Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
File: C1DC25C780E7A24817139D980A28A9781FA6A493.mft (raw, json)
Hash identifier: CpYawJl3Ll0j22MGKYZ7cJe+mGISOl9Tt8H6YFNSxaY=
Subject key identifier: 9A:30:E6:7A:9A:85:F9:11:D2:D2:D4:E8:05:39:C0:D3:E5:30:EE:9C
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Certificate issuer: /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial: 0ED2CF320833A150E3FF20EF6D0757F2D5B6BF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
Manifest number: 2B
Signing time: Sat 14 Jun 2025 07:28:13 +0000
Manifest this update: Sat 14 Jun 2025 07:23:13 +0000
Manifest next update: Sun 15 Jun 2025 10:23:13 +0000
Files and hashes: 1: C1DC25C780E7A24817139D980A28A9781FA6A493.crl (hash: Oz6zk0ke6OdEC2910eG9c0sRJfVC5yyrI4D+3SMgzYs=)
2: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (hash: nBfJgos2zfzyALiaXlFvRvGKVpCZLf9hpeeX+QFHO6Q=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d2:cf:32:08:33:a1:50:e3:ff:20:ef:6d:07:57:f2:d5:b6:bf:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Validity
Not Before: Jun 14 07:23:13 2025 GMT
Not After : Jun 15 10:23:13 2025 GMT
Subject: CN=9A30E67A9A85F911D2D2D4E80539C0D3E530EE9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:2d:1f:70:c3:fa:4e:cd:23:93:a1:f1:ab:
6e:96:4f:c7:65:94:1c:ff:83:e7:15:f4:3d:cd:be:
3f:f5:eb:df:f6:a2:2d:91:aa:55:c8:c6:41:a6:0e:
25:e8:44:09:20:b4:d6:aa:14:ae:b2:b3:ac:5d:eb:
74:bc:ff:9c:e9:b0:83:2a:da:0f:33:c7:11:58:66:
a0:a7:66:6c:34:c5:d1:c2:13:70:a0:d9:1c:8a:3e:
c1:3c:b7:6b:76:74:74:3e:19:c0:70:33:3c:9c:d9:
07:fb:13:84:f2:2a:23:c1:4b:af:f5:79:60:51:14:
d3:63:a4:49:4b:c6:3b:69:37:95:67:ca:21:ad:14:
4c:38:87:37:88:31:60:7f:7a:cc:67:80:42:3f:d0:
3d:bc:a0:60:22:63:fc:fd:79:ae:59:c7:86:fc:fa:
af:97:07:78:a6:e8:fc:ac:ec:9a:80:7f:d4:5e:21:
b7:4e:76:a4:e9:e4:2e:cf:29:02:fe:18:38:b2:ec:
91:33:67:51:0a:61:b6:1e:fc:ee:aa:a8:bc:03:d6:
40:45:09:f9:f2:8b:ca:81:1a:0d:e7:be:fc:da:21:
35:82:47:bf:a9:d2:71:0e:6c:2f:fa:9c:3e:64:1b:
97:4c:c2:b3:14:e3:5b:ac:e6:84:a6:c2:46:88:22:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:30:E6:7A:9A:85:F9:11:D2:D2:D4:E8:05:39:C0:D3:E5:30:EE:9C
X509v3 Authority Key Identifier:
keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3c:58:33:57:ee:e1:f8:23:f8:68:8e:ef:e7:e3:75:f5:71:
8f:0a:91:96:00:53:ef:31:dc:4f:84:ef:54:7f:11:9c:5a:ae:
09:42:f3:21:b4:49:d2:f5:c6:c3:ba:75:27:b4:eb:64:b0:e1:
3b:28:29:9a:c6:11:a2:bb:a8:16:7f:ef:ae:fe:89:d3:68:fc:
65:97:9f:84:92:ca:b0:c0:33:91:ef:34:8e:fa:81:3a:5c:a0:
9c:b9:b4:8e:58:90:7b:24:af:ff:b2:6e:eb:4e:88:9b:97:9f:
fe:cf:41:0c:85:e7:94:ff:72:2a:ed:33:c1:2f:05:2e:45:db:
62:cb:58:22:a0:b8:e3:c9:80:c9:c0:ec:94:95:bd:c4:cb:1f:
f9:ae:c3:34:d3:4b:35:bc:32:56:05:62:28:d8:39:13:4a:07:
69:4d:f3:27:e4:6b:8d:32:03:4b:20:d1:9d:e8:42:cc:bf:82:
e6:e0:e6:86:34:36:c9:7a:0b:94:9e:8d:5c:ab:0f:11:51:4e:
b8:8e:fb:06:5d:fd:52:6d:06:34:59:6b:93:3f:fe:86:fd:7e:
10:ee:ca:97:50:a7:b3:98:d9:67:4c:60:69:3e:c5:98:22:63:
3f:b8:41:86:2c:1e:0c:df:ea:36:f5:af:d7:64:a8:b9:30:6b:
4b:74:f6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:14:39 2025 by rpki-client