Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
File: SBL_SF_9eUppSAeK_k4Hav5hdjU.mft (raw, json)
Hash identifier: DbYedQ/aVI5YcQ112X5L71uoiR9Xhqh4yHt6xRi/Pec=
Subject key identifier: 8E:BA:6F:52:66:CC:8D:60:74:BF:8C:8D:03:45:F4:89:64:D3:70:D7
Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
Certificate issuer: /CN=4812ff485ffd794a6948078afe4e076afe617635
Certificate serial: 019A4D73C6EDB9D43BB5B72BA913E220F36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
Manifest number: 0EAE
Signing time: Tue 04 Nov 2025 06:00:24 +0000
Manifest this update: Tue 04 Nov 2025 06:00:24 +0000
Manifest next update: Wed 05 Nov 2025 06:00:24 +0000
Files and hashes: 1: QUetVN6X86rvvQoO6G_tbqbRIGw.roa (hash: RyB2mund6fN4oswJYJTqjpu2U30ovkwRYiiHktnKMJw=)
2: SBL_SF_9eUppSAeK_k4Hav5hdjU.crl (hash: 5Zlk0sg9HOnpVwRksfHUD+KpEzkQT4e8FZKJNjtAs1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:c6:ed:b9:d4:3b:b5:b7:2b:a9:13:e2:20:f3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635
Validity
Not Before: Nov 4 06:00:24 2025 GMT
Not After : Nov 5 06:00:24 2025 GMT
Subject: CN=8eba6f5266cc8d6074bf8c8d0345f48964d370d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:57:8a:8b:46:22:97:32:3f:bd:ed:65:36:
72:94:21:f4:a6:d3:52:fc:a4:af:cb:6a:c7:3f:08:
55:88:17:59:08:46:7b:cf:38:4e:4f:fb:2c:1a:dc:
14:f3:c7:c3:a7:72:5d:45:27:bb:1e:69:6f:db:a6:
68:e8:7c:e2:4f:c0:28:ee:87:00:2c:33:75:c9:33:
5a:4c:c1:89:bb:26:66:8b:0c:ca:4e:51:80:d5:be:
e2:9f:fe:fd:3e:b4:02:98:59:a4:ff:4e:c0:70:34:
8d:29:01:55:ac:9b:2b:11:6c:0a:2f:dd:7a:a1:75:
48:14:b8:81:07:9e:6f:1f:0b:82:a6:fb:7e:9a:ba:
c2:42:b4:42:24:c6:f1:78:13:09:92:ca:76:c2:f2:
e1:83:38:79:ab:ea:75:fc:17:fc:6c:5d:96:16:80:
b9:00:3d:34:c5:f2:22:23:36:f8:df:8b:a9:59:8f:
40:db:4e:b6:2f:bc:e4:eb:5c:95:db:ea:02:96:3b:
e5:72:55:4a:fa:f6:f9:bb:01:fb:51:c2:d8:c6:c4:
ac:aa:28:8c:1a:2b:35:60:a7:89:69:8a:e4:23:5e:
ed:7f:7c:46:a7:2e:2a:96:9c:2f:8d:b8:4c:91:a5:
e5:0a:94:f2:91:21:6f:9b:26:ed:b5:eb:43:c8:2c:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BA:6F:52:66:CC:8D:60:74:BF:8C:8D:03:45:F4:89:64:D3:70:D7
X509v3 Authority Key Identifier:
keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:65:7a:fb:03:fc:14:c6:89:37:5a:d6:bc:e6:c4:50:c2:b0:
6d:00:58:63:7b:80:8a:ad:16:fb:42:57:b3:0f:26:cb:a6:c5:
56:61:e5:01:ba:b9:9a:5e:0b:67:43:de:f0:8b:b5:9a:a9:14:
97:bb:c3:d2:9d:b4:6b:1d:3d:bd:1a:4b:f0:c6:37:d8:e2:7f:
6d:c8:32:12:1a:45:6e:5a:60:e6:e6:f9:82:cb:23:15:a5:ed:
1c:d0:ca:8f:a3:91:08:04:1e:8e:a6:66:95:b0:2c:46:fb:03:
e8:49:7f:c1:a8:f1:9a:78:b5:df:1e:6a:6a:25:70:4a:6a:f1:
fa:21:a0:6d:2d:e9:48:e7:58:d2:ae:f0:7b:25:dc:c5:9c:85:
21:b8:66:99:5f:3f:54:73:f5:21:67:07:2a:f7:fd:be:be:90:
98:03:97:db:8f:59:8c:83:56:25:7a:9e:f7:7f:2d:67:2d:2f:
c4:cf:f7:8d:e4:e2:26:c1:cb:1c:e8:a1:f8:ed:32:be:ad:1a:
e1:6f:ff:c5:0d:09:a9:60:06:ea:95:8c:e0:33:7a:93:64:5e:
eb:3a:91:1c:a2:5b:ac:3f:66:b0:07:bb:1e:77:d1:1b:7f:dc:
89:8a:fe:d5:f0:3c:f9:67:cb:b4:25:06:67:7f:de:b5:c9:64:
ac:3e:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:54:58 2025 by rpki-client