Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: ViojWmcvHLfVpQYdsWJJ5Cs4v5Dpzeio7Ary4O/1wP4=
Subject key identifier: DF:43:87:24:BE:4C:DC:94:FF:F5:66:96:CA:3E:9E:A2:E1:A4:94:D5
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 0196A31C2B7B7D7635E4D3AB44C1005215CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 1184
Signing time: Tue 06 May 2025 01:00:54 +0000
Manifest this update: Tue 06 May 2025 01:00:54 +0000
Manifest next update: Wed 07 May 2025 01:00:54 +0000
Files and hashes: 1: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: JxIT+l0zJHZe81Lg5OswPyZdlpwzUrQ/DcQdi5XI8dw=)
2: DgOe6d2o2BQOj9Wt3sGLRcqwsJY.roa (hash: 4FSuJ9FPuzzlW3Hsq3b3yqhIsDO/q6s/Z+iendZviDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1c:2b:7b:7d:76:35:e4:d3:ab:44:c1:00:52:15:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: May 6 01:00:54 2025 GMT
Not After : May 7 01:00:54 2025 GMT
Subject: CN=df438724be4cdc94fff56696ca3e9ea2e1a494d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:24:07:5d:7a:57:cb:5a:73:8a:bb:30:2d:
c3:64:c4:ad:61:1a:2e:80:05:e3:63:6c:92:6c:12:
8b:de:c3:d4:94:09:5a:c4:2e:0b:e1:d7:77:7b:dc:
be:1a:a3:85:50:e9:c7:d2:df:f8:38:bf:e6:a3:53:
98:4b:4f:c4:ee:e8:16:95:99:01:bf:0a:8d:d1:43:
a0:93:0d:fe:41:a7:f5:ff:ce:5b:cd:98:1c:c6:b6:
bd:6e:71:2d:e7:79:2a:63:34:5d:99:bd:69:ab:0d:
e0:51:f6:09:71:4a:ff:b7:50:1b:6f:92:ad:b4:33:
c4:8f:da:2c:23:c3:82:b9:b1:a1:12:ac:e1:7c:f2:
46:e1:d6:60:37:7c:72:d2:f5:17:98:66:3a:48:0b:
c4:1d:84:04:4a:51:cd:7b:cc:e1:3c:e9:db:c7:af:
49:f0:68:c1:e1:c1:34:d3:b4:30:90:1d:46:0d:c0:
7c:10:76:37:31:74:4e:1d:36:f3:d9:5f:d2:9f:f9:
43:e7:dd:f6:2d:3c:7d:ec:34:b2:f6:1c:8a:0b:a5:
a2:e9:63:2f:6c:ef:56:90:6f:87:70:aa:a9:8e:8f:
71:14:be:b8:2d:bb:4b:6c:f1:aa:39:79:20:8e:db:
a3:00:cd:28:2b:47:d4:3f:40:83:93:ef:2b:ff:3d:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:43:87:24:BE:4C:DC:94:FF:F5:66:96:CA:3E:9E:A2:E1:A4:94:D5
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:59:2f:0a:cf:4e:f0:5e:36:ef:fe:cd:8f:19:fd:2e:b0:73:
b4:bb:23:7e:3a:94:fc:a8:b1:17:cb:85:4f:ea:b8:0d:64:a1:
0b:1a:80:d8:e0:28:99:81:e9:ab:ed:b2:da:02:aa:c4:7a:a6:
13:eb:92:bb:c7:67:4f:f9:c7:2a:5a:67:f3:f8:d9:83:e9:8e:
36:df:4a:2a:98:37:d1:e4:b3:59:e8:99:f3:e9:3b:74:26:a1:
d0:d2:29:ce:17:04:46:b4:a4:c6:e3:d6:8b:94:6e:79:b9:bb:
56:ee:62:b5:57:49:ac:9a:51:cb:cf:d8:36:b7:ae:44:6c:8d:
a3:95:ae:05:62:42:fe:da:42:a4:77:7f:d8:6c:5d:94:94:a6:
77:27:c0:cf:fd:82:be:a5:f8:8f:75:15:51:50:14:82:26:56:
05:04:7b:41:37:bb:36:0a:b8:8f:7b:46:f2:1f:40:30:0d:55:
9a:17:c6:2d:4e:84:d3:1d:b9:41:bd:53:d1:c9:bd:46:96:96:
62:43:36:ca:c0:33:36:15:cc:46:74:8b:30:8c:8d:23:2b:39:
ac:d7:3b:b5:4b:ae:e2:41:3b:13:e9:ee:f4:22:08:78:16:14:
dc:93:15:3a:e5:99:e5:72:85:35:e1:28:a3:b0:f4:7f:b8:85:
66:25:1b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:38:42 2025 by rpki-client