Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
File: D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft (raw, json)
Hash identifier: ZcgQW+J7uncvE/SMk909sDZm5Uyf3Oci8DSBYh7PShE=
Subject key identifier: 2F:E3:0C:CA:4F:5F:BA:A2:A5:85:BB:F4:BF:2B:40:E8:45:75:7B:A3
Authority key identifier: D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A
Certificate issuer: /CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
Certificate serial: 2134B96527AD898820A4DBC4D9A255167FF3F861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
Manifest number: 025A
Signing time: Tue 05 Aug 2025 13:38:32 +0000
Manifest this update: Tue 05 Aug 2025 13:33:32 +0000
Manifest next update: Wed 06 Aug 2025 15:27:32 +0000
Files and hashes: 1: D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl (hash: qc8x5PE8yX0ni6rk3uEXvQi0dbZnPJfePppeQALiARo=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl
rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:34:b9:65:27:ad:89:88:20:a4:db:c4:d9:a2:55:16:7f:f3:f8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
Validity
Not Before: Aug 5 13:33:32 2025 GMT
Not After : Aug 6 15:27:32 2025 GMT
Subject: CN=2FE30CCA4F5FBAA2A585BBF4BF2B40E845757BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bd:3e:30:08:ab:ac:68:0f:a4:f6:75:1e:d6:
0a:61:b3:f3:f4:f3:82:6d:d0:0e:a6:cf:30:5f:5a:
13:65:89:89:9b:7a:af:76:e6:fb:57:a2:34:6f:65:
96:3d:a2:a7:88:5a:d2:8f:f9:91:2d:64:a5:30:04:
0e:b1:98:cd:81:53:e7:bc:9c:2a:0b:18:cb:59:2e:
d2:ea:d1:fa:fd:bb:d2:10:80:5f:69:57:f9:dc:78:
3f:4c:6d:38:56:7d:ec:f2:2d:16:7d:35:51:5b:45:
af:da:67:fe:3d:e1:ff:78:e9:58:71:94:24:1b:42:
98:32:2a:bf:e4:54:1d:1a:41:0c:32:f5:be:07:63:
fd:94:fc:8f:df:16:5a:cf:c7:85:e9:14:a2:37:f8:
15:92:c7:a0:e0:c6:e0:0c:a4:3f:aa:56:c3:36:ee:
57:75:8d:c9:39:65:42:d4:76:c9:26:f5:17:9f:96:
eb:d7:16:18:82:2d:b0:95:1b:a0:ea:8d:8c:7c:a6:
90:86:bc:7f:66:55:c9:8d:53:4d:83:bc:b0:d3:9d:
59:f2:d3:63:d9:91:2c:0b:3f:29:de:57:99:a5:e1:
e1:b5:90:9d:dd:9b:83:b8:a1:d1:2d:01:78:84:0d:
20:e7:ab:d4:8b:8e:ba:d1:86:41:a8:a7:fe:bc:d4:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E3:0C:CA:4F:5F:BA:A2:A5:85:BB:F4:BF:2B:40:E8:45:75:7B:A3
X509v3 Authority Key Identifier:
keyid:D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:47:9d:7e:74:b3:63:07:bf:36:0b:72:63:b3:d3:53:1c:d0:
56:fa:5f:a9:ed:2c:48:14:36:1e:84:60:43:2b:f5:16:66:2a:
01:86:8b:93:34:ed:01:dd:49:0e:0c:47:d8:de:60:74:04:47:
b0:bc:c7:27:a0:42:11:87:45:6f:b1:50:da:58:24:45:83:34:
fd:99:54:50:18:9b:6d:37:83:a7:5d:67:18:37:ae:18:5b:78:
5e:fc:2c:80:36:10:98:41:1d:59:e3:26:ed:fb:02:7b:9c:3f:
ea:22:89:5f:aa:42:73:75:b1:ba:f5:64:05:98:9f:87:23:b1:
c8:8a:20:c9:9a:8b:d2:e8:db:29:a9:b8:29:75:ec:8b:43:ec:
55:26:4b:fc:b8:55:e1:df:65:f7:d4:cb:49:65:41:2f:bb:01:
e4:39:53:79:f0:86:97:44:47:5e:d7:e2:e8:50:c8:a5:52:59:
35:d8:82:8a:ab:65:f9:56:85:c5:44:ff:7d:e2:f4:8e:d8:05:
6b:46:e6:af:4c:34:f5:f5:8f:9a:d3:4e:e0:51:71:28:cf:a6:
bb:57:bf:b1:e6:e1:36:8c:38:6f:de:2f:d2:fe:cf:45:39:be:
79:b1:be:1e:ca:a1:bd:ea:76:4c:7e:19:c4:26:50:89:20:0d:
21:4c:0d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:12 2025 by rpki-client