Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: CNvyPT7Zb92VBI0QELeyApAdm2+AoV3OEmQL8hcHBIg=
Subject key identifier: AC:6A:36:84:CC:C0:71:E7:1A:6F:A6:93:C5:08:EC:79:82:CB:46:51
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 0196CC4E939759AA01B0C9008E7B2F6A9DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 81
Signing time: Wed 14 May 2025 01:00:23 +0000
Manifest this update: Wed 14 May 2025 01:00:23 +0000
Manifest next update: Thu 15 May 2025 01:00:23 +0000
Files and hashes: 1: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: 7qrwKFZHcwsoWPerG5u8LZD2K/2okGYrtFpTcWVRVaE=)
2: TRwuVLW4klZRmD-yk2-fscrFudk.roa (hash: 4oIJHQETV5zvQ/SAaoMsWRc5+etxaluBpp2HxMv8sfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4e:93:97:59:aa:01:b0:c9:00:8e:7b:2f:6a:9d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: May 14 01:00:23 2025 GMT
Not After : May 15 01:00:23 2025 GMT
Subject: CN=ac6a3684ccc071e71a6fa693c508ec7982cb4651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:22:c4:21:c5:18:74:d9:47:f0:7b:ba:4e:bb:
54:86:fd:a5:1c:21:e3:ce:5e:45:9c:b3:af:3a:24:
1c:38:67:51:27:ab:20:98:79:3f:1f:11:39:77:e0:
61:17:c2:3f:6e:9c:1b:db:dc:32:98:5b:72:c0:b1:
fe:c5:c7:30:e0:1e:e7:8a:f4:18:a4:07:95:06:1f:
bd:58:c0:f0:b5:f5:3d:b1:8a:41:e7:c6:c3:5b:f0:
0e:d6:0d:b0:62:d1:1a:01:ef:09:13:ef:9b:a3:cd:
32:82:70:db:4e:b3:c8:12:11:ac:c0:d5:ca:0a:e3:
dc:c4:92:63:4f:fe:84:fb:83:44:6a:a4:73:2a:b5:
bb:d2:25:58:dc:61:fc:be:66:b2:bd:f2:08:23:ca:
dd:02:62:f7:ba:a8:e8:26:a2:11:38:76:b3:b9:22:
00:6d:df:6e:93:f0:f8:dd:33:67:0d:de:78:c7:7a:
ba:e2:13:d4:01:2b:13:74:7f:93:22:13:c6:22:54:
d2:86:79:55:a3:de:80:af:64:b2:c2:f8:43:a8:65:
97:0c:aa:b0:e9:5c:55:f9:2f:fe:95:4c:9b:ab:3b:
3a:93:28:f3:54:c8:54:62:89:80:cb:b8:68:4e:74:
d3:3e:6a:f5:45:16:b4:87:5a:ae:b5:54:ee:36:88:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6A:36:84:CC:C0:71:E7:1A:6F:A6:93:C5:08:EC:79:82:CB:46:51
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:48:94:d1:53:a2:61:b4:d8:4b:59:0d:de:78:db:19:71:b1:
cd:06:88:fe:3c:6b:1a:59:00:ce:1b:9f:a2:0d:76:4d:78:32:
00:96:81:c6:cf:9a:5b:8d:f3:37:aa:ab:bd:f2:8f:66:4d:16:
4d:f6:5b:e8:6e:c5:df:a8:e2:c8:a8:24:96:18:ec:7d:22:84:
f9:1c:6d:fe:a0:f2:5e:f1:dd:3b:be:3d:bb:ff:9f:d4:62:97:
e7:db:0c:3a:d4:ca:cb:27:52:e5:2a:7c:56:9d:19:5f:e4:b0:
31:a4:00:c4:6d:bb:0a:40:92:29:a4:43:07:71:62:8c:00:23:
a2:2c:3c:5e:35:79:cb:20:ef:8b:a2:5b:70:b2:a9:54:d6:3e:
04:bc:f2:fa:47:26:2b:61:ee:f5:01:22:90:6a:ae:e6:5b:9f:
a2:fa:e9:e5:d7:f7:08:26:0e:3d:1a:a5:4c:df:bd:3b:29:2c:
5b:73:9c:c3:21:cc:d9:54:45:75:d6:92:0a:fe:85:eb:5a:92:
23:53:2d:4a:30:fb:94:b2:f9:94:fd:9c:9b:a8:88:09:49:68:
a4:3a:1b:1a:9c:6d:5f:90:03:49:bb:a4:71:31:fe:3b:99:ce:
ca:7d:9b:a1:cf:3c:18:81:75:f0:1e:4b:a1:d2:f7:c7:88:8b:
2e:24:74:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:17:49 2025 by rpki-client