Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: to6yH2sxieLYqOVDBraDxfllijzo2e5KQWNegNmtfmo=
Subject key identifier: 1D:33:4A:88:20:30:FF:01:90:C4:4C:44:5B:F7:79:0A:81:EC:6B:01
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 34E6634C131741FDFE7DE615D0FCD83C6B3EE46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0109
Signing time: Sun 11 May 2025 20:54:23 +0000
Manifest this update: Sun 11 May 2025 20:49:23 +0000
Manifest next update: Mon 12 May 2025 22:09:23 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: y9YmktivJBbKPHh8hEM7zR9L9cZ6v0kH5w91NUKXhuA=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: zss7lU7KEaGJ7N47L8MyLskRvxkwP5qqbibRslkKl58=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:09:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:e6:63:4c:13:17:41:fd:fe:7d:e6:15:d0:fc:d8:3c:6b:3e:e4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 11 20:49:23 2025 GMT
Not After : May 12 22:09:23 2025 GMT
Subject: CN=1D334A882030FF0190C44C445BF7790A81EC6B01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:f4:b0:7d:e2:12:ad:34:63:35:01:54:54:
89:1e:e5:72:50:78:3e:cc:14:b0:e3:ac:8e:ac:d5:
50:16:a9:ed:c1:88:0b:90:25:a0:80:1e:87:7c:ac:
3b:80:7d:fb:62:72:a4:2a:6c:41:c1:68:ea:43:9d:
c3:3d:aa:03:e4:e5:94:1d:c9:71:cc:c9:d8:da:d9:
e3:03:b3:89:72:36:7d:11:df:0f:17:b2:cc:e4:e0:
b6:d8:ae:9e:15:71:23:f8:05:c5:21:35:f5:81:6c:
e2:64:47:83:c5:e2:c8:18:0c:21:4e:c1:cb:69:cb:
fb:53:30:92:0f:fe:c3:2e:52:92:ad:0d:4b:a3:39:
32:0b:dd:1f:75:df:da:71:7b:22:a9:a1:f5:72:c0:
f8:a3:9b:86:ae:07:37:d6:ac:2f:21:97:30:37:0c:
a1:bd:5b:eb:a4:01:a2:9f:66:f9:d5:d6:95:de:da:
7f:70:83:40:fe:0a:9f:08:c0:5b:8c:a3:db:b8:42:
e4:2c:ee:04:ab:8a:b4:fc:94:10:07:b4:cc:03:a2:
05:b7:27:9f:17:1c:65:3a:b2:b8:a0:44:ef:02:24:
46:f5:7f:99:d3:bc:66:6b:93:55:5c:c1:33:f2:01:
b3:3d:e0:8a:85:ef:3b:59:6d:ce:00:ea:b1:55:18:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:33:4A:88:20:30:FF:01:90:C4:4C:44:5B:F7:79:0A:81:EC:6B:01
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0b:46:1b:96:5f:cb:91:15:38:76:00:7f:26:fe:82:d5:78:
9c:12:3c:72:38:3b:8e:d8:97:c0:7a:dc:b4:0d:7e:5c:0e:73:
87:2b:8d:61:2e:c1:4c:0f:4f:1d:ce:23:c4:8c:ee:42:d9:12:
7c:d4:d0:50:0b:bc:07:0b:d0:d8:20:a3:dd:c8:b9:c5:06:e6:
eb:b4:e9:2c:d7:48:f9:5d:62:21:d2:ba:eb:17:a2:01:1c:7a:
da:1c:cf:b4:5f:70:81:d7:e1:57:e1:06:c4:f9:a7:15:be:03:
d6:f4:a8:bc:23:48:81:11:4b:7e:1c:27:d6:37:f5:89:e8:ca:
51:0d:db:d6:39:42:6c:a7:87:03:fa:a1:ff:64:23:70:51:9d:
57:d7:a2:82:80:85:ce:ac:5b:2e:18:d1:0b:94:97:6f:a1:3d:
f3:54:94:ae:d2:6b:b2:54:5b:9f:32:cc:ee:3b:cc:b8:6a:bc:
e2:4f:ae:2a:46:66:45:57:92:38:f8:10:e5:dc:8d:20:70:54:
79:85:6b:03:39:7a:9e:1c:04:94:e3:0c:0c:72:c5:e8:f4:fd:
89:9a:0f:26:98:f5:5a:81:82:4f:e7:a0:9e:74:33:53:ce:83:
80:50:04:da:9a:2b:4d:65:1e:96:3d:da:a8:fd:6d:6a:cc:96:
81:21:f3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:47:46 2025 by rpki-client