Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
File: C1DC25C780E7A24817139D980A28A9781FA6A493.mft (raw, json)
Hash identifier: dFDV/BG7Dmoj3orp3sQL2TPyPHGAJAem3/bBmgp9DGg=
Subject key identifier: 52:3C:26:58:DD:31:7C:9D:F4:C0:C4:4A:9D:4E:90:A2:63:D1:28:AF
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Certificate issuer: /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial: 6D112903D434870F01A380602C69A74D1A73886C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
Manifest number: 88
Signing time: Sat 23 Aug 2025 00:39:03 +0000
Manifest this update: Sat 23 Aug 2025 00:34:03 +0000
Manifest next update: Sun 24 Aug 2025 03:47:03 +0000
Files and hashes: 1: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (hash: nBfJgos2zfzyALiaXlFvRvGKVpCZLf9hpeeX+QFHO6Q=)
2: C1DC25C780E7A24817139D980A28A9781FA6A493.crl (hash: 2rahaDdMPbc5PwfRX3UQXjuMWXeMoKJokVtdhRgn5nY=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:47:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:11:29:03:d4:34:87:0f:01:a3:80:60:2c:69:a7:4d:1a:73:88:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Validity
Not Before: Aug 23 00:34:03 2025 GMT
Not After : Aug 24 03:47:03 2025 GMT
Subject: CN=523C2658DD317C9DF4C0C44A9D4E90A263D128AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7f:bb:e0:a9:4c:92:9c:91:6d:92:15:d5:ba:
27:0d:d0:40:28:90:eb:55:bc:24:01:96:22:81:8e:
04:f2:99:df:c2:a2:61:5c:37:61:a3:d9:06:d8:aa:
39:6f:70:f0:da:7e:c4:a4:46:4d:1d:8a:13:28:b7:
26:91:aa:bb:08:39:3d:06:99:06:0c:10:36:59:5c:
8c:c2:7a:1d:f9:5b:64:04:22:b1:90:1a:bf:38:97:
f9:5e:62:7d:95:7c:c8:6e:fa:24:6c:35:e1:eb:e3:
89:14:60:d2:1e:ad:1b:95:71:b8:a9:6d:00:6b:07:
f0:eb:d0:2b:f1:de:f1:55:73:24:9b:39:63:55:b4:
ed:0e:b4:32:6c:e9:d2:df:0f:0f:60:bc:71:86:63:
a1:11:66:30:95:af:23:ad:0a:86:2c:9c:9d:dc:5e:
af:b0:3e:25:0d:8b:90:93:42:79:4d:4c:68:d0:02:
cd:cc:5c:b3:24:73:15:32:d6:76:4a:48:a3:37:c1:
ea:bc:37:c9:a6:05:c0:10:b2:8c:f1:b2:5e:ef:2c:
7f:c2:ba:7e:ac:96:00:75:2b:cc:cc:20:f4:dd:48:
51:69:cb:97:94:a8:f7:a3:34:5b:60:d5:d0:0e:f1:
68:cb:17:9c:0b:8e:e6:c2:4f:7b:92:57:0a:4f:fe:
74:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3C:26:58:DD:31:7C:9D:F4:C0:C4:4A:9D:4E:90:A2:63:D1:28:AF
X509v3 Authority Key Identifier:
keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cc:c7:a6:bc:e2:4f:86:ab:24:86:cb:65:a1:c8:2a:df:52:
18:c2:90:04:da:bf:5b:53:b4:fd:e7:0d:0f:95:9a:be:1f:3a:
99:24:96:ed:c5:b8:85:41:1c:2f:c0:6c:ae:a5:53:75:71:70:
92:5c:5f:b2:2b:e8:3c:f5:ce:46:51:96:71:ea:15:d8:d5:c2:
69:a6:0a:68:e3:f1:4c:4c:f5:d6:a4:37:3b:00:82:f0:11:3a:
14:30:8b:c1:0e:a5:be:4b:a7:31:d0:5b:e3:2f:36:85:c6:01:
b0:09:dd:11:3a:bb:9c:5b:c4:45:54:51:37:72:1c:4d:b7:62:
4a:bd:27:b3:09:16:9f:51:81:b9:80:1b:97:ab:a1:4e:83:b1:
47:a1:d2:2c:3d:1e:d3:9d:f5:76:8a:ae:5d:a8:17:c9:ac:f3:
74:fd:f5:ad:47:86:a7:98:65:5d:96:cb:5c:e8:aa:a8:10:e7:
95:ab:f4:36:29:f3:1c:a0:d1:dc:db:a4:be:66:60:31:be:e2:
d1:67:14:12:d0:2f:a3:2f:cb:6a:b1:74:9e:db:4d:ff:3e:16:
1c:16:77:7b:ea:9b:dc:03:7e:bd:78:4b:f0:40:5e:fb:0f:41:
62:f9:7c:05:49:eb:62:ae:0a:92:07:b3:33:25:aa:76:0a:b0:
f5:02:e2:a0
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUbREpA9Q0hw8Bo4BgLGmnTRpziGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzFkYzI1Yzc4MGU3YTI0ODE3MTM5ZDk4MGEyOGE5Nzgx
ZmE2YTQ5MzAeFw0yNTA4MjMwMDM0MDNaFw0yNTA4MjQwMzQ3MDNaMDMxMTAvBgNV
BAMTKDUyM0MyNjU4REQzMTdDOURGNEMwQzQ0QTlENEU5MEEyNjNEMTI4QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcf7vgqUySnJFtkhXVuicN0EAo
kOtVvCQBliKBjgTymd/ComFcN2Gj2QbYqjlvcPDafsSkRk0dihMotyaRqrsIOT0G
mQYMEDZZXIzCeh35W2QEIrGQGr84l/leYn2VfMhu+iRsNeHr44kUYNIerRuVcbip
bQBrB/Dr0Cvx3vFVcySbOWNVtO0OtDJs6dLfDw9gvHGGY6ERZjCVryOtCoYsnJ3c
Xq+wPiUNi5CTQnlNTGjQAs3MXLMkcxUy1nZKSKM3weq8N8mmBcAQsozxsl7vLH/C
un6slgB1K8zMIPTdSFFpy5eUqPejNFtg1dAO8WjLF5wLjubCT3uSVwpP/nTjAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUUjwmWN0xfJ30wMRKnU6QomPRKK8wHwYDVR0j
BBgwFoAUwdwlx4DnokgXE52YCiipeB+mpJMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYvMi9DMURDMjVDNzgw
RTdBMjQ4MTcxMzlEOTgwQTI4QTk3ODFGQTZBNDkzLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvd2R3bHg0RG5va2dYRTUyWUNpaXBlQi1tcEpNLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYv
Mi9DMURDMjVDNzgwRTdBMjQ4MTcxMzlEOTgwQTI4QTk3ODFGQTZBNDkzLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAQ8zHprziT4arJIbLZaHIKt9SGMKQBNq/W1O0/ecND5Wavh86mSSW7cW4
hUEcL8BsrqVTdXFwklxfsivoPPXORlGWceoV2NXCaaYKaOPxTEz11qQ3OwCC8BE6
FDCLwQ6lvkunMdBb4y82hcYBsAndETq7nFvERVRRN3IcTbdiSr0nswkWn1GBuYAb
l6uhToOxR6HSLD0e0531doquXagXyazzdP31rUeGp5hlXZbLXOiqqBDnlav0Ninz
HKDR3NukvmZgMb7i0WcUEtAvoy/LarF0nttN/z4WHBZ3e+qb3AN+vXhL8EBe+w9B
Yvl8BUnrYq4KkgezMyWqdgqw9QLioA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:23:37 2025 by rpki-client