Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: i4pzULAGyi0a/WsqEvffjXdFhUnC6mRfoYVWeo6d1SQ=
Subject key identifier: 49:25:3F:83:C0:9F:43:EF:15:1D:24:9D:DC:CA:0B:34:2E:49:E0:50
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 019A30B2F46E20D42ACF58068A7A6172E1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 135B
Signing time: Wed 29 Oct 2025 16:00:25 +0000
Manifest this update: Wed 29 Oct 2025 16:00:25 +0000
Manifest next update: Thu 30 Oct 2025 16:00:25 +0000
Files and hashes: 1: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: zvf7P/N8zFrK3SNA00HfTRtjEaOvPI2ocMuK+u00l6M=)
2: DgOe6d2o2BQOj9Wt3sGLRcqwsJY.roa (hash: 4FSuJ9FPuzzlW3Hsq3b3yqhIsDO/q6s/Z+iendZviDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:b2:f4:6e:20:d4:2a:cf:58:06:8a:7a:61:72:e1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Oct 29 16:00:25 2025 GMT
Not After : Oct 30 16:00:25 2025 GMT
Subject: CN=49253f83c09f43ef151d249ddcca0b342e49e050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:ee:44:00:2b:49:2f:0b:18:80:db:3c:6c:
9e:81:fe:7d:db:4b:44:70:a9:62:05:da:8c:ac:ec:
a2:9d:36:b0:e3:7a:be:f4:be:2c:7f:9d:66:b9:62:
72:e4:f7:6a:80:3f:0b:ee:88:c9:4b:cc:97:69:93:
5a:82:fa:9a:b0:63:b6:a4:ea:8a:ac:e2:8f:b2:93:
90:24:dc:0d:1b:81:89:ac:7b:df:36:1b:08:c2:b2:
5c:db:e0:39:4e:55:59:64:fb:f2:0f:aa:ed:db:b3:
10:03:96:cc:dd:9f:6d:e1:b0:d1:b8:6d:97:8b:51:
6b:4e:10:88:5e:81:fc:a3:02:eb:21:fa:67:b9:06:
29:e6:df:04:f0:b5:a3:95:e3:c2:67:92:5f:f6:c5:
99:65:95:07:07:ba:7e:f1:ac:d7:d6:c4:4d:9a:a1:
ba:73:53:e5:6c:02:3a:d4:35:e3:5a:bd:ca:87:b5:
b8:a5:df:0c:22:a9:e9:13:c9:b9:1d:c7:d5:74:a7:
cc:63:24:a1:72:a8:1a:cd:dc:b5:45:16:57:8f:23:
db:d6:28:52:05:0a:c9:6a:97:cf:57:a4:0c:fb:fc:
0e:89:24:c4:d4:b9:b9:54:d2:b5:25:43:0e:20:cb:
61:fd:df:93:e4:7b:61:5a:ef:0f:5f:93:c8:8c:67:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:25:3F:83:C0:9F:43:EF:15:1D:24:9D:DC:CA:0B:34:2E:49:E0:50
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:51:6d:21:49:c1:a4:03:65:d7:7a:75:a4:78:d2:3e:bf:96:
9b:2c:d2:15:ce:f2:0a:d6:78:37:e9:c7:82:8d:85:9e:48:9c:
d3:b3:6d:be:4e:93:4a:72:d3:c3:43:2a:c0:d3:cb:8a:9c:ed:
ad:f0:4f:17:7a:7d:56:c6:70:fb:da:29:9f:47:23:f5:a6:13:
4b:26:f3:bc:de:22:eb:b3:37:cf:5a:2a:0d:d9:d3:d6:52:49:
d0:00:54:8b:fc:46:a9:c7:57:90:16:3c:e7:7a:9b:8e:a3:6b:
a4:96:44:bc:c2:92:7e:74:e1:77:e6:67:89:52:9e:3e:82:e3:
36:c0:ef:f2:82:e7:da:e2:1b:64:64:53:cf:33:14:95:b1:1f:
41:14:f5:ef:62:8b:87:df:d5:da:34:42:77:8c:c2:e8:c4:d7:
11:7f:10:3a:07:f5:45:28:f0:02:e7:8b:57:35:2b:77:ae:0d:
41:94:b8:cb:27:39:f4:15:66:93:ec:cf:7a:e6:7a:ed:36:d1:
05:9e:01:5e:e1:64:68:ac:e2:5d:d4:a5:c2:65:7c:f0:24:0f:
b8:f1:ca:07:78:6c:47:4a:45:b4:1f:5e:6c:3f:f3:ce:90:ab:
24:0d:e0:c9:fc:9b:4f:6a:08:be:59:f6:3c:1c:ca:c5:40:5d:
9c:8f:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 18:52:30 2025 by rpki-client