Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: eEioL4HQXyYWl8UfqL7W2/H8XkjwkOqp+wasKalnCPQ=
Subject key identifier: 58:CB:21:DD:A4:61:2E:C0:F6:02:72:A1:59:FC:1E:35:49:26:E9:B0
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 0198D5BC13560EBF9396BF4EBCACF4A38D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 018F
Signing time: Sat 23 Aug 2025 07:02:09 +0000
Manifest this update: Sat 23 Aug 2025 07:02:09 +0000
Manifest next update: Sun 24 Aug 2025 07:02:09 +0000
Files and hashes: 1: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: 9ScCokZDSMAjiTPH/Ma7F2zEwFzRwv7b+dHM7/9TZPI=)
2: TRwuVLW4klZRmD-yk2-fscrFudk.roa (hash: 4oIJHQETV5zvQ/SAaoMsWRc5+etxaluBpp2HxMv8sfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:13:56:0e:bf:93:96:bf:4e:bc:ac:f4:a3:8d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Aug 23 07:02:09 2025 GMT
Not After : Aug 24 07:02:09 2025 GMT
Subject: CN=58cb21dda4612ec0f60272a159fc1e354926e9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:48:1b:5c:b1:9e:66:1a:dc:4e:aa:60:e0:3b:
a6:99:26:17:49:af:5e:2c:f9:ba:9a:09:dc:6c:b8:
9c:7f:9a:88:e3:e3:0c:9d:d7:1a:07:4f:ac:c1:e1:
35:cf:c0:8d:6f:82:7e:29:c9:d5:bd:1c:25:66:23:
67:be:d5:6c:de:01:78:58:ae:50:19:4a:db:4d:69:
64:c6:59:b4:2f:d0:4f:ac:58:07:de:8e:c7:b7:ad:
56:ed:4e:62:82:35:5a:67:bc:67:07:db:51:4e:c7:
38:07:34:29:ea:ad:30:42:cd:cb:7e:18:d6:7d:31:
19:30:c8:47:29:f3:df:e4:b8:10:b8:f0:2b:61:1d:
29:4a:b6:7b:8e:a7:9f:0e:bc:2c:65:9e:33:45:3d:
59:e7:67:dd:0c:aa:02:a9:a9:54:be:99:9d:e5:ab:
be:04:a1:0b:b2:ea:e6:dd:e2:44:60:f8:50:d9:a1:
e2:06:db:e0:2d:ef:68:0c:ce:6e:03:54:5f:1f:ab:
f3:df:3c:6e:b4:91:11:e2:bc:d6:c2:43:21:a7:2a:
26:9b:52:1d:06:c7:f6:ea:f0:31:65:91:33:14:05:
74:d3:35:72:38:cf:ee:0d:29:51:4b:e2:c5:66:88:
5c:21:c5:39:ab:08:d2:a0:bc:e8:51:73:5e:79:4c:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CB:21:DD:A4:61:2E:C0:F6:02:72:A1:59:FC:1E:35:49:26:E9:B0
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:31:ef:77:da:23:66:ab:eb:61:f2:8a:f9:4f:da:bd:15:92:
e8:43:5e:48:26:43:5b:b8:23:4d:8a:c4:06:c7:93:bb:52:69:
dc:11:55:75:4e:78:58:d2:e2:28:c2:99:36:49:09:0b:ae:5c:
9b:75:d4:c9:84:6a:d7:d4:09:35:3d:d0:6b:2b:e5:e3:3b:f3:
d0:6a:79:42:03:a0:8e:05:34:c0:77:d9:80:47:2a:d1:bb:91:
3a:37:c5:87:16:25:2d:cf:d5:5c:e4:11:ba:d4:1a:b8:28:44:
f9:48:a6:c8:93:18:a3:e0:a1:11:e7:cc:8a:7e:ad:83:9c:9b:
4d:e6:3d:ad:3d:cc:c0:bc:df:25:ea:0b:d9:ca:89:0f:3d:a3:
8c:55:48:c7:92:a6:62:48:50:89:43:2f:8b:92:bb:60:d9:19:
0a:43:fb:b5:06:67:3b:7e:7c:4f:83:21:69:ea:b2:7b:7f:50:
0c:4f:eb:84:48:89:c5:70:a1:f6:3d:5a:54:31:f9:6d:1b:3e:
91:14:67:0e:f0:91:be:a0:ab:bf:d1:83:49:a7:9e:36:29:6f:
20:b6:72:21:fa:ee:d7:36:51:ab:a2:5a:72:44:e3:5c:df:e8:
e4:19:f7:0f:e7:f7:48:40:7a:9b:29:21:c9:e6:ae:81:c6:93:
72:74:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:09 2025 by rpki-client