Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
File: C1DC25C780E7A24817139D980A28A9781FA6A493.mft (raw, json)
Hash identifier: 88RBgIDV7DKdbu7Y9SYwvnj3lKIzbFjH5bWjQ+ErX24=
Subject key identifier: 53:DF:C2:29:FA:00:83:E0:62:A8:24:F3:19:AA:6C:9A:E2:E9:89:0D
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Certificate issuer: /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial: 78C3280A06DB64541282DBA8B8FE12ABE2817C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
Manifest number: 3E
Signing time: Sat 28 Jun 2025 16:28:43 +0000
Manifest this update: Sat 28 Jun 2025 16:23:43 +0000
Manifest next update: Sun 29 Jun 2025 19:53:43 +0000
Files and hashes: 1: C1DC25C780E7A24817139D980A28A9781FA6A493.crl (hash: oCPabuMnyaknxkjLP2Ao9FfVj/QpeuFNVKEEHVwqlGI=)
2: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (hash: nBfJgos2zfzyALiaXlFvRvGKVpCZLf9hpeeX+QFHO6Q=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c3:28:0a:06:db:64:54:12:82:db:a8:b8:fe:12:ab:e2:81:7c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Validity
Not Before: Jun 28 16:23:43 2025 GMT
Not After : Jun 29 19:53:43 2025 GMT
Subject: CN=53DFC229FA0083E062A824F319AA6C9AE2E9890D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:f8:b5:6a:58:6a:6e:08:13:42:55:59:f7:
4e:46:4e:1d:3d:80:4a:50:04:6e:5f:9d:74:62:af:
65:42:0b:ee:bf:bd:49:78:9b:e5:5e:f4:a1:22:fa:
ff:35:3f:4f:3d:1a:92:2a:d5:2e:d4:f8:1e:da:56:
81:12:71:55:9f:c6:86:c3:18:31:69:0b:46:b2:d5:
a6:86:df:32:b3:88:86:59:fc:b0:b1:e7:53:e7:f5:
cc:92:4d:06:c3:5d:86:cc:7a:d9:1b:c2:c5:66:1a:
9b:a9:22:18:f0:66:cc:45:e9:06:f1:a6:25:e0:44:
a5:1d:e1:d3:56:5e:a2:3b:89:71:98:21:91:18:25:
4a:ef:70:0b:a5:df:f4:92:66:e3:19:ab:b9:74:d5:
7e:be:bf:2b:5e:c1:13:c7:a2:91:8d:41:86:74:e9:
8a:d2:3e:85:bb:bc:41:40:e4:5d:73:b4:7b:6d:09:
2f:5b:b8:b7:ee:7c:d9:cc:3c:42:86:bb:34:9d:00:
dc:c8:c6:40:87:f2:69:a7:36:f7:8a:9b:e9:66:cf:
26:b5:69:01:03:ef:2a:ac:ac:ad:e6:62:0a:d9:c4:
05:c4:db:5a:14:f3:55:19:11:66:b4:c4:ea:c4:14:
82:0c:21:e3:f7:eb:b7:8f:3c:20:e9:42:8a:e6:5e:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DF:C2:29:FA:00:83:E0:62:A8:24:F3:19:AA:6C:9A:E2:E9:89:0D
X509v3 Authority Key Identifier:
keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2c:45:8c:96:1e:48:e9:a3:06:26:db:8c:3e:7c:b0:2a:d3:
f1:f4:04:b5:49:59:e9:01:0f:8a:11:12:f1:4f:08:1c:59:08:
4f:7c:29:a4:2d:74:a1:8e:06:dc:3c:47:a7:d2:90:d7:83:5b:
f4:a2:40:01:8e:5d:4a:eb:b4:5f:62:72:db:78:54:36:06:33:
a7:0e:44:98:ac:bc:77:50:7b:31:10:a3:c5:e5:3b:e9:17:a7:
a8:1e:2b:aa:28:8e:26:5f:44:a5:92:3b:5b:1c:2a:e7:cd:7b:
dd:31:23:59:4c:a9:7c:43:a8:c2:db:db:73:16:ae:77:57:bb:
1d:2a:c6:44:e5:98:ac:76:e0:77:c7:d9:f1:34:b0:19:d0:57:
b1:2a:9a:1b:1f:c0:8f:6c:dc:82:28:e5:84:e2:16:0b:7e:f5:
a4:ba:29:a5:52:20:19:bc:e9:86:c7:48:55:3d:1b:29:8c:ad:
ff:a2:7d:64:78:04:4f:9e:cd:4c:5e:84:ea:c5:b5:44:90:4f:
58:1f:ff:07:c8:d8:3b:f2:bf:58:5c:a1:f1:08:46:1d:3e:ca:
dc:32:fd:85:fd:26:22:d8:b0:50:63:fa:92:11:02:e5:47:dd:
b6:3d:f1:24:44:a3:26:20:59:38:33:69:63:41:1a:73:fc:45:
65:57:fb:76
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUeMMoCgbbZFQSgtuouP4Sq+KBfHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzFkYzI1Yzc4MGU3YTI0ODE3MTM5ZDk4MGEyOGE5Nzgx
ZmE2YTQ5MzAeFw0yNTA2MjgxNjIzNDNaFw0yNTA2MjkxOTUzNDNaMDMxMTAvBgNV
BAMTKDUzREZDMjI5RkEwMDgzRTA2MkE4MjRGMzE5QUE2QzlBRTJFOTg5MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1vi1alhqbggTQlVZ905GTh09
gEpQBG5fnXRir2VCC+6/vUl4m+Ve9KEi+v81P089GpIq1S7U+B7aVoEScVWfxobD
GDFpC0ay1aaG3zKziIZZ/LCx51Pn9cySTQbDXYbMetkbwsVmGpupIhjwZsxF6Qbx
piXgRKUd4dNWXqI7iXGYIZEYJUrvcAul3/SSZuMZq7l01X6+vytewRPHopGNQYZ0
6YrSPoW7vEFA5F1ztHttCS9buLfufNnMPEKGuzSdANzIxkCH8mmnNveKm+lmzya1
aQED7yqsrK3mYgrZxAXE21oU81UZEWa0xOrEFIIMIeP367ePPCDpQormXulbAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUU9/CKfoAg+BiqCTzGapsmuLpiQ0wHwYDVR0j
BBgwFoAUwdwlx4DnokgXE52YCiipeB+mpJMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYvMi9DMURDMjVDNzgw
RTdBMjQ4MTcxMzlEOTgwQTI4QTk3ODFGQTZBNDkzLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvd2R3bHg0RG5va2dYRTUyWUNpaXBlQi1tcEpNLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYv
Mi9DMURDMjVDNzgwRTdBMjQ4MTcxMzlEOTgwQTI4QTk3ODFGQTZBNDkzLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAVCxFjJYeSOmjBibbjD58sCrT8fQEtUlZ6QEPihES8U8IHFkIT3wppC10
oY4G3DxHp9KQ14Nb9KJAAY5dSuu0X2Jy23hUNgYzpw5EmKy8d1B7MRCjxeU76Ren
qB4rqiiOJl9EpZI7Wxwq58173TEjWUypfEOowtvbcxaud1e7HSrGROWYrHbgd8fZ
8TSwGdBXsSqaGx/Aj2zcgijlhOIWC371pLoppVIgGbzphsdIVT0bKYyt/6J9ZHgE
T57NTF6E6sW1RJBPWB//B8jYO/K/WFyh8QhGHT7K3DL9hf0mItiwUGP6khEC5Ufd
tj3xJESjJiBZODNpY0Eac/xFZVf7dg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:36 2025 by rpki-client