
Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
File: E84B072599A643FE71F171B15ED724213D43CE5B.mft (raw, json)
Hash identifier: GEWDkAuGO2I6l21hzFlnicKu/qFpdS5lv8f5XU9iRe8=
Subject key identifier: 9C:DB:60:87:14:3F:87:38:5A:49:4B:FB:E8:00:CB:35:3F:CC:88:6B
Authority key identifier: E8:4B:07:25:99:A6:43:FE:71:F1:71:B1:5E:D7:24:21:3D:43:CE:5B
Certificate issuer: /CN=e84b072599a643fe71f171b15ed724213d43ce5b
Certificate serial: 3D8AA0C184E9795D331270F29E483D40D25E8413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer
Subject info access: rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
Manifest number: 99
Signing time: Wed 05 Nov 2025 10:06:23 +0000
Manifest this update: Wed 05 Nov 2025 10:01:23 +0000
Manifest next update: Thu 06 Nov 2025 12:56:23 +0000
Files and hashes: 1: E84B072599A643FE71F171B15ED724213D43CE5B.crl (hash: +NaWJ0tpCuLEiQ2NgubO7ok1ix37rTpPdQ5lqGr9izE=)
2: AS214768.asa (hash: jXPXFYdvxRTO4xZ1QtAhRs/urzNWFCHEnbmEMExacrU=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.crl
rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8a:a0:c1:84:e9:79:5d:33:12:70:f2:9e:48:3d:40:d2:5e:84:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84b072599a643fe71f171b15ed724213d43ce5b
Validity
Not Before: Nov 5 10:01:23 2025 GMT
Not After : Nov 6 12:56:23 2025 GMT
Subject: CN=9CDB6087143F87385A494BFBE800CB353FCC886B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:16:c1:00:b3:09:57:98:21:84:0d:cf:4f:cd:
9e:cb:57:a2:e3:ad:aa:71:0a:e7:3d:d3:d7:dc:2b:
47:88:02:93:83:58:a5:64:ec:aa:ea:cc:bb:f9:2b:
19:ac:61:39:2f:cc:c0:14:be:d5:fb:c3:d6:f5:5d:
ae:b3:0a:2d:00:ef:6a:8f:96:3a:00:69:7e:0c:71:
7c:fe:9b:bc:9e:ba:16:c4:e7:45:11:cc:dc:d6:48:
5a:9f:4b:3e:7e:38:5a:96:c2:20:3e:25:08:ef:89:
12:53:08:e9:bf:3e:fd:0c:0b:35:5b:da:2d:b4:0b:
47:bb:35:f1:8b:8e:96:a6:2e:d9:1f:58:46:e3:33:
11:1d:b9:83:31:c7:54:7d:e5:2d:c6:cd:33:9a:d5:
29:58:f3:1b:5e:80:12:d8:22:4c:33:0c:f3:89:6a:
72:e3:0b:2d:d1:7c:6f:ac:e8:1a:1d:53:a9:68:ab:
48:0d:de:d7:64:73:75:75:a9:5c:a2:91:9b:91:ea:
72:76:17:c0:bd:c9:2d:0c:9f:01:02:94:ee:c1:73:
55:ab:3e:0a:d1:14:1d:6f:dd:9d:9f:54:ea:1c:d6:
5e:02:9a:bb:ba:ad:18:7c:53:98:e8:ab:df:ba:47:
db:ac:67:82:cd:9d:4b:40:71:a5:e7:ec:07:ca:70:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DB:60:87:14:3F:87:38:5A:49:4B:FB:E8:00:CB:35:3F:CC:88:6B
X509v3 Authority Key Identifier:
keyid:E8:4B:07:25:99:A6:43:FE:71:F1:71:B1:5E:D7:24:21:3D:43:CE:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:20:5d:aa:8d:e4:a2:15:45:4f:c1:64:09:72:a4:23:89:c4:
1e:37:4b:c9:9f:cb:fd:e5:22:cf:e1:a2:fb:a2:f4:a7:8e:26:
2e:96:0b:3a:b8:6d:db:67:8f:cf:b4:b2:10:ac:74:69:4e:21:
d3:a5:20:5d:55:ef:b7:7f:8a:fb:1e:0b:fe:2c:b8:9f:8a:35:
4d:14:9b:08:9b:5c:a7:ad:0a:2c:48:72:47:d8:09:55:79:ad:
c4:39:d8:ae:e6:06:a9:eb:db:d9:30:3a:13:3c:d3:09:06:30:
17:4e:e9:06:8e:96:d8:a8:95:1b:93:f4:f7:7a:92:d0:25:0a:
9f:4f:0b:a2:1a:49:2b:1d:ce:79:69:21:fa:ba:e0:b0:ac:3a:
4d:70:08:75:3e:ca:9a:9d:34:17:2c:4c:6c:cd:c0:f6:f3:06:
e9:ab:88:96:3e:ac:45:b4:06:f9:d3:44:8a:34:22:97:55:a1:
54:64:b8:60:a3:e4:9a:8f:eb:ee:fe:a7:6d:73:d7:d2:f6:24:
17:70:47:61:fd:fb:59:87:6e:bb:f1:ec:ac:57:2a:e0:f8:fb:
85:c6:ed:e4:52:48:27:ed:6f:e2:03:67:b4:2f:6c:3c:bc:d9:
55:ad:b1:ab:1b:c8:a4:50:6b:6c:2a:42:e1:50:dd:a4:67:69:
a6:8a:ff:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:15:16 2025 by rpki-client