Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: yAsaYBSfeiC43V8udYs4Q63v89bCSbbLCnwEJFp2mkE=
Subject key identifier: 59:D6:DB:9F:6C:14:3E:44:C6:48:6F:A4:0A:35:39:B9:04:BF:AE:B9
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 0197B745199A2544802709DEB4C66F7B6BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 1213
Signing time: Sat 28 Jun 2025 16:00:48 +0000
Manifest this update: Sat 28 Jun 2025 16:00:48 +0000
Manifest next update: Sun 29 Jun 2025 16:00:48 +0000
Files and hashes: 1: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: T0OVDVlN6hkBOoVA1Gw+PJZCcsaPqyPI36EoOrvbDMI=)
2: DgOe6d2o2BQOj9Wt3sGLRcqwsJY.roa (hash: 4FSuJ9FPuzzlW3Hsq3b3yqhIsDO/q6s/Z+iendZviDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:19:9a:25:44:80:27:09:de:b4:c6:6f:7b:6b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Jun 28 16:00:48 2025 GMT
Not After : Jun 29 16:00:48 2025 GMT
Subject: CN=59d6db9f6c143e44c6486fa40a3539b904bfaeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:b2:e7:28:f6:23:5e:19:e9:16:e8:e0:fa:
03:d6:0c:3f:84:cc:22:f6:0a:9f:4d:90:29:14:ab:
ef:ed:9a:7e:35:28:72:8c:bc:12:6c:63:a3:15:f5:
e7:a5:93:ce:7f:c8:58:14:e2:9e:83:61:b8:5b:8a:
b6:18:65:67:39:4b:8e:97:89:4d:3d:5c:e8:33:20:
b6:c0:ef:1d:86:7f:00:57:5a:4c:8e:fb:a6:a2:71:
d3:7e:07:ae:d7:35:86:6e:2a:f6:1d:d8:77:9f:1b:
f6:06:32:43:b4:c0:47:8e:3f:00:fa:ab:f2:46:2b:
40:99:e0:1a:22:e3:65:0c:4d:da:80:e0:de:93:b9:
8c:94:65:cd:eb:88:e4:d5:47:a3:13:11:d0:4e:9f:
c3:05:41:b0:24:2d:cc:dc:59:3c:ce:67:74:fa:e1:
e4:59:e6:f8:d8:c7:4c:98:37:98:e5:22:e3:b5:8c:
9d:26:54:ca:1d:96:86:ab:a2:7c:ae:8f:27:54:0f:
07:19:18:a3:80:ea:18:64:3a:92:41:74:8d:87:cc:
43:7d:1c:ea:66:08:a1:fb:26:15:d3:af:5f:b0:f1:
9f:57:fe:30:86:ce:0f:e4:ae:53:a8:25:4f:39:30:
15:07:cf:e0:6e:99:89:ac:6f:3d:bd:a1:cc:08:0e:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D6:DB:9F:6C:14:3E:44:C6:48:6F:A4:0A:35:39:B9:04:BF:AE:B9
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a7:14:05:38:b0:f5:93:cd:43:a1:3e:01:53:05:cc:9f:d4:
d1:39:7d:8a:d2:fc:39:89:3e:e0:06:33:55:ff:de:e2:35:11:
25:b2:da:e3:a4:b4:70:93:4e:9e:b0:54:41:de:9a:dd:02:11:
8d:23:0d:fe:2c:84:e0:bf:c1:ca:47:13:b8:64:62:1f:8f:2e:
98:6c:5f:c2:f5:0f:b3:1e:b5:3a:69:88:e2:4f:a0:b8:e4:2e:
ac:97:be:98:b5:2b:d5:72:78:68:bd:17:34:b0:94:11:d7:1f:
30:4b:0a:1f:69:a2:19:e9:42:0c:ab:d8:1a:e6:52:04:55:9f:
f6:bf:f6:82:c1:29:af:4c:f5:ce:a1:b4:94:60:49:02:85:12:
eb:7c:78:23:f7:2f:71:94:ca:35:3f:80:97:ff:ce:58:be:12:
21:37:a1:de:74:da:a2:dc:6c:89:72:c9:21:15:0c:98:84:f7:
bc:24:80:b3:95:b8:d5:6e:66:fc:6c:ae:2d:9d:70:f6:19:fe:
e3:b9:93:91:e8:f5:71:0d:79:70:a2:91:6b:25:34:ee:28:ca:
f7:4b:48:52:48:3b:fc:25:46:0e:04:b2:1a:0e:ba:2f:51:32:
e8:6d:1a:a3:ef:c1:b3:3b:c7:19:7c:91:33:a4:d8:47:45:8c:
df:7a:ce:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:48 2025 by rpki-client