
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
File: D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json)
Hash identifier: GtASIfWoZh6FymNEWbPv2poF2xxUa6U99jDzAR8S3zY=
Subject key identifier: AF:34:04:A9:38:2D:07:89:35:77:29:61:E5:63:CA:F0:E5:C8:07:A3
Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Certificate serial: 5A955B9D430D63B4468966722B9734C02B0212A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
Manifest number: 0456
Signing time: Tue 04 Nov 2025 02:58:54 +0000
Manifest this update: Tue 04 Nov 2025 02:53:54 +0000
Manifest next update: Wed 05 Nov 2025 05:32:54 +0000
Files and hashes: 1: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: jBmUBTQUOEnNy1A0Tmcvx+qaTrzlynR4anP+9qjqWzM=)
2: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: mlyVBtqAxaep1RbpdRUfXUrnFdjKT6MGiKPIjo5bDE0=)
3: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: xlMWcnMOkntkvkwmItiIw9KHDflxZx0Jsc2LELbETrw=)
4: 323630323a666137613a3a2f34302d3438203d3e203537383730.roa (hash: KXZ5ssTmjUClZY+9bglfiLRlAhs+b4BWP1fzlqp7SIY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 05:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:95:5b:9d:43:0d:63:b4:46:89:66:72:2b:97:34:c0:2b:02:12:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Validity
Not Before: Nov 4 02:53:54 2025 GMT
Not After : Nov 5 05:32:54 2025 GMT
Subject: CN=AF3404A9382D078935772961E563CAF0E5C807A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:59:0b:24:45:7a:61:c9:52:bf:af:45:0c:
cc:bd:6d:06:9a:66:66:41:bc:0a:78:b1:e8:87:06:
d3:be:25:95:ac:cb:9d:81:df:51:a2:25:e4:fa:7f:
f4:95:b2:38:f3:cc:42:e0:d5:08:d9:35:fa:98:46:
88:5e:1a:01:ef:ed:17:39:cd:00:4f:0a:d1:94:58:
20:ed:50:12:0e:57:67:32:82:91:21:cf:21:1f:e9:
9a:ec:0d:d1:45:af:01:ab:35:f2:76:24:09:71:2c:
1a:0d:92:ba:a7:9e:0f:00:ad:1a:43:39:82:c8:e4:
1a:0c:45:2d:1e:d9:10:24:2a:f1:f0:26:4b:5f:84:
f7:30:b9:dd:46:cd:23:42:33:a6:37:f0:5f:a8:93:
1b:72:c8:52:67:02:31:27:37:59:8f:ca:c6:41:01:
6f:c8:54:1e:17:cb:3c:dd:55:b7:3b:4a:fa:5c:e5:
b0:82:1f:13:31:3f:30:fe:93:80:cc:cc:8b:e8:48:
5a:6a:1d:6a:35:d9:d4:7d:97:b3:78:a2:30:cc:d4:
98:26:c1:47:bb:d2:83:b9:44:b3:54:2e:7d:4e:ac:
fe:a3:0a:c8:99:86:b2:eb:29:f7:f6:be:ad:0c:64:
c6:47:4e:ba:0d:65:d1:73:c7:e5:c0:5c:62:f2:e5:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:34:04:A9:38:2D:07:89:35:77:29:61:E5:63:CA:F0:E5:C8:07:A3
X509v3 Authority Key Identifier:
keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:19:2b:7d:86:b0:76:04:79:45:2b:14:56:18:de:7e:a3:81:
57:f3:6b:5a:e4:13:78:7c:a6:06:1d:2e:b7:15:85:f2:a7:fc:
15:4c:d8:fd:cb:ad:ae:39:c3:7d:1d:dd:29:07:41:37:5c:2a:
ac:82:61:ec:48:9c:0c:65:1c:2b:02:9b:78:6d:ca:bd:9c:c2:
07:65:70:19:6c:db:6a:28:5f:39:74:f3:99:a4:18:fd:71:1f:
cc:8c:b2:4b:13:23:ef:6b:bd:3f:bc:f9:84:3b:d3:29:7f:d5:
c3:ff:8f:d2:30:16:cf:18:bd:40:a2:44:00:69:10:cb:e1:ff:
92:d4:0f:8c:a9:9e:72:d1:d3:62:ca:4f:22:cc:f5:3b:37:a8:
1b:83:4a:52:bd:cd:5f:65:2d:aa:99:09:f2:1c:4c:7d:26:ae:
a6:31:e6:45:df:6e:eb:d8:3b:f2:3f:b5:8e:08:6b:21:51:16:
b0:37:bc:ce:d7:b2:b9:0e:eb:a0:29:83:ef:2d:45:b7:10:64:
f2:fb:40:61:81:e1:60:43:9c:8b:a6:88:04:86:75:3e:b5:64:
6e:a8:b2:05:ce:38:1a:ba:d9:b9:31:3b:d3:b3:2c:5d:6d:03:
01:a9:75:dc:fe:57:24:e2:9e:47:de:93:b5:98:60:36:8a:4d:
4c:ff:74:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:32:02 2025 by rpki-client