Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: v2mTIFKide+PJ8KBR1XhpcYvDyC+PTxj0ZUOZmG/qcs=
Subject key identifier: 1B:66:7A:D3:10:CC:DF:1A:96:14:E9:87:B0:8A:A8:02:34:F7:85:0C
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 66739E6D38E57E1F2A98B5D735F48670A6F41D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 014B
Signing time: Sun 29 Jun 2025 19:01:25 +0000
Manifest this update: Sun 29 Jun 2025 18:56:25 +0000
Manifest next update: Mon 30 Jun 2025 20:04:25 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: PoQuQWXxWRA/Ly9uR/9IIVJAg+gu/BQtU/3tIbMWbfo=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: y9YmktivJBbKPHh8hEM7zR9L9cZ6v0kH5w91NUKXhuA=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 20:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:73:9e:6d:38:e5:7e:1f:2a:98:b5:d7:35:f4:86:70:a6:f4:1d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jun 29 18:56:25 2025 GMT
Not After : Jun 30 20:04:25 2025 GMT
Subject: CN=1B667AD310CCDF1A9614E987B08AA80234F7850C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:30:af:bc:42:f0:27:32:85:87:f9:e4:48:
f1:a6:16:db:39:16:9d:27:c1:ab:16:f9:a8:57:b3:
19:2c:49:d8:69:13:78:ad:4d:ce:58:eb:be:ba:e6:
f6:e1:94:f0:96:e2:9e:73:b2:53:7a:60:72:96:ba:
b0:e6:7a:b7:79:4b:93:f4:95:4a:f4:2f:ac:41:f0:
43:09:e0:a6:ab:06:6e:e0:fb:6b:1e:55:0d:c1:95:
fa:6c:43:fa:c6:99:7c:da:bb:2d:10:52:c0:bd:aa:
31:5c:e8:79:03:bf:f9:f4:f1:15:62:02:98:f7:ac:
ad:3a:8e:3d:fb:4d:1a:03:d2:c8:b0:cd:76:8f:e9:
20:48:1d:34:b7:49:14:40:61:04:92:dc:fc:71:56:
f2:6e:7b:f0:fd:4a:5e:2d:92:39:d1:86:e3:6d:49:
74:c8:03:48:fc:19:a1:0b:cf:a7:01:59:62:52:3e:
22:0a:2c:64:70:8d:d8:15:3c:e8:d1:0e:48:46:39:
37:50:59:4a:7b:e6:bf:8e:29:45:af:68:86:bb:c6:
d2:fd:50:ef:3a:b9:fb:45:fb:6e:c3:c3:cc:3b:8f:
e8:c8:d5:34:34:65:18:6f:86:0a:f7:97:75:12:8f:
44:43:a8:6f:d6:c8:f8:1f:f5:67:e0:10:00:96:e9:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:66:7A:D3:10:CC:DF:1A:96:14:E9:87:B0:8A:A8:02:34:F7:85:0C
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:fa:59:36:69:be:39:a6:0d:6a:b3:0c:40:c1:5e:05:6b:cd:
62:84:b4:fe:5f:59:f2:db:43:89:4b:39:71:75:3f:5d:62:7b:
03:3f:00:4f:1b:e9:ba:72:03:ac:d5:75:65:de:30:cb:7d:26:
c0:7e:4f:71:a9:f5:2d:1c:79:ef:be:ea:d4:5b:c2:8d:99:ca:
df:83:a8:5e:2c:b7:f9:97:24:49:5a:ec:48:ca:75:b9:2f:21:
a4:a9:0c:59:3a:49:f8:7e:54:92:a7:04:56:60:30:ba:ed:33:
b4:ea:7f:ed:51:7d:11:91:6e:a1:88:ee:2b:60:00:5a:ab:01:
56:38:08:e2:0e:cf:98:fb:65:38:6a:81:be:bf:e3:b9:8c:e6:
06:54:9b:76:12:0f:f6:04:c6:91:32:5e:a9:a8:55:8a:e0:cc:
b5:8b:7d:4d:59:00:e0:b8:d0:34:b5:7f:42:c9:83:0f:7d:2c:
85:36:74:46:b5:1e:f7:44:1a:c9:48:ca:39:b2:b8:e4:78:06:
09:42:eb:ed:38:16:c3:49:b8:22:ba:07:71:55:46:60:fb:ab:
da:94:0b:04:16:44:fa:39:60:4f:52:f4:63:61:85:6d:93:ff:
bb:d1:dc:24:52:9c:db:9f:aa:7d:0a:d8:8a:d1:22:6d:61:fe:
09:4e:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:20:41 2025 by rpki-client