Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
File: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft (raw, json)
Hash identifier: UAcJMWqc6pbJQaStjWjhUxxi1IRWPdwDvz7HbS+PcNg=
Subject key identifier: 17:81:47:E4:58:A9:26:E9:D5:86:56:94:74:37:D6:D2:54:90:32:62
Authority key identifier: DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
Certificate issuer: /CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Certificate serial: 7B32A028A549FD2388F92F939498822D4FD962AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject info access: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
Manifest number: 0D
Signing time: Thu 06 Nov 2025 08:38:23 +0000
Manifest this update: Thu 06 Nov 2025 08:33:23 +0000
Manifest next update: Fri 07 Nov 2025 12:05:23 +0000
Files and hashes: 1: AS60900.asa (hash: KnMr4iCB+cj1naex0F8845D019k0F96IV9G+SJAi9jQ=)
2: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl (hash: Y1Dvh2CQqYzHs8ZNa/ityhShMmqp2ZkORukuiLOVmVE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:32:a0:28:a5:49:fd:23:88:f9:2f:93:94:98:82:2d:4f:d9:62:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Validity
Not Before: Nov 6 08:33:23 2025 GMT
Not After : Nov 7 12:05:23 2025 GMT
Subject: CN=178147E458A926E9D58656947437D6D254903262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:ef:7a:88:91:8d:d9:9c:a4:90:e3:5b:a5:
76:e5:10:46:b9:9e:c2:7a:31:9d:16:59:2c:eb:c3:
f1:f0:ea:86:20:20:d2:2e:47:dc:f4:93:ef:ed:05:
7f:d2:15:63:46:36:ee:c0:9f:10:3e:e1:3a:c7:20:
60:1c:fd:a4:82:85:ab:6c:3b:aa:d5:91:78:3d:3c:
0b:db:a6:d6:9d:14:9c:82:bd:7a:ee:e2:c5:b2:64:
fa:91:e7:24:45:6a:d7:f9:5a:a1:73:01:6c:92:fd:
f1:4d:d2:0a:e3:97:8a:59:89:86:f0:b1:3a:7b:ea:
8e:97:07:2f:08:3e:69:8f:e9:e4:a2:82:82:c9:43:
ac:16:65:de:c5:ea:c9:0f:48:1e:71:12:7e:d0:8b:
69:8e:d5:3b:51:e0:2a:dc:61:98:34:14:f4:e4:d4:
bc:61:12:c8:6d:69:b2:74:fa:50:4a:97:7b:96:e4:
09:7f:09:46:22:fa:ad:de:87:bb:02:c1:52:9f:18:
f0:ac:11:65:21:3a:94:17:05:c8:13:d5:e8:bf:07:
3d:50:39:de:aa:67:97:ac:c7:90:25:71:fe:cf:6a:
84:f3:9e:82:7b:31:87:94:9c:45:34:ea:36:cf:92:
9d:90:81:69:29:eb:94:16:25:ef:ee:30:06:8b:d1:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:81:47:E4:58:A9:26:E9:D5:86:56:94:74:37:D6:D2:54:90:32:62
X509v3 Authority Key Identifier:
keyid:DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9b:96:f5:14:97:81:08:aa:e9:d4:7f:04:aa:09:c6:c5:2d:
4d:56:98:8c:83:1a:0d:a0:ca:fe:bd:a3:78:66:17:83:38:fa:
79:f3:d6:0e:ef:54:7a:76:9a:b9:9d:1b:03:eb:40:05:5e:c4:
ef:66:ed:94:bf:48:ca:ef:71:3a:ac:2d:71:70:dc:3c:fe:79:
cf:66:96:7f:46:f2:d6:9d:b8:c8:4f:bd:a0:0f:b1:0c:71:10:
3c:90:73:9a:8b:6c:a0:d1:a9:57:79:e2:11:8c:0f:fa:a2:8c:
bd:ac:18:ed:09:e0:36:6f:16:d7:50:a1:df:a7:28:ae:ac:c5:
18:70:5d:5b:cd:28:93:d9:b8:c1:da:b0:6e:f0:c8:73:f5:ab:
f0:13:d2:9a:31:10:ba:eb:15:52:05:83:27:1c:c4:a1:f7:8a:
5b:06:a9:ff:ae:6f:63:15:76:bd:7c:8d:13:32:15:af:5f:81:
da:fa:72:93:0d:81:5a:df:f5:7e:0c:96:19:bc:90:64:8c:9d:
05:64:70:4c:07:c3:ca:2e:eb:bb:76:c8:22:49:32:90:d4:6b:
4b:c1:c0:f3:c0:b9:5d:7a:03:99:b0:34:53:68:45:25:fa:d4:
3a:d3:36:f2:0b:f7:f0:9a:5d:bb:e1:d5:17:60:b9:53:fe:b9:
63:60:b3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 13:03:32 2025 by rpki-client