Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: hc4oY4zh5Av+Bk1Qz6c+Fq/yJJLcopGmZu7YfRyEeG0=
Subject key identifier: E9:E5:5C:92:B9:C8:35:B0:9A:2F:29:D0:0F:07:4E:DD:B8:D1:53:F3
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 2CD6FF6C979AA38814D44A9B9059BC08F76C6D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0204
Signing time: Sat 15 Nov 2025 12:03:33 +0000
Manifest this update: Sat 15 Nov 2025 11:58:33 +0000
Manifest next update: Sun 16 Nov 2025 15:33:33 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: +fPQaBNAySPH6PnoJWsdnmTNi0SDDBupLmziZlWI5ZQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Nov 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d6:ff:6c:97:9a:a3:88:14:d4:4a:9b:90:59:bc:08:f7:6c:6d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Nov 15 11:58:33 2025 GMT
Not After : Nov 16 15:33:33 2025 GMT
Subject: CN=E9E55C92B9C835B09A2F29D00F074EDDB8D153F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:17:2a:c1:12:4d:f3:c1:4c:a7:e5:06:e8:
6c:cf:92:7b:d7:08:18:06:b1:59:5d:bf:a6:53:aa:
96:5b:63:0b:96:96:c4:43:96:c0:31:b5:f3:9a:d0:
3e:27:1e:f5:47:7e:b7:0a:fa:13:cb:13:da:18:23:
c9:12:99:72:e6:a5:ba:42:f5:34:9a:68:12:41:d5:
9e:f6:24:6d:73:6b:f9:8e:4e:2a:d8:48:5a:b2:c1:
ba:a0:e0:5b:75:fb:40:26:10:b1:a1:21:3a:04:d6:
f3:e2:46:52:9e:f0:3e:84:c4:78:ad:cd:7f:b6:6e:
0b:99:ef:90:c0:e2:4e:79:19:8b:29:8d:d6:7a:3f:
70:ae:6a:d7:77:e1:dc:02:ec:ec:86:cf:68:8a:1b:
41:3c:39:b3:09:e7:07:9e:a5:88:10:ac:b0:a0:62:
7c:08:8c:0b:f9:c9:12:4b:eb:51:13:3d:d1:d4:c8:
5a:a4:8b:21:26:c6:8c:2f:7f:2d:b3:c8:9a:0f:19:
67:a5:a6:fe:fa:c1:d4:d6:61:0f:af:5e:75:33:5d:
1e:66:4d:29:22:1e:ac:26:88:78:1b:e3:34:6e:b1:
54:98:af:fb:f8:73:2e:d4:4e:dd:ba:66:ff:0c:85:
3e:98:14:24:88:ef:da:ff:dd:19:e8:2b:96:df:ca:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E5:5C:92:B9:C8:35:B0:9A:2F:29:D0:0F:07:4E:DD:B8:D1:53:F3
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e2:cd:b0:db:1b:ab:27:c4:e9:13:85:86:38:18:4a:81:d3:
04:b7:01:41:14:8d:da:30:67:a0:2b:0b:84:d4:ce:15:27:2c:
f3:2a:8b:67:21:ee:5b:aa:a7:97:90:ad:8c:83:f5:c6:e5:5c:
da:0f:ab:ef:a2:ec:43:b3:3f:50:4b:9e:5c:bb:db:a0:8b:ac:
82:5f:c3:f5:f9:59:36:4a:94:0c:fa:f9:74:8c:39:f5:dc:f5:
b5:41:b6:c0:eb:a2:e2:2a:62:73:82:85:08:37:fe:63:7e:0e:
de:3e:75:ef:5d:6c:c2:e6:5e:7a:74:fc:b3:95:5c:68:f2:47:
51:5b:24:d8:41:1b:b1:8b:26:08:12:2c:b0:33:c2:6d:da:0c:
6f:df:7f:30:92:60:44:36:89:f0:17:30:45:09:57:85:dc:eb:
07:48:4f:8f:e2:78:e2:70:62:63:d5:e1:1f:2f:a9:15:dc:c6:
12:09:97:70:c3:af:d9:3f:d7:b3:72:1d:79:ac:51:23:ea:84:
35:90:c0:06:55:2b:6b:55:27:42:6b:0d:88:b2:62:1d:66:af:
d2:e7:dc:a1:14:8d:04:78:66:76:f9:eb:20:2a:7c:aa:73:96:
62:87:ac:45:d2:51:6c:a2:73:28:10:7f:88:85:90:2a:e2:5f:
61:20:50:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 15 14:10:30 2025 by rpki-client