Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
File: C1DC25C780E7A24817139D980A28A9781FA6A493.mft (raw, json)
Hash identifier: k+3vmZzQn1U2fblXH5wlJ9xSxWf+0A+a1IDTAR5hfbs=
Subject key identifier: 5D:AD:6E:11:CC:99:4E:7A:D4:D2:55:76:DF:69:9D:47:FB:B0:B7:3B
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Certificate issuer: /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial: 777FD5F07ACE6166CECCAB0709AA7C282BA66E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
Manifest number: EB
Signing time: Wed 05 Nov 2025 01:33:46 +0000
Manifest this update: Wed 05 Nov 2025 01:28:46 +0000
Manifest next update: Thu 06 Nov 2025 02:40:46 +0000
Files and hashes: 1: C1DC25C780E7A24817139D980A28A9781FA6A493.crl (hash: dntCY9BkPF37anU3NFxr9fWdXAqyBfwbqxNBK/pMoJY=)
2: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (hash: nBfJgos2zfzyALiaXlFvRvGKVpCZLf9hpeeX+QFHO6Q=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:7f:d5:f0:7a:ce:61:66:ce:cc:ab:07:09:aa:7c:28:2b:a6:6e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Validity
Not Before: Nov 5 01:28:46 2025 GMT
Not After : Nov 6 02:40:46 2025 GMT
Subject: CN=5DAD6E11CC994E7AD4D25576DF699D47FBB0B73B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:c7:c5:02:ff:c0:22:33:3f:20:69:c6:5c:
21:7b:5a:b6:1f:18:a5:39:86:5f:8d:7b:48:e6:e4:
92:ca:27:29:b7:13:d3:fc:c7:f8:8d:7f:44:d7:94:
8b:25:45:af:1a:8a:3a:5e:98:1b:e7:17:c5:0f:5b:
22:8a:cc:2a:a8:6b:8a:19:55:80:05:ef:27:bc:c8:
4e:e2:09:b1:4c:8e:6a:2f:5d:72:be:ec:ed:95:3d:
54:cc:81:e0:ae:2b:b3:1c:a1:2c:64:00:fb:44:81:
9c:9c:e5:de:9c:4f:02:1f:af:ab:58:f7:9b:e9:ba:
1b:92:7c:2e:cf:16:61:33:7a:70:bc:9e:fc:06:ac:
58:8d:ef:59:dd:da:93:97:09:8a:ca:a6:af:17:68:
0e:50:de:19:54:9d:df:eb:ea:fe:83:f6:7f:34:d1:
a3:e5:bd:03:d1:3a:2c:be:f8:7f:b8:23:16:86:14:
e8:be:2f:62:bf:aa:79:2f:54:20:07:ee:7d:10:f5:
ae:f5:64:f8:a4:04:94:82:b3:f5:b9:1a:8c:59:d7:
30:62:73:90:67:36:65:b2:6b:36:2d:65:11:68:dd:
d6:6b:96:ab:e8:7f:43:8b:76:24:5f:5f:d4:bc:90:
0e:b5:d1:39:1f:74:6b:73:31:50:d1:69:7f:fb:03:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AD:6E:11:CC:99:4E:7A:D4:D2:55:76:DF:69:9D:47:FB:B0:B7:3B
X509v3 Authority Key Identifier:
keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e4:a2:87:d9:ea:51:82:70:f6:02:65:d1:1d:52:61:16:07:
6e:de:61:01:f1:43:cb:f7:d8:7d:e0:82:56:86:0d:5c:01:c5:
99:83:89:9f:e1:69:2d:5b:3d:b9:55:29:3d:66:fc:b2:5a:d8:
ee:01:18:5f:d1:a8:dd:e5:d4:0b:ce:fe:95:8d:a9:35:bb:40:
b9:1c:cf:e2:cd:b1:6b:e8:60:bb:c1:c5:48:1d:57:d4:f7:12:
5e:29:2c:d7:0e:e0:83:9e:ec:a6:3f:9d:ba:09:66:f8:7f:bd:
a6:9c:e7:2c:7c:04:f6:95:11:24:e2:09:ef:cd:ff:b8:37:02:
0b:91:01:cc:37:bd:ff:23:dd:e0:f0:e4:e9:2f:d9:96:0d:d4:
02:cd:d5:fb:c3:35:6d:af:ee:5a:18:55:cd:8a:59:25:0e:c6:
56:46:d0:5c:63:65:95:71:e7:d4:5e:55:1a:67:fa:07:f2:34:
8c:b1:c9:ec:aa:67:da:01:78:8b:44:4a:b7:75:ce:2c:22:fd:
c9:8b:92:31:be:0b:6c:eb:19:2b:86:cb:d4:19:58:d4:86:99:
4f:73:49:61:9a:59:8d:24:dd:e2:b6:f0:cd:8f:96:bf:9a:93:
d0:03:d0:ab:fc:b4:ad:78:93:8a:13:21:ad:09:b4:66:13:fa:
6c:e3:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:08 2025 by rpki-client