Manifest
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
File: arin-rpki-ta.mft (raw, json)
Hash identifier: SbIcc71jed/ysnNuJcB0YkbtQ34U3oythi5XYjD00iw=
Subject key identifier: 06:A2:43:F2:4D:66:97:FB:C5:D9:95:FC:F6:F1:1E:10:32:BF:F8:F4
Authority key identifier: 13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
Certificate issuer: /CN=arin-rpki-ta
Certificate serial: 010D0C9F43285848C5E5DBA9CFD633721C34B580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
Manifest number: 010D0C9F43285848C5E5DBB42128C48930FF8480
Signing time: Tue 04 Feb 2025 17:24:16 +0000
Manifest this update: Tue 04 Feb 2025 17:24:16 +0000
Manifest next update: Sat 04 Oct 2025 16:24:16 +0000
Files and hashes: 1: 5e4a23ea-e80a-403e-b08c-2171da2157d3.cer (hash: 10cfyO0TCtQaIkB73aFkQkL93zGVjF02BAArJUvNOBM=)
2: arin-rpki-ta.crl (hash: gx++NUlewUKZYFFCm06wGoRmev5JYZ1PnPsFLTx0B74=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 04 Oct 2025 16:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:e5:db:a9:cf:d6:33:72:1c:34:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=arin-rpki-ta
Validity
Not Before: Feb 4 17:24:16 2025 GMT
Not After : Oct 4 16:24:16 2025 GMT
Subject: CN=277edc69-48d7-421f-8b23-1ae557241e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:6e:45:63:77:a9:14:19:f9:38:d5:c4:91:
d3:4b:fc:bd:e5:f3:ce:8e:67:9c:f0:19:ee:bf:d0:
2d:be:18:68:63:3b:67:9d:e3:b0:29:a0:1b:b8:fc:
0a:fe:98:d0:91:24:4a:79:aa:bb:5d:aa:b3:57:d0:
5d:03:4a:4a:b1:df:e2:7d:ab:f7:02:88:04:7c:2e:
cb:1d:a9:13:a5:8e:52:47:8d:a3:7b:40:21:fb:9b:
5f:4d:93:b3:37:89:5a:fd:0f:9b:9a:7b:b3:26:52:
e2:ac:af:66:fa:01:48:7e:ba:ba:13:35:73:4b:81:
a2:d7:98:70:ce:ba:07:63:70:da:5d:2d:d5:ef:f2:
60:13:28:c2:8f:0b:2c:2e:a4:52:43:a1:8d:97:6d:
e5:47:fd:8e:4b:a5:2a:f7:55:02:1a:58:d8:01:90:
a0:1f:3c:bd:3f:fb:7f:95:7a:58:ff:3f:22:18:a2:
6e:9e:7a:6a:cf:6d:2a:9c:61:85:f3:11:97:43:7b:
ec:b8:e4:65:45:84:b1:63:09:3f:36:63:18:3a:b9:
94:7c:b7:88:91:a3:6e:d8:e1:9e:62:3d:2c:3e:95:
e4:4c:5e:b1:d5:79:42:bb:de:6c:be:f9:eb:13:4e:
e3:78:09:21:5f:ea:22:29:2a:45:5d:a7:7d:04:92:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A2:43:F2:4D:66:97:FB:C5:D9:95:FC:F6:F1:1E:10:32:BF:F8:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
X509v3 Authority Key Identifier:
keyid:13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:ed:77:4f:8d:8c:44:1a:8c:1e:68:65:96:ea:d0:4b:78:11:
59:a8:98:4d:73:4c:8e:1a:6d:3b:93:41:9d:de:f4:4e:3d:ef:
11:b4:ed:a3:d3:db:32:fb:53:9f:10:8c:fa:13:a2:07:2c:98:
66:c9:ba:51:21:0c:da:8b:9d:53:d7:ed:d6:9d:2f:8b:79:ca:
65:59:c9:b4:67:45:bb:8f:b9:24:6d:7d:b4:1e:e0:42:98:70:
ac:de:70:b4:2a:a1:9a:7a:6a:dc:c7:32:83:33:0e:fa:2a:6d:
fa:4a:22:f6:a8:d5:e7:ad:af:29:62:75:b0:dc:45:cd:53:cc:
e8:ea:59:16:54:6f:a3:35:d2:3e:a1:2a:77:01:0c:ea:e3:df:
79:7d:18:b8:4b:f0:65:1c:1b:b2:19:15:3e:78:5d:2e:66:be:
c9:f0:83:41:43:59:eb:39:1f:66:b5:c7:ce:27:5e:ee:06:c1:
b5:41:d5:49:5a:d2:7f:f1:b7:9b:76:bb:0a:7d:75:e9:8d:63:
0c:b2:ce:08:ec:ab:ea:05:bd:bb:db:8e:12:28:07:6c:c9:e0:
fc:0a:18:35:18:f5:73:34:df:1b:36:78:16:54:96:ae:c6:be:
a1:6e:d7:d3:ce:64:d4:f1:5d:1a:35:8a:e8:71:81:5c:66:52:
36:e0:fb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 02:09:24 2025 by rpki-client