Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: rL/xgupbuGVV0pbk8m/VD+7TNyXy/wwIEugaai2RamI=
Subject key identifier: 15:60:08:98:61:6E:8C:E2:E6:63:C5:63:25:7F:3C:D7:89:CB:DB:82
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 0197537D7441AAF05E147F5A285050ADCFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: C7
Signing time: Mon 09 Jun 2025 07:00:19 +0000
Manifest this update: Mon 09 Jun 2025 07:00:19 +0000
Manifest next update: Tue 10 Jun 2025 07:00:19 +0000
Files and hashes: 1: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: p+hzFp8HBZrroqJbkzp33fD4feQYS7k8GEoHkT181yQ=)
2: TRwuVLW4klZRmD-yk2-fscrFudk.roa (hash: 4oIJHQETV5zvQ/SAaoMsWRc5+etxaluBpp2HxMv8sfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:74:41:aa:f0:5e:14:7f:5a:28:50:50:ad:cf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Jun 9 07:00:19 2025 GMT
Not After : Jun 10 07:00:19 2025 GMT
Subject: CN=15600898616e8ce2e663c563257f3cd789cbdb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:b8:22:85:06:6c:59:a1:f5:4a:6c:05:08:
e3:16:5d:b4:46:7d:a5:6a:73:8d:b9:ca:db:58:70:
cf:6e:ee:93:49:6b:58:9f:f1:28:b9:b9:41:9b:b4:
a7:40:b0:91:71:bf:4c:04:2a:df:da:4e:de:ea:6a:
0d:98:85:f7:be:8a:ff:88:97:27:04:94:99:f7:32:
ef:9b:e5:3e:96:48:6d:9b:e7:80:3b:e3:b1:ee:82:
b0:21:90:6b:42:93:25:f0:86:86:bf:73:f2:ab:67:
e8:18:84:dd:79:b7:6c:48:e7:00:53:70:49:88:cb:
2b:bd:98:45:69:74:74:7e:55:80:c7:3b:b4:36:da:
fe:7b:07:7f:8a:ea:19:96:14:87:dc:0b:41:2b:74:
af:27:64:59:c3:d5:68:87:0d:62:eb:65:9d:c3:4d:
39:97:fa:a5:38:be:69:99:ca:93:e3:cf:35:53:eb:
b2:c8:eb:7a:48:88:93:18:4a:ad:d3:83:9c:ed:68:
c9:91:16:e6:2c:7b:68:07:a4:11:2e:62:62:89:ca:
b8:1d:c5:6f:5f:e8:29:7f:9c:7c:76:47:06:37:0d:
d6:58:2c:9b:b4:91:7c:ea:ef:75:9c:2b:0d:2f:49:
02:00:14:2e:74:4b:36:a1:35:a9:44:7c:bf:13:a3:
52:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:60:08:98:61:6E:8C:E2:E6:63:C5:63:25:7F:3C:D7:89:CB:DB:82
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:24:3f:ff:f3:3e:3e:dc:ae:d6:a0:41:f8:f8:07:0d:d1:a3:
2c:8d:58:0c:06:5e:44:a4:97:93:cd:31:48:13:78:a0:4c:16:
4b:87:16:00:00:b1:d5:a6:54:99:08:6e:7b:5b:ed:12:f7:da:
5f:46:1c:65:75:f9:c8:86:7d:15:5e:69:b0:15:92:65:3e:25:
ce:38:96:16:9d:b3:81:89:c0:09:ba:7f:66:75:c8:b2:93:05:
c9:97:20:b6:b1:f7:c2:29:54:1e:3f:33:35:c1:bf:be:76:f9:
ab:35:c0:36:da:ad:70:fe:b1:f4:43:03:ab:4b:ee:99:5a:20:
71:78:75:d7:74:80:c9:f8:11:91:73:8b:18:c2:c3:18:1f:30:
64:6c:f9:6e:7b:dc:2c:c5:88:fd:c3:66:77:48:a9:b0:b6:ca:
a7:65:09:ef:b1:b6:7e:6c:b0:a0:86:31:09:b1:4b:22:bc:92:
81:32:2a:1e:48:ce:64:4e:cd:87:00:17:7d:d0:df:60:da:b4:
e4:9e:57:8c:0d:e7:0b:8e:5a:b0:f9:5d:87:f9:b9:5e:02:92:
df:4c:01:61:c2:e4:85:82:c8:66:7a:b1:3f:35:f3:2c:69:d1:
08:4d:83:79:17:01:94:11:4a:52:eb:7f:01:53:63:90:9e:13:
2d:ab:9f:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTfXRBqvBeFH9aKFBQrc/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MjIzZTBkYTkyZDZhOTVjMGU1ZTJiMmY5YThkYTk5NThh
NzRmMzYwHhcNMjUwNjA5MDcwMDE5WhcNMjUwNjEwMDcwMDE5WjAzMTEwLwYDVQQD
EygxNTYwMDg5ODYxNmU4Y2UyZTY2M2M1NjMyNTdmM2NkNzg5Y2JkYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoq4IoUGbFmh9UpsBQjjFl20Rn2l
anONucrbWHDPbu6TSWtYn/EoublBm7SnQLCRcb9MBCrf2k7e6moNmIX3vor/iJcn
BJSZ9zLvm+U+lkhtm+eAO+Ox7oKwIZBrQpMl8IaGv3Pyq2foGITdebdsSOcAU3BJ
iMsrvZhFaXR0flWAxzu0Ntr+ewd/iuoZlhSH3AtBK3SvJ2RZw9Vohw1i62Wdw005
l/qlOL5pmcqT4881U+uyyOt6SIiTGEqt04Oc7WjJkRbmLHtoB6QRLmJiicq4HcVv
X+gpf5x8dkcGNw3WWCybtJF86u91nCsNL0kCABQudEs2oTWpRHy/E6NSoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVgCJhhbozi5mPFYyV/PNeJy9uCMB8GA1UdIwQY
MBaAFDQiPg2pLWqVwOXisvmo2plYp082MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQt
NmI1MjM5Nzc5ZDhhLzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQtNmI1MjM5Nzc5ZDhh
LzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyQ///M+
Ptyu1qBB+PgHDdGjLI1YDAZeRKSXk80xSBN4oEwWS4cWAACx1aZUmQhue1vtEvfa
X0YcZXX5yIZ9FV5psBWSZT4lzjiWFp2zgYnACbp/ZnXIspMFyZcgtrH3wilUHj8z
NcG/vnb5qzXANtqtcP6x9EMDq0vumVogcXh113SAyfgRkXOLGMLDGB8wZGz5bnvc
LMWI/cNmd0ipsLbKp2UJ77G2fmywoIYxCbFLIrySgTIqHkjOZE7NhwAXfdDfYNq0
5J5XjA3nC45asPldh/m5XgKS30wBYcLkhYLIZnqxPzXzLGnRCE2DeRcBlBFKUut/
AVNjkJ4TLauf7Q==
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:01:24 2025 by rpki-client