Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File: 3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier: W240uqiUUQzkgJFvm7AAnBuHk8W5AIhIqiCPfj4AC1I=
Subject key identifier: 71:E5:95:D2:04:C9:9D:02:A6:98:4B:59:51:D3:A1:4B:43:45:0D:9C
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer: /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial: 284C48902645A557EF9BBC59653CC3844D45E48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number: 025D
Signing time: Sun 27 Apr 2025 05:31:28 +0000
Manifest this update: Sun 27 Apr 2025 05:26:28 +0000
Manifest next update: Mon 28 Apr 2025 06:08:28 +0000
Files and hashes: 1: AS48606.asa (hash: 5NWb4N+D0OquyokzVrf8CTeFzp8KBWxtJJ16mYNyMNg=)
2: AS59678.asa (hash: MrrWJ9l8lgWoC35oKfd53MWxXqNmbveRovZsM7Giidk=)
3: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: TPGjkKRvmxPCNWY4UtjZZsKVkguUZc6ax7YKFMn+yzo=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 06:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:4c:48:90:26:45:a5:57:ef:9b:bc:59:65:3c:c3:84:4d:45:e4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
Validity
Not Before: Apr 27 05:26:28 2025 GMT
Not After : Apr 28 06:08:28 2025 GMT
Subject: CN=71E595D204C99D02A6984B5951D3A14B43450D9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:76:77:80:7b:a7:70:00:bb:87:79:b9:49:
48:24:c0:17:c9:55:a5:55:08:bf:89:9a:2d:bd:e7:
d7:01:65:32:74:19:ed:64:41:21:1c:9b:23:89:84:
5d:94:cd:43:2d:25:62:f1:81:e3:6f:8b:44:24:93:
5c:f6:7d:1c:12:36:78:19:95:b1:b2:ed:c7:a7:9e:
c2:c2:37:ba:0a:f5:df:09:ac:09:0f:e9:5d:f5:78:
f6:26:d9:63:df:eb:a8:2c:44:20:88:22:b5:5d:6f:
76:42:27:df:7b:07:1a:46:b2:5b:b4:ae:45:8d:1e:
a2:fb:de:b3:a2:68:3b:c1:55:cd:26:67:b3:b6:68:
62:57:bb:5b:c4:a8:c5:74:f7:d2:75:af:ee:87:56:
16:6c:53:87:6f:8d:65:0c:01:25:d4:00:cc:6f:44:
97:97:f6:b0:ba:07:a2:9b:71:8b:51:e0:34:69:68:
fc:2e:c1:47:23:63:6c:2f:00:fe:f4:76:31:72:93:
79:22:bc:d1:27:10:39:c2:fa:a3:95:98:ef:8a:7e:
7c:97:40:6d:b6:9b:a4:09:d8:da:fe:34:24:d4:ec:
64:2b:68:37:1c:4f:7b:6f:d7:ea:f0:c1:b0:03:5d:
45:64:9a:51:18:80:61:ee:56:13:67:a9:bf:d0:99:
e1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E5:95:D2:04:C9:9D:02:A6:98:4B:59:51:D3:A1:4B:43:45:0D:9C
X509v3 Authority Key Identifier:
keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cc:00:41:5e:9e:af:f7:5b:27:73:b7:f9:38:b5:38:33:5f:
6c:00:9b:23:ae:33:b5:19:15:1d:59:a4:13:17:d5:92:3e:02:
17:83:49:c1:21:3f:75:29:9f:f7:c4:e9:56:b8:bb:7a:34:fa:
df:0b:9c:96:7c:89:18:45:4c:85:51:86:50:5f:17:2c:60:f1:
80:55:77:66:61:ba:89:b3:b4:3d:9f:49:cf:f3:1b:79:73:90:
58:70:23:3e:ea:17:3a:e2:39:4e:a8:d8:7e:55:82:fd:aa:54:
5b:85:7a:fa:bf:70:cc:6c:40:67:45:33:20:73:1f:58:9f:88:
ff:97:6a:83:ac:a9:31:00:cc:06:2e:1b:66:e2:6b:71:6e:fc:
7e:88:86:40:b9:45:00:c7:aa:d5:04:92:6a:f3:5a:ff:4e:17:
5c:1d:9f:3b:33:95:27:86:1a:7d:77:39:49:aa:59:4c:ef:c0:
63:f5:74:eb:46:1c:b5:2d:80:d4:f2:86:5c:a1:29:a1:67:cb:
5d:fd:97:80:a3:62:0d:6e:8b:01:61:e4:09:3d:ab:7e:4a:ba:
ba:57:bd:eb:7e:ed:a3:1d:fa:9e:9e:72:44:b4:3b:78:fa:54:
37:b7:e2:93:16:e6:94:d9:e2:7c:26:79:d6:07:26:25:e8:a4:
21:44:5c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:03:43 2025 by rpki-client