
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: p4y8CNShekX3bRbZRIaGna4qAPtB/OOKZ2Czfn6EeUo=
Subject key identifier: 7E:D7:2E:E6:BB:14:3B:85:40:CA:30:E2:35:9E:47:85:09:7B:C2:74
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 0198801DC08A5AB6C8F6BF7D29DE18ED7C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 127B
Signing time: Wed 06 Aug 2025 16:01:30 +0000
Manifest this update: Wed 06 Aug 2025 16:01:30 +0000
Manifest next update: Thu 07 Aug 2025 16:01:30 +0000
Files and hashes: 1: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: soAYTs9KbaWek11S2KBbrs5ZK8s/oCK/MUy/qtbASJ4=)
2: DgOe6d2o2BQOj9Wt3sGLRcqwsJY.roa (hash: 4FSuJ9FPuzzlW3Hsq3b3yqhIsDO/q6s/Z+iendZviDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:c0:8a:5a:b6:c8:f6:bf:7d:29:de:18:ed:7c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Aug 6 16:01:30 2025 GMT
Not After : Aug 7 16:01:30 2025 GMT
Subject: CN=7ed72ee6bb143b8540ca30e2359e4785097bc274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:b9:82:9f:96:13:77:57:1e:35:a5:d5:c0:
2b:62:11:cc:a7:a9:c8:10:76:f5:02:fb:d2:fa:f3:
19:4a:14:07:b1:58:05:f1:95:35:92:6d:50:b1:94:
98:07:90:d0:e6:23:b2:4e:09:2a:9a:6b:30:0a:99:
c2:d2:a2:0e:38:76:91:0f:ca:77:a1:e4:d7:d6:cc:
d3:38:b1:9c:85:1a:d7:73:69:f8:2c:d1:db:ca:e2:
0c:e4:ba:6a:4e:b9:b0:49:ff:ea:21:69:dd:a8:e8:
65:bc:11:1e:d1:43:3d:3a:e0:02:cf:8d:68:f6:b2:
ea:79:cb:68:78:da:60:32:a8:4d:e6:d0:c9:01:47:
b4:cd:5b:ca:09:9e:26:06:81:24:f8:3a:76:2c:48:
ed:ad:6d:4d:0d:2b:2e:0c:e2:dc:d8:e3:b3:9c:91:
e5:c3:bb:99:69:1d:51:1d:2f:1a:e4:a4:e4:2a:1e:
18:5c:89:9f:7f:7a:61:50:66:0a:9f:c8:02:9e:9b:
c8:01:4a:3c:c2:c1:40:7a:9f:c9:68:58:26:f7:90:
63:c6:61:44:67:b6:e1:9c:92:55:ed:8e:20:29:34:
94:98:ca:2e:82:13:ae:65:de:1a:0c:11:c8:61:96:
68:5c:c7:ba:c4:53:ee:3a:36:b2:4f:01:d5:96:a2:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D7:2E:E6:BB:14:3B:85:40:CA:30:E2:35:9E:47:85:09:7B:C2:74
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dd:f1:bc:7f:9a:4d:61:68:17:c7:5f:75:af:96:d4:bf:44:
29:09:3e:39:68:ae:10:ea:f6:82:1d:c4:60:4d:aa:80:dc:b5:
d0:6c:86:8c:6e:62:5c:dd:5d:34:47:9d:2a:46:ec:26:96:92:
40:d7:1b:f7:8d:14:7d:20:22:de:c2:71:2b:15:a3:5c:8f:04:
bf:e1:d7:73:b1:02:f8:d3:bd:ff:00:34:55:f3:73:de:04:d9:
69:5f:d0:62:20:b7:f9:95:64:36:7d:08:70:90:0b:ce:ca:88:
5c:a2:38:3a:ef:79:d5:ed:a1:f7:d3:4d:d9:85:fb:91:61:9e:
12:94:b2:f8:e7:15:81:18:24:ed:e6:d0:40:a7:47:ff:2d:25:
3a:87:ea:e5:c5:60:cb:a4:0d:69:8e:5c:98:10:ea:85:ec:99:
5c:9c:50:35:14:b8:fc:9d:60:ba:3d:f7:8b:e7:fd:62:dc:0d:
41:4d:ab:e4:cd:cc:ab:ce:5b:46:4c:24:c5:e1:72:4d:ca:55:
82:71:24:1c:8a:c0:50:0b:9d:0b:15:a2:0a:a7:5a:f6:b5:c1:
94:63:bb:51:4f:92:d8:67:87:17:a6:19:19:e2:3a:c4:56:17:
da:18:e5:1d:25:f3:06:d1:d7:cc:8b:3c:fc:ce:50:97:a1:55:
df:d6:8d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:34:24 2025 by rpki-client