:b6:3f:a8:a6:fa:1b:50:34:
ed:6c:63:46:17:ec:a4:01:39:45:cc:52:35:fe:a2:6f:3e:85:
21:d5:33:df:8d:26:c0:42:b1:9b:f1:86:03:26:5f:45:86:70:
98:0c:5e:28:a8:29:ca:a2:03:12:06:5f:1e:d2:69:b5:17:6f:
9b:0f:87:97:fb:66:0e:56:11:e0:2a:07:59:2f:d5:3f:de:b7:
f0:dd:ee:c0:41:c3:ab:28:b3:22:ac:a3:a5:41:0e:74:48:b3:
93:fa:f0:f4:96:c3:49:2c:ff:7f:27:99:6d:0d:bd:40:c8:4c:
6a:f5:f1:0d:ee:d9:aa:18:76:dc:32:da:77:e3:be:c6:81:75:
b2:a4:37:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 11:13:06 2025 by rpki-client