
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier: O4TTIvA70iURy5HZPP0jJ2eujY+ulZBOzNdlszMYJsQ=
Subject key identifier: 35:2B:64:E1:04:F8:2D:D2:18:31:9F:20:66:69:0B:A3:A3:94:09:91
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial: 5359EC6A11399C85757278EF0FF987064B9EFD73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number: 0320
Signing time: Thu 06 Nov 2025 04:17:37 +0000
Manifest this update: Thu 06 Nov 2025 04:12:37 +0000
Manifest next update: Fri 07 Nov 2025 07:01:37 +0000
Files and hashes: 1: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: Lmh4khK9jqfGM7AgqtrinnAM2ubStxsQ/YZSUwbqCvU=)
2: 323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa (hash: LOHxn0RgwORnxWPoX7PgNpofW2yqHK4ri4vHvhFnLZQ=)
3: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: dNvxw0+R2mi2yZ7yZ+PkpHw5t4IMqFyhS0zsCoWaY88=)
4: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: FghA8Zz7QbzObKv2ia/HqFgnN9W82bmOSCIz6G2zFuE=)
5: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: yuGQYxLGDFfgzV84cWdJmbX8VMZUFqguq3vUOTPoEyg=)
6: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4IHJsjfC0Zoq18aE2FFzAMYZQpT6YF+Y54OUnxbTiPM=)
7: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (hash: 4ZYkW/+NAwrD1ELCwQxEXepcoE4Wv3XF1vCdQrX3iE0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:59:ec:6a:11:39:9c:85:75:72:78:ef:0f:f9:87:06:4b:9e:fd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Validity
Not Before: Nov 6 04:12:37 2025 GMT
Not After : Nov 7 07:01:37 2025 GMT
Subject: CN=352B64E104F82DD218319F2066690BA3A3940991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:0e:88:6f:5f:be:9c:22:0f:3c:83:54:5c:
6e:c6:b2:aa:d7:d0:d9:de:5c:2c:40:e9:96:69:37:
3e:3b:b5:67:9b:be:17:2c:e0:4d:ac:45:be:df:a0:
35:f2:42:0c:ae:70:c3:33:c6:22:93:73:af:49:d3:
83:58:58:e6:0f:95:d9:12:9e:6e:b3:85:d0:49:f3:
63:cc:47:d0:be:42:33:95:a4:35:e0:29:c9:f8:81:
35:84:29:31:81:03:ce:c8:32:9f:88:2f:ac:7e:a1:
51:0d:4a:6d:dd:b2:9b:2d:a3:78:a2:e5:bc:ec:62:
b2:f0:ba:9d:5c:8b:47:bb:13:c6:e8:91:61:a7:9a:
89:df:36:e7:5d:45:47:be:00:65:38:22:89:2f:e2:
d3:51:1a:3f:95:ff:4b:f5:62:01:af:02:21:16:fe:
0e:98:7e:7d:63:fc:df:fa:b9:b2:6d:0c:b3:73:ca:
57:3c:56:d5:c1:f1:d3:5a:fc:c9:3f:1a:ea:62:5d:
28:2b:82:32:07:17:28:53:92:37:84:13:b0:c9:79:
85:ca:35:ae:64:f6:67:1d:4e:25:e2:34:08:2a:06:
e9:0b:1a:1f:9f:43:56:46:8f:c1:1f:c7:a5:7b:21:
45:b8:91:f5:c1:4e:ee:c4:25:4b:6d:41:4f:9a:1a:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2B:64:E1:04:F8:2D:D2:18:31:9F:20:66:69:0B:A3:A3:94:09:91
X509v3 Authority Key Identifier:
keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0f:67:95:c4:de:10:e7:11:d2:d6:cd:b0:4f:57:cf:54:e7:
de:63:e9:eb:4f:3f:10:a0:54:f8:79:1e:6a:98:d2:2c:7d:de:
e2:54:ed:29:f2:be:f7:d1:7c:a4:53:42:8f:64:5b:ce:5a:c9:
1d:cf:e0:e7:ad:a1:f0:ee:03:16:dc:be:4b:16:6e:25:b8:de:
40:03:2b:a4:d9:cb:da:a0:c3:29:70:c2:e3:bf:b7:7d:4f:b2:
f0:c6:32:18:ce:d6:dd:1f:65:75:80:e3:ef:50:17:b8:59:b7:
f4:cb:37:ae:98:3a:df:7b:37:9e:5a:4e:5b:c2:aa:0e:0b:fb:
1f:02:58:da:35:88:7f:25:7b:ba:73:8e:46:eb:cf:c0:ab:0a:
13:fc:8e:7c:74:82:d4:7c:50:92:ad:c3:a9:f2:89:22:59:0d:
87:e1:2a:73:b7:17:72:07:7e:69:ab:8e:e8:b0:91:df:dd:93:
4a:b5:05:35:fe:2a:54:8b:ce:6d:1a:62:8b:c9:1b:df:4a:bc:
46:92:e0:d3:99:62:d8:56:a8:b2:30:c6:68:01:9e:cb:70:e6:
51:ab:71:21:9c:e6:30:d8:f4:43:00:93:f1:ae:93:a4:7d:4a:
88:0a:45:b3:36:3f:33:3e:f3:ec:75:c4:da:d4:da:7c:4b:49:
08:f1:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:06:06 2025 by rpki-client