Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
File: C1DC25C780E7A24817139D980A28A9781FA6A493.mft (raw, json)
Hash identifier: Sjhtzgj/VYWHL/O0PNGchbTeimPDWOnBtjucLUmndn0=
Subject key identifier: 4E:CA:D0:B5:99:C0:F8:6C:F7:C9:61:75:7B:C1:A6:EE:30:F6:E1:C7
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Certificate issuer: /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial: 023D980B307BD0B7D1454ED036DDF94AB3D5C67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
Manifest number: D5
Signing time: Sun 19 Oct 2025 13:25:10 +0000
Manifest this update: Sun 19 Oct 2025 13:20:10 +0000
Manifest next update: Mon 20 Oct 2025 15:06:10 +0000
Files and hashes: 1: C1DC25C780E7A24817139D980A28A9781FA6A493.crl (hash: LfQMABBJeWXRz7EmIw85B7D+cVaNDv2lcv3EOygsPzI=)
2: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (hash: nBfJgos2zfzyALiaXlFvRvGKVpCZLf9hpeeX+QFHO6Q=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:3d:98:0b:30:7b:d0:b7:d1:45:4e:d0:36:dd:f9:4a:b3:d5:c6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Validity
Not Before: Oct 19 13:20:10 2025 GMT
Not After : Oct 20 15:06:10 2025 GMT
Subject: CN=4ECAD0B599C0F86CF7C961757BC1A6EE30F6E1C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:7d:8d:f3:ec:24:20:67:b1:86:18:6a:d5:
37:92:bf:07:cb:5b:5a:3f:69:1e:cf:c8:20:05:2d:
37:1e:e8:62:24:f6:c5:2b:48:bd:c5:78:c4:a2:91:
5e:1d:26:a7:ac:4e:19:19:71:cf:a0:86:cd:6d:fa:
03:77:c5:fd:ee:43:d2:c3:d1:12:b4:b1:c0:0b:99:
84:73:c2:88:ad:88:5c:af:7f:b9:50:05:e4:1c:ef:
07:cf:33:1b:fa:8f:01:97:3f:11:ac:52:5e:81:70:
90:b3:1b:98:5d:59:a3:b1:66:76:8c:1f:db:28:45:
34:c4:45:ce:d9:b0:82:66:9c:f6:72:6f:87:2c:95:
b4:98:f4:e1:68:1c:5a:c5:61:ac:6d:92:10:87:25:
a9:d1:2c:28:ba:38:52:bc:dd:35:a6:24:65:47:fe:
50:ee:95:ca:28:e3:f2:a9:ef:b8:e8:41:49:62:7a:
68:5b:cd:82:1d:6d:29:d6:e6:f4:83:fb:f5:d0:88:
8c:9e:7e:da:e4:4a:9b:c6:50:06:a5:3d:2b:13:8f:
01:87:4e:f2:13:96:5b:71:93:7b:bd:fe:52:a5:55:
58:73:94:4a:d6:d4:d4:8c:c5:90:a0:62:fb:58:0a:
32:e1:ed:8a:ac:c0:bf:49:5c:d6:fc:3a:73:4a:21:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CA:D0:B5:99:C0:F8:6C:F7:C9:61:75:7B:C1:A6:EE:30:F6:E1:C7
X509v3 Authority Key Identifier:
keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0a:f0:9f:0f:12:92:e9:c9:b5:aa:83:af:71:09:b0:b5:6e:
07:f6:96:d3:1f:32:13:28:6e:c2:9a:fa:ca:da:65:26:c1:76:
4c:6d:0a:f1:8b:27:ba:38:a2:a3:86:f2:7f:64:f2:db:ee:f0:
b2:66:ca:c6:b6:6b:26:b7:20:77:89:32:65:5c:33:c0:0a:d1:
49:08:40:a3:30:00:2c:20:dd:7f:70:fa:5c:54:e1:e6:32:2f:
b6:29:56:ce:87:1a:fe:09:3f:26:8a:ec:4a:8c:8b:ea:bc:1c:
d6:7e:1e:02:22:e5:a5:76:8f:dd:33:f1:fe:81:59:c6:3c:83:
6e:6e:2c:13:82:ca:85:0c:43:b9:bb:b6:d6:ab:79:c5:9b:74:
25:df:54:c3:da:fe:12:6a:b7:ca:e3:c8:99:11:a2:dd:af:89:
bb:b7:43:ee:43:0e:80:ec:1f:62:91:41:a8:29:bb:77:b2:af:
bc:3a:61:1f:d6:9a:d6:9a:6c:d3:06:7b:8d:8e:9a:34:2e:f5:
f8:95:17:4d:39:2d:26:b3:be:70:4d:10:e8:4f:fd:16:f4:5e:
88:12:b3:bf:c4:cb:b7:7c:0b:24:e1:76:54:82:2e:2c:3c:71:
e4:65:50:70:9f:dd:4e:5c:30:ce:e2:ee:3e:e5:47:4f:c6:1d:
49:ad:65:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:59 2025 by rpki-client