Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: LpiBiUCOoNXDyQ5PQQ8jeMXZvhZIuSMppzwtdNOJp6g=
Subject key identifier: 55:FA:E1:CB:05:BC:32:38:C7:22:B2:5A:DF:F1:0F:52:EE:DF:23:52
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 0198D705BB8383B5D961FB2A3F55057884B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 12A8
Signing time: Sat 23 Aug 2025 13:02:13 +0000
Manifest this update: Sat 23 Aug 2025 13:02:13 +0000
Manifest next update: Sun 24 Aug 2025 13:02:13 +0000
Files and hashes: 1: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: wDX7Ey65RukGiHhIJGIeEnw2jEjH9JkJj+8iUnkEw4I=)
2: DgOe6d2o2BQOj9Wt3sGLRcqwsJY.roa (hash: 4FSuJ9FPuzzlW3Hsq3b3yqhIsDO/q6s/Z+iendZviDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:bb:83:83:b5:d9:61:fb:2a:3f:55:05:78:84:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Aug 23 13:02:13 2025 GMT
Not After : Aug 24 13:02:13 2025 GMT
Subject: CN=55fae1cb05bc3238c722b25adff10f52eedf2352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:0c:d8:6c:15:7a:21:4c:45:c2:7e:86:1f:
8d:fc:49:b9:4e:af:d0:0f:51:6a:23:97:14:e1:e3:
de:fe:30:99:8b:26:54:6f:e7:85:35:4a:da:fe:39:
74:4d:fb:84:64:71:72:62:8d:81:c3:8d:b3:9c:a1:
b3:f1:8e:11:a9:9a:b4:58:f4:d2:22:1d:8a:3d:d5:
df:57:b4:ee:5f:37:83:c4:0c:a4:2f:5f:57:3a:28:
35:9e:f1:53:d9:08:df:a6:f4:2c:da:3f:d7:f1:f0:
c2:62:d2:47:0d:45:72:6f:f6:6e:fe:cb:d1:05:0c:
68:40:c0:08:69:02:f8:a2:0e:ad:39:77:8d:8e:e9:
bf:79:6e:48:12:0d:40:cf:37:40:7d:2e:8a:23:b1:
76:d2:4d:3c:85:f6:dc:25:77:e1:29:7f:1d:e7:5b:
47:fb:c4:4f:6f:25:cc:c5:a5:7c:9a:51:55:3c:35:
0b:9f:38:70:e2:b7:32:73:be:92:15:3b:b3:e7:f3:
39:06:a6:4d:0c:59:ec:47:48:c7:ce:74:a7:de:ae:
91:fb:74:80:c1:b6:c0:d4:b5:f9:bf:e5:0d:3d:2f:
3b:63:66:6e:d2:2c:82:15:6a:5a:1b:e8:47:e3:f1:
e8:61:4d:7b:db:55:e4:9b:1a:a0:20:33:ae:cf:ce:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FA:E1:CB:05:BC:32:38:C7:22:B2:5A:DF:F1:0F:52:EE:DF:23:52
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:df:df:c9:31:97:67:e7:28:02:0d:7d:55:a2:5a:42:b3:0d:
e8:34:a6:92:a1:cf:23:3d:ef:5a:a2:ce:82:e2:6e:18:39:e6:
bb:ee:c6:37:65:de:10:a6:b3:80:50:7e:88:b8:ec:d4:df:13:
6f:10:1f:07:e3:b9:5c:1c:0a:93:4c:60:40:d3:a8:e2:b4:6e:
71:0e:e9:87:4d:14:19:0b:24:f1:55:bd:58:84:9b:48:95:a8:
0b:65:79:70:4d:4d:c7:91:ad:49:87:32:4b:58:06:97:9e:9d:
ca:ec:3c:0a:d1:c7:03:58:9c:9e:7f:11:15:f9:20:46:02:b1:
75:a4:d7:36:c9:ef:20:df:69:12:8c:d5:43:0a:41:e6:dc:c2:
3e:15:62:7e:51:5b:9b:3a:88:58:4b:f8:dc:7d:97:0d:02:11:
eb:c1:f1:63:7e:44:7e:be:55:e6:a8:8c:eb:9b:59:ac:4e:47:
e1:93:f5:8b:4e:66:80:73:9c:98:00:24:73:fa:10:7f:a8:2e:
e1:3f:d3:ad:4f:7b:e0:9b:9b:81:f8:88:40:e3:8b:06:52:08:
e5:33:05:5d:72:cc:50:ed:30:32:fa:74:3d:5c:b1:f6:33:ea:
6e:9e:e7:9a:45:46:9c:fd:7c:a5:2b:b8:2f:2b:46:8d:dc:34:
02:17:83:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:08:36 2025 by rpki-client