Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: qfh/h4LSvgpHDaHWsohv8DWyjyOzqeRv/VdD7/fdR80=
Subject key identifier: 4E:8F:B3:83:7A:3D:9C:9E:10:36:54:3A:2D:7C:EF:10:7B:2A:82:99
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 019897EEC6B7FE05582A3D8ABC12C3B2CD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 016F
Signing time: Mon 11 Aug 2025 07:01:04 +0000
Manifest this update: Mon 11 Aug 2025 07:01:04 +0000
Manifest next update: Tue 12 Aug 2025 07:01:04 +0000
Files and hashes: 1: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: 7EfLTFZRW6oD94nne6zxfUz4Cw5GOh5vULY9DzUmuNc=)
2: TRwuVLW4klZRmD-yk2-fscrFudk.roa (hash: 4oIJHQETV5zvQ/SAaoMsWRc5+etxaluBpp2HxMv8sfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:c6:b7:fe:05:58:2a:3d:8a:bc:12:c3:b2:cd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Aug 11 07:01:04 2025 GMT
Not After : Aug 12 07:01:04 2025 GMT
Subject: CN=4e8fb3837a3d9c9e1036543a2d7cef107b2a8299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:43:21:72:5e:52:4a:fd:80:3e:62:dd:64:
d4:57:7b:60:fe:2d:71:ab:24:7d:4c:a0:5a:46:eb:
56:33:20:de:50:a7:fc:f5:cf:e8:79:8c:19:10:74:
7f:90:9c:94:cc:91:55:80:15:9c:3a:32:70:03:33:
e6:ae:8d:da:52:85:15:70:fa:1f:ef:8c:79:12:85:
95:03:b9:2e:11:87:ce:e6:1d:dc:2c:45:37:43:34:
fc:12:42:47:71:45:ec:c4:c4:15:ec:8e:43:a8:8b:
67:86:e3:c2:5b:aa:69:bf:fb:e8:ea:b0:80:44:17:
d3:ce:1a:45:5c:fc:64:3f:60:f9:c8:1b:62:58:51:
75:0b:38:ad:a0:12:ad:6c:d2:d9:67:ee:ba:54:20:
65:6b:b0:55:40:aa:37:21:5c:da:99:a8:68:28:21:
73:9a:a6:dc:53:4e:09:a0:32:8b:50:b5:21:dc:15:
6b:dc:ec:22:e9:be:cc:90:91:48:f7:95:98:95:65:
b7:30:62:00:66:ea:9b:13:91:62:81:2e:d5:ea:49:
38:0f:fb:4e:05:f5:00:19:32:84:3e:89:a8:d3:37:
3d:ba:65:92:f1:32:d1:5f:08:65:f2:29:e2:a4:09:
e6:6a:db:97:d9:02:fe:ce:dd:b1:ba:10:3a:0a:f9:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8F:B3:83:7A:3D:9C:9E:10:36:54:3A:2D:7C:EF:10:7B:2A:82:99
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4c:e2:5e:ec:dd:eb:8d:d4:83:e6:a4:c2:5c:8e:c9:ae:74:
3f:43:f6:53:84:90:4e:48:03:33:84:9c:30:bb:43:d9:9b:0d:
c4:66:f4:b1:a5:26:d6:04:ed:f2:6d:31:72:27:d8:b4:a8:49:
dc:9a:e8:33:25:e6:44:65:4a:8f:51:ec:bc:ee:d9:14:ea:91:
d5:10:04:ef:25:72:00:98:31:cf:6e:7c:3f:fd:41:1d:dd:12:
68:ba:3d:9c:df:22:ed:8e:ee:93:3b:ae:14:a9:aa:c3:5b:27:
c7:74:4f:f2:5d:61:fb:a7:b5:cb:27:da:d3:61:80:a7:74:c7:
c3:7c:cf:f7:eb:1a:d5:a8:89:56:34:67:3f:14:92:f3:bc:e5:
53:3a:58:c0:21:ea:35:2a:ff:9e:f7:f5:0e:d1:a9:d4:85:52:
29:00:50:0a:55:c8:8e:23:b7:df:81:d5:b4:2f:3a:75:52:bb:
7f:06:a6:d4:3d:35:5b:87:97:40:22:ac:0a:2f:15:4f:1c:1c:
55:9b:e6:5b:97:97:fc:8c:19:1e:42:84:59:9d:bd:b9:08:ff:
7f:25:85:0f:c2:6c:9a:84:50:59:6a:db:40:12:4f:2f:3f:dc:
1e:10:1d:f9:15:85:bf:4e:23:f6:5f:31:b6:5a:38:7f:71:24:
c6:db:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:52:21 2025 by rpki-client