Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json)
Hash identifier: B6GNOVH1w8Fafk/2T7OOCgYVuE9Qlf9DDiHEUT5En3g=
Subject key identifier: 5B:F9:5B:6B:70:6C:32:DA:15:9A:B4:08:30:D5:5A:BD:B9:65:A2:CC
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial: 019A541A6D0140EE109D3F632F554E4D24BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
Manifest number: 0255
Signing time: Wed 05 Nov 2025 13:00:09 +0000
Manifest this update: Wed 05 Nov 2025 13:00:09 +0000
Manifest next update: Thu 06 Nov 2025 13:00:09 +0000
Files and hashes: 1: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: xUWLkdsicbZaOh095xE3smMKYqTnMO4UMq82jR5SSUY=)
2: TRwuVLW4klZRmD-yk2-fscrFudk.roa (hash: 4oIJHQETV5zvQ/SAaoMsWRc5+etxaluBpp2HxMv8sfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:6d:01:40:ee:10:9d:3f:63:2f:55:4e:4d:24:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Validity
Not Before: Nov 5 13:00:09 2025 GMT
Not After : Nov 6 13:00:09 2025 GMT
Subject: CN=5bf95b6b706c32da159ab40830d55abdb965a2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4b:e0:4a:c5:57:04:65:57:b6:6e:75:0f:69:
6c:df:85:23:4f:03:20:bc:6d:d3:0e:70:aa:92:c7:
d5:3b:b4:5c:c2:2f:3a:89:a9:df:4e:6d:42:5d:93:
27:c9:7f:54:ce:ed:e5:52:e4:8d:fb:89:83:1f:4f:
a5:eb:45:d3:a9:9f:4f:7a:75:45:83:24:9f:2a:df:
12:78:b5:a0:7e:b2:f9:c9:e6:4b:6a:b6:fe:8f:01:
77:00:8d:48:78:e6:71:41:fe:8d:f8:a7:2c:b9:d0:
4b:ed:26:d3:bc:49:33:a4:c2:cb:25:0c:9e:bb:8c:
2c:d4:56:9e:58:a9:48:f0:9d:fd:c8:cb:8d:74:0d:
b7:ad:79:82:fc:44:59:df:44:8c:46:17:a9:bb:70:
2b:5b:82:5e:37:80:a5:13:62:cc:80:b1:11:eb:94:
07:70:05:e7:34:da:48:b1:5f:f3:88:0c:1e:07:c9:
18:62:f6:79:88:3c:43:4f:7f:cd:12:9d:6a:a0:79:
b1:9c:4e:29:ba:33:6e:7d:89:7c:a9:6c:70:19:fc:
2b:37:16:10:dd:de:00:ab:62:d2:7c:be:1d:6e:bc:
70:fb:e9:e7:f0:51:58:6b:9e:0e:43:25:c8:0a:40:
2b:74:8c:2e:e3:84:45:c3:9a:1b:2d:c8:b6:26:48:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:5B:6B:70:6C:32:DA:15:9A:B4:08:30:D5:5A:BD:B9:65:A2:CC
X509v3 Authority Key Identifier:
keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1a:78:3b:16:b3:c2:dc:c3:a8:81:37:f8:25:0d:00:ce:8e:
7f:ac:63:d9:ad:01:05:c7:ce:ff:70:8f:83:41:8f:81:77:ea:
be:8d:5e:0f:bc:59:61:8d:de:27:dc:6c:e0:12:7b:80:c0:2b:
e9:e6:0f:bb:94:e8:2a:f8:27:ef:29:ef:6a:86:1b:6e:26:37:
ae:9d:7c:12:e0:c9:a1:15:f2:ee:5b:c7:65:fe:60:99:95:71:
7c:79:12:51:d5:a6:09:6e:e9:24:bc:91:69:08:6a:67:fe:57:
a1:60:8d:35:e3:9f:ec:c3:7b:65:53:f2:a3:3d:16:14:e2:e1:
83:a2:aa:0a:ba:9e:c7:a7:17:32:5f:92:92:9e:3d:8c:39:6d:
6b:0e:5b:8e:a3:6c:c6:ed:64:85:e0:0f:d9:21:8a:c3:24:7b:
f7:cb:04:d4:63:16:13:f1:e7:04:f9:ea:fb:f2:ba:8c:bc:ec:
b3:ef:dc:c3:a6:58:cb:36:74:40:7b:09:71:1b:d6:91:38:2d:
7d:37:8f:26:0c:3a:f2:c9:1a:6d:cc:2c:4b:e2:45:01:d7:52:
66:fa:7c:b0:21:ca:f4:19:9d:96:1c:b9:4e:93:a3:5d:2c:ff:
46:51:4c:ae:cb:66:68:58:f5:79:41:f2:ec:cb:3e:1a:c9:2f:
75:6c:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:47:46 2025 by rpki-client