Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: b6gFTJhO0Lt4l0BMoUnUOzoL/Ha6d4bN1XCS/M6W1EI=
Subject key identifier: D4:8E:31:B3:0C:0D:BF:44:96:5C:BB:BC:17:3C:2E:3F:76:75:E2:6F
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 0199FF2243F7E2B96B236171C9E08961B121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 0229
Signing time: Mon 20 Oct 2025 01:00:59 +0000
Manifest this update: Mon 20 Oct 2025 01:00:59 +0000
Manifest next update: Tue 21 Oct 2025 01:00:59 +0000
Files and hashes: 1: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: FX+I7ZhtEgF0nfFJVRtHjVWwNmBbrW3+VY5nKjQ+cvA=)
2: TRwuVLW4klZRmD-yk2-fscrFudk.roa (hash: 4oIJHQETV5zvQ/SAaoMsWRc5+etxaluBpp2HxMv8sfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:43:f7:e2:b9:6b:23:61:71:c9:e0:89:61:b1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Oct 20 01:00:59 2025 GMT
Not After : Oct 21 01:00:59 2025 GMT
Subject: CN=d48e31b30c0dbf44965cbbbc173c2e3f7675e26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:d8:f9:aa:ad:5a:db:36:c7:a4:02:6c:16:
c4:4b:ea:74:b0:9d:21:4c:4c:d5:12:ec:a1:9d:4d:
0c:bf:ad:a3:a3:fa:90:3f:a5:68:c4:4e:73:e3:82:
30:5e:ee:d3:e2:86:88:40:2e:e5:bc:42:55:ad:09:
28:6d:e8:c0:3e:ce:59:51:15:32:ae:b8:28:23:19:
54:7a:11:34:e7:c8:2e:a3:5d:ca:65:ef:8e:63:f8:
e0:66:b9:eb:e6:80:3b:d9:5c:8e:be:3e:37:e1:5a:
85:3f:bc:79:0f:d7:6e:1f:f0:95:16:b8:9a:a8:8a:
5a:a9:57:e3:e3:44:d2:00:1f:59:6a:2e:a5:0c:22:
8d:40:9c:36:c5:55:94:13:54:83:f4:95:d9:27:3d:
1f:4e:fb:31:da:d3:b5:f3:dd:55:e3:16:4a:58:e7:
a5:57:49:f8:30:d2:96:20:16:74:58:f9:07:f1:4d:
05:07:a5:0c:19:eb:04:81:af:d5:34:f2:42:bb:f1:
07:af:b8:cc:22:75:e6:3f:b5:e1:7c:ae:7d:13:32:
28:f0:03:7f:81:7a:79:78:4a:3d:78:08:bb:b9:41:
73:f1:0b:16:d6:06:4f:c5:54:64:9a:da:88:31:fa:
fc:8b:f4:e5:af:91:fe:be:96:f2:74:4c:23:1e:4c:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8E:31:B3:0C:0D:BF:44:96:5C:BB:BC:17:3C:2E:3F:76:75:E2:6F
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:47:82:76:bb:ec:0c:70:9a:56:90:0b:63:56:93:b0:e1:fd:
b0:9c:35:b9:59:35:16:d4:92:11:69:c3:f6:f7:27:28:d5:1b:
ad:e4:dc:18:af:b5:e3:69:28:5e:59:0a:5b:44:4b:f9:a6:8b:
5d:89:1c:0f:93:cc:e1:ac:66:e8:ed:9b:f4:e8:79:a3:26:c9:
42:d5:3d:30:4d:ba:09:f0:44:0e:13:a3:91:da:91:35:41:79:
e6:ed:e9:76:01:9d:df:c2:da:e2:d9:10:09:87:81:80:89:b1:
07:c5:22:71:b8:29:bd:dc:5b:6e:44:58:5e:60:1f:02:0a:d9:
07:b7:ca:86:26:4e:fe:2d:1a:cd:27:f6:e1:a7:1e:fe:1e:f3:
fb:2c:f9:b1:ab:7e:63:ad:ad:e5:52:57:35:23:75:92:50:5b:
33:c7:33:b3:b6:64:61:a0:ae:b2:ae:9d:1e:0f:5e:7b:b5:de:
8f:da:2d:d1:7c:ab:ad:3f:98:0f:2b:c3:0a:6f:1f:8e:b1:2f:
bd:5d:f3:a4:04:d4:be:7c:7f:66:20:a4:d2:dd:d2:c2:18:2f:
47:e2:70:93:c5:1a:6a:2c:91:f4:4c:7b:e2:3a:db:bc:d5:30:
9d:53:f2:b5:f7:8b:0a:d5:b5:e4:d5:6e:48:17:54:83:6a:0b:
0d:ed:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:39:56 2025 by rpki-client