
Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
File: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft (raw, json)
Hash identifier: 8PC2vKyQCHSho6MuN1yXDVwSGt3xjdCbiwrPrJ+AAks=
Subject key identifier: 48:91:95:3E:C1:C0:28:FB:59:A3:A9:41:22:BD:0C:A9:D8:FD:DA:74
Authority key identifier: DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
Certificate issuer: /CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Certificate serial: 5CFF46098C32B511890B57A9624660A5E43B4A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject info access: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
Manifest number: 0C
Signing time: Wed 05 Nov 2025 14:33:23 +0000
Manifest this update: Wed 05 Nov 2025 14:28:23 +0000
Manifest next update: Thu 06 Nov 2025 16:33:23 +0000
Files and hashes: 1: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl (hash: Fa147ymyYOvII9VVysEyRjPTy3L1oJbOCIrChyjX89I=)
2: AS60900.asa (hash: KnMr4iCB+cj1naex0F8845D019k0F96IV9G+SJAi9jQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ff:46:09:8c:32:b5:11:89:0b:57:a9:62:46:60:a5:e4:3b:4a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Validity
Not Before: Nov 5 14:28:23 2025 GMT
Not After : Nov 6 16:33:23 2025 GMT
Subject: CN=4891953EC1C028FB59A3A94122BD0CA9D8FDDA74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0e:ed:a6:b4:52:41:79:f3:b5:1b:ff:9c:6d:
5b:53:3f:9c:24:f0:f2:20:d8:50:f6:7f:da:1c:8f:
e5:23:b0:ad:fd:86:b0:d6:9a:3a:87:00:ec:d3:57:
31:97:b5:94:22:64:2c:fe:b2:88:af:ba:d2:11:4a:
9c:17:02:35:f6:9c:1e:d0:b2:51:a8:8e:24:93:44:
00:b5:52:c5:00:df:92:d7:03:94:8b:1e:3e:17:dd:
b7:4a:fc:c8:2f:f7:0e:02:30:1e:5c:ae:17:69:13:
22:31:53:18:d2:a9:5a:4e:1f:c8:53:87:49:51:0b:
17:9f:c5:f4:b4:e9:6c:08:c7:db:14:a9:f0:28:ac:
31:fb:b1:8a:98:4b:59:e5:f8:e3:a1:4d:9e:72:be:
0b:3c:32:a4:bc:78:71:68:1a:66:5c:dd:54:b9:e7:
8c:2b:58:30:b0:ae:24:4b:be:22:32:0f:8a:cf:7e:
25:86:0d:af:5c:0d:cd:f3:8a:61:82:12:82:91:f0:
49:fd:4c:64:81:3e:b1:08:08:04:4f:28:7a:c7:a1:
b2:21:e2:24:1a:1f:ab:60:aa:d9:0d:81:af:23:03:
56:a6:39:10:1d:81:8a:53:57:a6:64:48:dd:b9:a8:
5b:82:c7:35:82:2d:16:b5:38:65:8b:7f:9a:ad:64:
fb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:91:95:3E:C1:C0:28:FB:59:A3:A9:41:22:BD:0C:A9:D8:FD:DA:74
X509v3 Authority Key Identifier:
keyid:DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4d:81:53:b7:52:57:00:0d:ea:75:9c:ed:a3:65:96:8d:bd:
28:c6:30:c5:ad:8c:53:f1:e9:61:2a:e4:8b:7e:61:0f:c9:d7:
50:04:f5:71:dd:03:34:dd:4e:7d:fe:34:40:50:06:bf:50:47:
f6:57:38:86:dc:14:e2:87:47:74:84:64:3f:e5:3e:26:49:1d:
22:01:99:98:ad:d4:bb:d7:ec:a9:fc:a6:eb:de:fb:b4:7a:58:
00:ef:08:4b:0f:8f:6e:a7:50:f5:d5:16:16:7d:08:40:ba:6a:
3b:dd:73:71:24:5f:fb:30:ce:42:1e:73:c2:98:a2:3d:f0:80:
31:61:18:c5:c4:bb:ed:01:bd:60:8c:fd:ff:57:fe:c8:48:88:
ff:02:90:1a:d2:f8:18:0a:ef:21:33:96:cb:e2:80:9f:78:7e:
76:49:14:89:d6:19:17:30:38:3a:66:8c:49:db:0e:80:1f:10:
cf:8a:59:38:81:35:4d:67:8a:81:59:ae:ea:53:3f:30:5c:42:
35:31:44:39:d5:46:14:c0:94:8f:59:f5:6a:27:a4:8b:27:4d:
4d:20:06:fe:9d:8e:da:98:4b:d5:07:b7:15:c4:03:32:40:ac:
3c:3e:d6:50:d9:e5:f3:e2:ee:c1:86:41:83:ea:eb:f2:37:11:
60:96:cb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:52:48 2025 by rpki-client