Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: KsBCHYw3OX+pnosxy/PvNK/WK913XaWmFTzXVUPm02E=
Subject key identifier: 48:93:C4:49:F4:60:4B:CF:6E:90:C2:34:49:55:88:29:2A:23:5D:B1
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 1320976197656D48A36374C281F37B4ADEB2A4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 01F5
Signing time: Tue 04 Nov 2025 04:37:45 +0000
Manifest this update: Tue 04 Nov 2025 04:32:45 +0000
Manifest next update: Wed 05 Nov 2025 05:56:45 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: PUE1ApzYmRXqMZgGwnGBB400j3WrD9mvI8+H7dKVqj4=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:20:97:61:97:65:6d:48:a3:63:74:c2:81:f3:7b:4a:de:b2:a4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Nov 4 04:32:45 2025 GMT
Not After : Nov 5 05:56:45 2025 GMT
Subject: CN=4893C449F4604BCF6E90C234495588292A235DB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:a6:7d:86:79:6f:7e:9b:1a:4b:ae:e9:88:
e0:de:b0:a3:cb:4e:f9:d1:e4:9c:8a:7a:f7:79:51:
d9:e1:7b:63:df:df:56:47:7d:d3:f9:b2:7f:55:22:
73:b9:6e:5b:56:43:7f:d7:ca:e4:53:5b:7d:13:df:
92:a8:cf:cf:33:68:ac:f3:75:0a:73:67:43:17:d6:
2a:ca:91:d5:c7:64:e6:27:93:0f:ad:6f:83:e5:4d:
41:ac:10:f9:ea:6e:e7:61:47:02:ea:36:ee:b3:da:
e6:57:88:bd:28:39:2f:74:27:1b:f4:9b:46:7c:85:
eb:f5:a8:f4:7e:9e:c6:57:76:e6:98:bb:8c:aa:8e:
4d:10:27:6c:8d:33:61:12:d6:84:06:4a:eb:77:ec:
b5:1c:0b:17:35:9d:b5:b7:c1:e7:21:d0:ca:c0:b7:
9e:db:40:af:d9:a6:c4:a9:be:b5:f0:91:a7:50:c4:
5c:c9:54:0d:9f:37:be:70:9a:85:8d:e2:f3:50:6a:
f6:ba:6d:75:9e:aa:95:4e:03:e8:b9:0b:ea:d9:a7:
6c:07:e2:50:83:dd:eb:7a:6f:e0:78:1d:1e:9f:16:
7b:0d:91:b7:2e:99:69:7c:1d:c7:73:2f:c5:90:43:
67:c3:57:94:ff:c4:a0:7e:87:c7:45:67:2b:d9:a4:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:93:C4:49:F4:60:4B:CF:6E:90:C2:34:49:55:88:29:2A:23:5D:B1
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d8:66:ef:55:2e:90:95:73:7a:6d:f4:c2:a8:38:0d:16:0c:
05:87:f0:56:ce:55:2b:c0:13:03:a5:60:4a:bc:7a:e5:aa:e1:
28:c0:bc:ec:47:46:7f:30:1b:51:2b:99:5d:98:b8:4e:20:12:
f9:58:e5:c6:fc:22:c5:66:17:6f:1b:76:c6:b7:bd:bb:65:2c:
1b:2e:6e:31:31:f7:ae:59:8b:f8:55:96:c9:1a:d4:2f:6d:5a:
d1:f8:df:c0:63:25:d7:53:18:63:8a:0d:36:c8:fd:68:94:b2:
07:7f:65:0b:1a:ed:f8:12:50:c1:fa:46:53:34:b7:53:51:5f:
f1:45:91:49:7e:d8:58:b7:ec:17:00:90:13:71:a9:cc:8a:10:
66:d0:26:be:10:4f:46:5b:d1:25:7c:d2:0e:a8:27:ab:32:d9:
1c:0a:21:cb:54:81:d5:fc:d8:01:cc:cd:9f:6b:a4:31:a0:6d:
30:58:8e:f0:cc:f5:06:fe:4c:0c:d2:69:d6:6b:db:d6:d6:1b:
f8:2d:b2:48:57:a4:e1:48:8c:93:fa:e1:75:7d:4e:18:33:e3:
76:ed:29:60:c7:ed:57:89:02:a0:a9:a2:0b:30:8f:70:5a:db:
3f:02:5b:69:90:20:13:ae:36:e1:41:47:9c:78:26:11:57:41:
b4:5d:39:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:01 2025 by rpki-client