Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 5J0imf5zSa1EVzZ3166ikQzN5P94Cf5cYDxdd4IaMOU=
Subject key identifier: F5:C2:EA:7D:4E:01:7A:72:CC:3D:BB:95:75:1A:2F:0F:6A:B9:4A:91
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 67D662BC9537510CFD6FF2389DB40071A2893F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 01E0
Signing time: Sun 19 Oct 2025 07:07:24 +0000
Manifest this update: Sun 19 Oct 2025 07:02:24 +0000
Manifest next update: Mon 20 Oct 2025 08:46:24 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 5Yo+NOkXbP7pQiyu7eu1QGsk8KCXXecov7L8l+7PqBk=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d6:62:bc:95:37:51:0c:fd:6f:f2:38:9d:b4:00:71:a2:89:3f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Oct 19 07:02:24 2025 GMT
Not After : Oct 20 08:46:24 2025 GMT
Subject: CN=F5C2EA7D4E017A72CC3DBB95751A2F0F6AB94A91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:b6:aa:12:c5:7a:c7:18:89:5c:47:9e:b7:
7a:b4:db:84:2f:40:df:18:72:5a:cc:17:16:2e:4a:
96:95:23:f5:d0:64:10:3e:c5:6c:9b:14:cc:8b:2b:
d3:25:73:13:85:1a:60:5f:d7:87:23:d0:52:fe:3b:
ff:84:5d:0c:2b:e5:80:61:9a:e9:a0:45:58:b3:aa:
53:09:d1:a6:50:d3:9b:88:72:7e:98:71:eb:77:6c:
ed:ef:21:e9:64:af:7c:e0:9b:42:f2:22:68:69:63:
3c:ad:5b:37:4b:c0:6a:b7:5d:c5:13:b8:b2:85:a6:
09:05:c3:19:92:ef:b8:6e:bf:b6:00:3d:67:1c:6b:
29:cf:73:c6:aa:fe:6d:f7:8d:97:20:fc:89:f2:e1:
b8:47:ba:a9:88:ff:07:d4:33:ee:70:46:56:c1:d7:
14:82:d1:14:bc:16:92:c8:da:a8:ca:94:71:e1:38:
1b:5f:fd:fc:8a:fa:82:82:cf:72:91:91:b3:a4:cc:
6e:24:cd:f2:89:4f:5b:cc:cd:57:cc:2b:be:1e:ca:
d3:2a:d6:0c:31:b7:b8:fc:b7:79:f0:f9:4b:8b:26:
39:6a:32:90:b2:0c:de:ea:e9:c5:90:c6:c3:a5:c4:
e4:33:0e:c9:bb:5a:76:4f:5a:72:4f:9d:78:d0:05:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C2:EA:7D:4E:01:7A:72:CC:3D:BB:95:75:1A:2F:0F:6A:B9:4A:91
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:17:33:59:39:e8:e9:63:de:0a:90:ad:00:ef:33:47:58:54:
91:79:df:2c:f7:99:f4:1c:34:f1:c5:ed:b1:42:29:e6:91:b1:
b7:7b:53:1a:bf:32:67:3b:ec:f7:4b:8c:9e:9f:2a:e9:51:9f:
5f:a6:e9:12:c1:92:01:79:93:c5:4b:89:64:48:66:17:c1:21:
c9:14:be:5a:7c:e2:e7:af:89:78:7c:ff:a9:88:4e:d5:7c:74:
26:f7:31:07:64:ed:17:b7:51:45:0e:49:b4:7e:0a:a1:05:62:
d3:68:5e:10:65:df:6f:07:e1:16:51:ab:8a:03:de:8f:a2:1a:
eb:54:81:fb:05:a0:fe:21:66:14:df:b9:08:32:f4:94:d9:db:
86:36:00:d9:98:52:73:e2:6f:d9:3f:c7:eb:36:6e:83:f5:a6:
60:f0:e7:d2:ff:a6:ed:cd:90:37:ea:48:74:65:ea:fd:95:2a:
64:1f:04:70:7f:5c:d4:8d:08:07:8f:30:cd:8c:bd:30:b4:79:
52:ba:08:f0:81:ee:7f:a2:e3:56:69:04:2d:a9:81:ad:81:74:
26:52:f1:9c:17:82:06:48:bd:5e:67:2a:98:69:88:66:c1:20:
5c:80:c8:9b:52:32:eb:3a:91:ff:a5:47:ad:68:d1:96:25:0e:
4e:f7:bc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:12 2025 by rpki-client