Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: fc2jfgEKraJbNhmoHxKTofUmkgz3pDQwYmX/fR0wu1M=
Subject key identifier: 82:89:5A:9C:80:27:A6:1D:2A:65:68:29:5B:8A:3E:5C:AD:80:B9:9E
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 0199553050C20577CA32A334AFDBDFD23570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 01D1
Signing time: Wed 17 Sep 2025 01:00:53 +0000
Manifest this update: Wed 17 Sep 2025 01:00:53 +0000
Manifest next update: Thu 18 Sep 2025 01:00:53 +0000
Files and hashes: 1: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: DuDhDcag3A0KAzWZqrLGhhHyxGmC/+IqCKaLRKEQUYs=)
2: TRwuVLW4klZRmD-yk2-fscrFudk.roa (hash: 4oIJHQETV5zvQ/SAaoMsWRc5+etxaluBpp2HxMv8sfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:55:30:50:c2:05:77:ca:32:a3:34:af:db:df:d2:35:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Sep 17 01:00:53 2025 GMT
Not After : Sep 18 01:00:53 2025 GMT
Subject: CN=82895a9c8027a61d2a6568295b8a3e5cad80b99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:3f:e8:ab:77:bd:7d:17:0f:25:9f:b8:bc:
c6:e0:c5:d7:87:56:15:e3:77:a7:37:af:e0:de:2f:
2a:ca:27:bf:53:95:06:34:7c:85:7b:0c:b4:c2:91:
df:8a:46:a7:07:03:76:53:3f:fd:1b:6f:e9:dc:7c:
0b:62:d1:6b:89:06:e2:75:55:e3:58:76:57:d9:17:
d6:68:0c:35:8f:8e:d5:9e:d5:0f:38:a6:6b:35:aa:
2e:ba:39:33:66:ce:28:2d:68:05:4b:aa:97:79:07:
2a:3c:b5:00:a6:0a:54:10:68:59:4b:47:d5:b9:11:
ce:ba:9e:b9:b5:bc:3a:76:91:ef:f4:9e:f6:be:54:
09:11:0a:68:c6:aa:01:92:a5:f1:e3:e1:eb:36:85:
39:e5:6e:df:4e:c6:57:2e:94:19:fd:12:e5:27:e2:
24:af:31:56:22:bd:96:55:8e:0b:fb:3c:67:1e:b3:
67:0b:19:f6:eb:cd:60:dc:81:2a:8b:e2:c7:f4:3c:
9b:ed:4c:86:35:f2:ee:b0:57:60:0b:a8:ee:79:1e:
05:d7:9e:37:ea:ad:13:f3:0a:23:03:ac:70:51:b8:
48:e3:17:43:12:c3:26:93:0c:f4:8e:ac:bf:f5:6e:
b6:df:71:2a:bd:e3:93:c9:23:91:8f:96:5d:2c:77:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:89:5A:9C:80:27:A6:1D:2A:65:68:29:5B:8A:3E:5C:AD:80:B9:9E
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:55:98:99:2d:13:ac:d0:dd:52:f9:ba:88:64:94:e0:29:53:
59:48:fd:ff:30:f6:3c:74:57:01:3c:ce:94:6f:ce:f2:9b:47:
b0:56:60:f6:55:06:6b:39:7d:ee:8a:a7:6b:86:d4:d3:58:0c:
a4:9f:50:d9:07:47:60:60:7e:9e:c7:3c:b5:4d:95:e7:1c:18:
88:4d:3a:c5:a5:14:07:a7:27:ce:78:96:75:6b:ab:49:6b:bc:
3a:d7:41:7b:fd:04:6b:69:49:fe:49:0e:71:6c:cd:1c:cb:d5:
4c:0b:f4:6a:f7:0e:25:cb:0e:d2:57:b8:ac:58:70:70:64:92:
40:f8:46:ea:08:30:aa:c5:60:8b:f1:0e:16:d9:2d:1b:1c:00:
eb:1f:24:3d:b7:15:e2:ef:56:06:fb:bb:3a:7e:1c:97:41:ed:
cd:de:34:00:59:f5:d4:10:d9:d4:ea:f4:5a:c4:b8:bf:89:84:
c0:4b:dc:49:f7:da:a0:08:a2:17:e5:98:94:65:01:b5:60:bc:
db:bd:a3:b0:b1:58:3e:b2:17:cf:eb:8a:de:34:2b:c1:4c:8f:
32:60:2a:eb:48:f9:b7:17:eb:dc:76:4e:ab:42:c0:4e:5f:c9:
75:ca:1a:cb:9c:3c:a8:8e:2f:cd:ee:3e:86:21:0a:ac:41:31:
ef:5e:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:19:43 2025 by rpki-client