Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: bQKTk0gP/qPC3tlLguJluis+KE3xT+seSiPyl5/or64=
Subject key identifier: 35:81:97:69:CA:97:32:B7:19:46:17:08:5F:98:AF:89:48:57:B2:AB
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 0199FC8F69D9DF1890E4D92B3DE39098022A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 1340
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: LvXx1/71TN90tx4aoadyobvLA/QBWRSd8HcN1r4f2xk=)
2: DgOe6d2o2BQOj9Wt3sGLRcqwsJY.roa (hash: 4FSuJ9FPuzzlW3Hsq3b3yqhIsDO/q6s/Z+iendZviDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:69:d9:df:18:90:e4:d9:2b:3d:e3:90:98:02:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=35819769ca9732b7194617085f98af894857b2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:59:07:c9:02:e6:32:59:c8:9e:7d:82:d4:
cc:04:fb:b5:ea:83:4b:fb:c5:6a:9f:99:11:35:fb:
27:33:98:d5:ee:0e:3f:ca:34:50:b9:bb:7c:28:b2:
76:a9:e5:ca:38:c2:94:ca:4c:51:41:d0:07:6a:f8:
c0:9c:f2:b5:cb:df:bb:bd:87:d8:9f:ad:2a:c1:3c:
4a:39:38:a1:0a:78:9d:be:b3:b8:5b:29:5e:ce:e9:
86:1e:92:e6:b2:48:4f:48:31:ec:99:e6:cb:a9:48:
bd:3c:c4:b5:0c:c2:b9:20:4d:40:d7:39:19:68:e0:
48:c0:63:5b:1a:c4:f6:70:5b:1a:26:59:d5:34:1a:
40:45:f8:91:6d:3e:f2:72:71:bc:c2:98:87:f1:fb:
2d:55:e7:83:03:12:d4:ff:2d:53:2b:22:f5:75:d0:
10:e0:f9:fc:22:7c:64:67:1e:c6:25:b8:cb:ed:72:
58:ab:89:f3:7a:24:be:77:19:40:0b:02:31:03:82:
50:a8:8e:ec:fa:18:41:32:df:22:ab:48:03:05:71:
7a:7a:89:bc:1b:7d:e4:6e:15:6e:bd:de:6d:81:26:
4c:49:7d:82:95:25:27:9b:6e:a5:c7:c4:b6:fb:71:
e9:52:57:6c:2f:b5:62:0e:b0:b3:cc:9b:62:14:41:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:81:97:69:CA:97:32:B7:19:46:17:08:5F:98:AF:89:48:57:B2:AB
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:42:f3:5b:48:3e:93:1c:78:a8:3b:81:21:79:c2:c1:5c:b8:
51:8e:8c:0a:6d:c6:6f:b1:0b:6e:0a:d3:f4:da:27:25:ce:20:
ed:85:c0:d5:fe:43:d5:18:5e:98:7c:27:61:11:ee:be:c3:5f:
59:c1:27:06:82:d8:18:d7:b0:41:db:d6:f0:3d:fb:0c:7b:67:
a8:df:df:32:c1:09:29:5d:12:d4:8a:b9:df:9f:0b:85:4d:b6:
58:2d:36:fb:2d:f5:38:cc:50:37:91:7a:c2:78:3a:af:f7:1b:
f8:44:87:da:bb:22:45:8f:a8:97:54:1a:0a:7f:72:41:5e:62:
2e:c5:51:ac:98:a6:e1:27:d5:4c:ca:4c:41:bb:ba:20:6b:94:
e2:0f:67:b2:a1:48:ea:f8:fa:54:92:3d:9a:eb:9b:8e:6d:1d:
6a:12:b0:d8:8e:e0:c7:4e:06:fc:83:1d:4b:bf:a7:c0:59:52:
bc:ef:82:49:49:e5:94:99:34:f0:f8:8e:b6:60:c4:2b:5e:aa:
15:2f:c3:44:1b:20:b9:b2:24:6b:f3:7d:f9:ea:df:76:dd:90:
b2:49:69:15:55:2a:9f:ce:71:a9:85:dc:8e:4a:3d:0f:fb:4e:
3e:9b:2a:17:e2:d8:24:5e:04:48:2f:e5:60:7c:6f:ca:19:e6:
b9:1c:a6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:39 2025 by rpki-client