Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: 7GcbBkwxzgQetSpRTfcNkSsnlJROYciFzQHzEVyF4Mc=
Subject key identifier: A2:8A:24:3E:73:73:A6:F0:35:E3:3F:87:AC:AC:F9:04:2D:B7:9D:3E
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 019844E3D1D277A45F53CC5780F0E89CF2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 0144
Signing time: Sat 26 Jul 2025 04:00:37 +0000
Manifest this update: Sat 26 Jul 2025 04:00:37 +0000
Manifest next update: Sun 27 Jul 2025 04:00:37 +0000
Files and hashes: 1: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: iNU0xzEbg2zoU9SrdnxiRlxx6PkLC8pEkkkRlzvciK0=)
2: TRwuVLW4klZRmD-yk2-fscrFudk.roa (hash: 4oIJHQETV5zvQ/SAaoMsWRc5+etxaluBpp2HxMv8sfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:d1:d2:77:a4:5f:53:cc:57:80:f0:e8:9c:f2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Jul 26 04:00:37 2025 GMT
Not After : Jul 27 04:00:37 2025 GMT
Subject: CN=a28a243e7373a6f035e33f87acacf9042db79d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:e9:1a:04:61:07:c0:22:4e:b0:50:4f:ec:
7a:bb:f9:b6:50:41:fb:39:48:f8:e0:4a:e5:64:c9:
b4:b7:4f:6a:eb:e3:d3:65:e7:c6:28:0c:bf:3c:c8:
d0:79:90:3e:08:c3:a3:9d:49:ce:15:38:5a:ee:97:
4f:60:f5:44:9a:70:07:2f:24:57:a7:aa:8f:e4:e2:
68:03:c9:31:c9:1d:84:c6:2e:69:e8:b7:7e:ac:8b:
7f:eb:17:a9:71:b4:fc:e6:c7:64:e6:8c:23:bf:74:
13:97:05:bb:8f:59:5b:1c:32:61:07:b3:07:a1:3f:
a5:82:7f:5c:60:0d:3b:9a:d4:a4:d5:eb:19:98:12:
1d:a0:35:ec:a5:a7:2c:6b:43:72:e3:3c:38:8c:c4:
19:f5:29:a3:28:58:34:97:c7:46:6e:2d:04:0a:6c:
5f:98:69:a7:61:cf:53:dc:47:43:c2:3a:92:47:99:
a5:51:eb:2a:7e:a0:c5:f4:a4:7b:7d:09:d4:25:c5:
41:5d:4c:65:fd:8d:77:57:16:be:8b:b3:de:04:c5:
85:b2:0e:58:bb:08:4d:bc:41:23:85:b2:3c:f3:7e:
f9:62:14:01:eb:65:86:20:16:5e:18:96:be:f0:aa:
f3:cd:2c:b4:32:c6:45:08:1a:c8:fb:83:b9:fb:24:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8A:24:3E:73:73:A6:F0:35:E3:3F:87:AC:AC:F9:04:2D:B7:9D:3E
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:48:37:23:3a:41:35:1d:a0:9d:00:51:51:b7:98:f4:62:20:
75:f3:ba:aa:81:83:7a:da:4a:55:29:5b:9c:5e:f5:13:4c:61:
ee:71:27:65:17:82:d2:71:80:6a:09:c7:18:e2:14:ad:42:e4:
fa:43:11:46:f8:ee:87:91:05:96:e3:61:19:05:45:a9:86:b9:
37:51:88:7d:03:4b:13:2e:e5:16:0a:c6:71:7b:f1:bd:48:48:
59:4a:00:8c:05:12:f9:da:f0:c3:29:3c:ce:97:6b:2b:48:5e:
f4:c8:d3:6c:28:61:ce:3f:94:43:1e:1b:7d:b9:35:06:00:45:
81:05:fc:3b:dc:60:8f:0c:e2:7a:26:4c:ba:78:14:7f:a4:c1:
e1:f9:ff:f9:d8:3d:e6:d8:98:7a:49:d6:cd:27:42:86:a2:df:
9e:14:53:a2:96:2d:4a:c0:12:7c:e5:8d:50:bc:a9:32:be:38:
11:0a:2b:2d:0c:3f:93:cc:29:a5:a0:19:e9:75:69:08:b2:aa:
b3:d8:a8:e9:91:56:5e:48:89:e8:7d:4c:bb:e8:03:09:fd:7c:
64:62:ab:01:08:9e:de:d7:57:e3:6a:9a:a2:2b:fd:70:7b:43:
52:a8:d3:d2:3d:17:68:03:e1:36:95:1e:d6:4e:3d:11:0b:8a:
fb:16:a5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 08:04:58 2025 by rpki-client