Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
File: D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft (raw, json)
Hash identifier: EwcKb22wLS0xOrNMRMiiJsZTbWC5d5FO4bQNFI3lLRA=
Subject key identifier: E1:FC:3A:D1:70:93:50:DC:D0:B9:A2:DF:9D:0F:08:D5:57:94:FC:CA
Authority key identifier: D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A
Certificate issuer: /CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
Certificate serial: 04071F8237E72F575C5F9A8A39E92EA7251A4524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
Manifest number: 02BE
Signing time: Sun 19 Oct 2025 22:31:54 +0000
Manifest this update: Sun 19 Oct 2025 22:26:54 +0000
Manifest next update: Tue 21 Oct 2025 00:13:54 +0000
Files and hashes: 1: D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl (hash: GvQMU3fSlm53GGZE5mc4iwg1gqPBLGLXkusX4EEnWVk=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl
rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:07:1f:82:37:e7:2f:57:5c:5f:9a:8a:39:e9:2e:a7:25:1a:45:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
Validity
Not Before: Oct 19 22:26:54 2025 GMT
Not After : Oct 21 00:13:54 2025 GMT
Subject: CN=E1FC3AD1709350DCD0B9A2DF9D0F08D55794FCCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:6f:ed:22:f1:82:73:0d:f9:3e:ea:9b:18:
43:02:24:29:1c:75:5d:f1:84:a5:1f:f5:56:97:3e:
00:0d:15:d9:f0:ff:20:02:d2:07:2f:37:96:aa:a7:
15:af:89:0b:4a:90:ec:4b:39:62:25:90:8b:44:ed:
c1:cb:80:ac:d8:4b:32:b7:5d:32:4a:2c:10:ee:ba:
95:23:21:45:4e:88:30:93:bb:65:cf:23:de:fe:5a:
28:c9:da:c8:a5:56:a9:82:45:69:25:c0:71:3f:28:
07:cd:05:e0:c2:a2:66:c1:67:97:ef:de:a9:0f:27:
58:6f:0a:74:54:bc:20:4b:95:96:55:38:54:6e:36:
fe:d3:ef:7f:05:8c:cc:99:d3:91:f2:87:cf:7d:7e:
a0:73:d2:ee:44:3c:eb:7a:17:67:5b:d8:54:55:ac:
04:1c:48:88:1e:81:4e:ea:9c:5d:d7:21:9b:f0:38:
df:0f:44:a7:fc:f9:f7:5b:8b:26:34:0c:f2:c8:9d:
55:ce:03:fe:93:7c:ac:c5:77:3d:58:da:24:28:32:
7b:d7:6d:3b:81:bf:18:aa:27:3c:27:30:26:7e:14:
1d:0b:71:7d:ae:4c:89:71:41:f5:89:22:c1:65:a1:
a5:b7:72:87:08:2e:20:2f:e5:d3:55:89:0e:98:50:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FC:3A:D1:70:93:50:DC:D0:B9:A2:DF:9D:0F:08:D5:57:94:FC:CA
X509v3 Authority Key Identifier:
keyid:D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f1:23:e5:90:94:57:70:66:fa:e7:43:f3:d6:5c:4b:a4:85:
56:03:01:d0:bc:83:e1:86:3c:f2:b6:19:d8:c8:0d:a4:98:62:
a5:3f:4e:6a:a1:e1:92:e2:43:f6:1f:62:98:df:43:2f:1d:8f:
4e:81:13:92:ec:db:0b:cc:8d:1a:0a:fc:d6:3c:c3:4b:e7:87:
fe:87:ad:21:c2:2f:31:f1:b1:e3:cc:bf:aa:64:39:49:2a:5c:
fb:3a:15:29:72:98:cb:ad:32:1e:a3:5b:c0:01:60:33:43:89:
db:9e:05:d4:96:69:a4:a8:8b:99:91:6d:38:66:1b:32:ab:5d:
6d:b7:1b:30:91:f8:fb:f4:52:de:de:19:fe:5b:32:9b:ef:36:
48:67:70:54:6d:c4:60:d0:bb:8d:02:20:c0:82:c9:00:d5:fd:
1c:99:00:fb:25:50:56:98:f0:bd:a0:fc:ab:5a:df:ee:b3:89:
36:31:df:8c:15:c9:ee:0d:57:5c:15:58:55:28:6d:e0:ca:c8:
d5:cd:df:a1:f7:1b:41:01:b4:a8:74:ed:5a:cc:f6:89:9e:4b:
51:dd:1e:ea:24:58:28:94:6d:8f:e7:19:7f:1b:88:10:26:03:
dd:6c:e0:9c:20:2d:ef:70:01:b0:03:a3:87:b8:f9:f0:a0:cf:
df:45:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:31 2025 by rpki-client