Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: eLzEyhUqA7uwd/8z8dWQAZNY2rsNzsYKzTFCzufQZmM=
Subject key identifier: 29:91:F1:B7:03:28:82:C3:FA:3B:B9:0E:6F:B1:D1:54:CE:3B:CE:BF
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 191D80FC4C846F8BA2241C38F5FA662A96677DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: F4
Signing time: Fri 25 Apr 2025 21:52:27 +0000
Manifest this update: Fri 25 Apr 2025 21:47:27 +0000
Manifest next update: Sun 27 Apr 2025 01:46:27 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 3+EBUVjrz/rtgoXXg4qcyjUOK1Crx0b4zN7+WaFdcoY=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: y9YmktivJBbKPHh8hEM7zR9L9cZ6v0kH5w91NUKXhuA=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 01:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1d:80:fc:4c:84:6f:8b:a2:24:1c:38:f5:fa:66:2a:96:67:7d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 25 21:47:27 2025 GMT
Not After : Apr 27 01:46:27 2025 GMT
Subject: CN=2991F1B7032882C3FA3BB90E6FB1D154CE3BCEBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:01:f5:33:b0:91:81:5a:e0:8b:16:ad:19:
1a:01:7f:f1:3e:ea:07:de:b8:71:5e:8a:01:b5:c9:
40:ad:67:7d:14:c9:75:fb:ef:38:4f:9a:aa:13:8f:
c4:3f:1d:99:16:e2:ec:51:a2:53:29:19:0a:60:bc:
af:92:0d:5f:0c:44:29:b4:ba:d2:93:c3:17:93:eb:
a5:7b:bf:ac:dc:78:2f:ed:92:ed:40:2b:5a:3b:2a:
41:89:64:0f:0c:ec:d0:11:ac:ba:6e:89:83:44:93:
0f:3b:6e:72:62:80:a5:63:7f:b7:d8:8e:9b:e6:28:
22:fc:64:f5:c9:01:3b:6e:f4:30:cf:7c:1d:e4:27:
7b:29:3e:08:8e:28:4e:53:46:53:79:11:8d:36:1a:
e2:30:35:f0:4e:f9:42:10:3c:f3:81:d4:80:08:d0:
0e:40:a3:b9:d5:80:9f:c4:a2:1f:1f:99:4f:ff:ae:
56:b4:a1:2a:db:36:1e:15:04:e6:d5:f5:52:2e:77:
00:5f:67:88:36:53:17:cb:20:a1:a5:03:19:1b:d5:
4a:11:27:d0:1f:99:29:0e:cd:52:0f:fa:7e:3c:1d:
01:2f:47:9e:11:4f:d5:65:e5:5f:9f:0f:47:0b:77:
0e:2d:90:79:05:c9:8e:6a:72:e7:ac:d7:89:f0:b8:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:91:F1:B7:03:28:82:C3:FA:3B:B9:0E:6F:B1:D1:54:CE:3B:CE:BF
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:69:a7:c4:8b:22:bd:17:86:0a:7c:cd:ec:b6:98:66:e7:5e:
a9:ed:0d:4f:4f:47:d1:de:8f:df:01:d4:20:38:2a:55:4a:63:
96:62:96:eb:89:c5:90:c1:9c:75:ab:23:18:c7:64:46:2c:b0:
27:0b:c7:d0:3b:09:81:aa:bc:f3:cc:95:a8:53:9f:e9:92:44:
29:d9:d4:e0:1f:ca:a2:a6:7a:e1:35:eb:03:60:38:cc:3d:92:
2a:05:34:2c:b3:e6:e7:a6:c4:b7:c3:14:d0:54:ee:a7:df:6d:
1c:96:98:6b:19:29:78:2b:30:e2:9c:4e:4f:8e:77:c7:3c:10:
61:a4:7d:8a:8e:39:6f:8f:f3:49:f2:62:b1:91:f1:33:47:09:
f1:17:35:88:ce:20:96:49:09:7b:f3:75:a5:1a:87:c3:91:37:
09:b5:19:4f:b6:d8:d1:0c:b6:e2:7d:93:0b:3e:31:6d:90:d3:
18:ba:0c:b5:cc:db:c5:03:80:a3:4a:96:b3:a0:1b:1e:42:11:
52:87:a1:2a:05:76:0d:a3:9a:d3:0d:78:6c:e6:f7:cb:29:f8:
d6:dd:13:fd:2f:e0:ce:0d:8f:3f:f6:00:22:9d:62:3b:bc:38:
c2:cc:d2:90:84:5a:9f:07:48:d0:1c:39:94:2b:87:96:70:bb:
ed:5c:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:05:32 2025 by rpki-client