Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
File: D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft (raw, json)
Hash identifier: SStaxy94hpz0JnjjVxdzrvtleUJOoOB9gNMt/IvDrk0=
Subject key identifier: B6:92:4D:B3:25:5A:44:95:68:69:3C:B4:4A:85:9A:B7:EA:91:6A:8A
Authority key identifier: D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A
Certificate issuer: /CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
Certificate serial: 0E21AB52B074EA97F6B00BA632145D41DC9E895A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
Manifest number: 02D2
Signing time: Mon 03 Nov 2025 18:59:45 +0000
Manifest this update: Mon 03 Nov 2025 18:54:45 +0000
Manifest next update: Tue 04 Nov 2025 20:27:45 +0000
Files and hashes: 1: D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl (hash: ZsX2Eh1GqJdSgHLWragtkVSOjkn4a70XWoR+nXfl0gk=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl
rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:21:ab:52:b0:74:ea:97:f6:b0:0b:a6:32:14:5d:41:dc:9e:89:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
Validity
Not Before: Nov 3 18:54:45 2025 GMT
Not After : Nov 4 20:27:45 2025 GMT
Subject: CN=B6924DB3255A449568693CB44A859AB7EA916A8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:39:86:0f:30:3f:f3:f4:95:6a:5d:9a:67:
8a:e8:d4:98:b6:f7:5c:47:78:52:a6:aa:43:c9:ee:
94:f0:c3:e3:ba:4c:76:ea:ef:03:84:e1:7b:ed:2c:
7f:ea:91:35:59:df:a0:76:a3:0c:d4:28:f0:a3:e0:
4d:ed:b8:d5:a7:e6:e6:86:25:47:4b:bd:c6:bd:a6:
99:b1:59:45:9c:0c:01:46:87:ec:c0:5b:4d:2e:99:
1c:5c:6a:9a:05:54:21:27:d4:b3:bd:d5:9a:90:40:
3e:cb:be:10:e9:6e:93:c0:b2:6e:87:13:54:73:fa:
0f:39:8f:dc:c8:d5:c0:42:c3:8e:ff:e0:4b:01:e1:
8a:14:df:a6:fd:1a:58:5e:31:15:9b:67:c3:a9:75:
5e:26:3b:76:4f:81:7b:a1:9e:55:29:0f:c9:fc:6a:
5c:5a:f1:fe:85:92:10:c6:39:cf:70:79:a8:fe:4b:
33:15:7f:d9:4d:88:d6:62:6d:0b:d8:58:a9:9b:bf:
c5:c5:6f:e7:28:fd:26:af:76:e1:e9:7e:24:9d:9c:
db:71:d5:5f:9d:14:b5:5c:86:0a:e3:6b:3c:82:a2:
41:46:f2:27:14:8d:38:a8:07:04:8f:4f:61:2c:53:
89:93:cd:96:ab:17:0c:3c:cd:57:e8:5c:97:52:eb:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:92:4D:B3:25:5A:44:95:68:69:3C:B4:4A:85:9A:B7:EA:91:6A:8A
X509v3 Authority Key Identifier:
keyid:D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:fb:39:54:8c:5f:c1:69:8c:8a:db:95:10:04:1f:da:09:46:
33:e7:16:ae:83:37:32:9f:e3:d5:33:b8:98:4b:af:3c:5d:e8:
87:34:77:fb:3b:f5:8e:48:fe:db:76:15:b5:0a:27:26:09:c0:
a2:89:83:67:b2:23:19:70:0e:33:03:34:b0:01:28:cb:02:32:
ca:5d:43:91:ab:c0:96:84:ca:89:3c:ba:d9:de:59:d9:47:b1:
54:b5:ee:8f:bd:be:ba:11:52:2a:cd:a1:3f:8a:a9:f5:9f:bd:
b2:ac:ee:1d:43:f6:f5:ba:9d:3f:fb:30:53:38:bb:21:65:06:
2b:b4:99:0f:a2:e9:87:bf:01:39:6e:90:b5:60:f7:29:13:2a:
37:0f:96:c0:54:a2:8c:ef:96:b8:ce:02:61:bc:c9:4b:34:b5:
3c:e9:4e:9b:66:5a:4f:d1:90:2a:e5:4e:ee:7b:eb:ea:d1:55:
ef:31:b5:33:7f:f1:2b:c8:c2:8b:ea:7e:b9:54:13:a3:5b:2e:
06:7d:ae:72:d1:fe:b1:b1:18:4f:c5:3a:0f:07:87:5e:71:ce:
9d:37:27:58:05:c6:40:3e:3b:7e:24:9f:75:e8:af:47:9d:73:
ba:a3:aa:38:b7:7f:34:5c:41:a9:3d:b2:50:a6:b2:a5:d1:04:
78:c2:0a:80
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUDiGrUrB06pf2sAumMhRdQdyeiVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDJkZDA3ODYxMGFhZWM0N2I1NDAzZjI5N2Y5MjA4Yjdh
NThmYjMzYTAeFw0yNTExMDMxODU0NDVaFw0yNTExMDQyMDI3NDVaMDMxMTAvBgNV
BAMTKEI2OTI0REIzMjU1QTQ0OTU2ODY5M0NCNDRBODU5QUI3RUE5MTZBOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRFDmGDzA/8/SVal2aZ4ro1Ji2
91xHeFKmqkPJ7pTww+O6THbq7wOE4XvtLH/qkTVZ36B2owzUKPCj4E3tuNWn5uaG
JUdLvca9ppmxWUWcDAFGh+zAW00umRxcapoFVCEn1LO91ZqQQD7LvhDpbpPAsm6H
E1Rz+g85j9zI1cBCw47/4EsB4YoU36b9GlheMRWbZ8OpdV4mO3ZPgXuhnlUpD8n8
alxa8f6FkhDGOc9weaj+SzMVf9lNiNZibQvYWKmbv8XFb+co/SavduHpfiSdnNtx
1V+dFLVchgrjazyCokFG8icUjTioBwSPT2EsU4mTzZarFww8zVfoXJdS6zFNAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUtpJNsyVaRJVoaTy0SoWat+qRaoowHwYDVR0j
BBgwFoAU0t0HhhCq7Ee1QD8pf5IIt6WPszowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4YmFhNTc5YzAxOGNkY2YyYzgzNTRiNTIvMS9EMkREMDc4NjEw
QUFFQzQ3QjU0MDNGMjk3RjkyMDhCN0E1OEZCMzNBLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMHQwSGhoQ3E3RWUxUUQ4cGY1SUl0NldQc3pvLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4YmFhNTc5YzAxOGNkY2YyYzgzNTRiNTIv
MS9EMkREMDc4NjEwQUFFQzQ3QjU0MDNGMjk3RjkyMDhCN0E1OEZCMzNBLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAMPs5VIxfwWmMituVEAQf2glGM+cWroM3Mp/j1TO4mEuvPF3ohzR3+zv1
jkj+23YVtQonJgnAoomDZ7IjGXAOMwM0sAEoywIyyl1DkavAloTKiTy62d5Z2Uex
VLXuj72+uhFSKs2hP4qp9Z+9sqzuHUP29bqdP/swUzi7IWUGK7SZD6Lph78BOW6Q
tWD3KRMqNw+WwFSijO+WuM4CYbzJSzS1POlOm2ZaT9GQKuVO7nvr6tFV7zG1M3/x
K8jCi+p+uVQTo1suBn2uctH+sbEYT8U6DweHXnHOnTcnWAXGQD47fiSfdeivR51z
uqOqOLd/NFxBqT2yUKaypdEEeMIKgA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:04 2025 by rpki-client