Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
File: SBL_SF_9eUppSAeK_k4Hav5hdjU.mft (raw, json)
Hash identifier: G/CX7zh4gQ4GI1FftkiK2/1LBgQLDrxZizQANpJ893w=
Subject key identifier: 24:AF:DD:38:15:5C:A3:D8:D3:DC:7C:35:A7:6D:11:9F:B9:8A:47:C8
Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
Certificate issuer: /CN=4812ff485ffd794a6948078afe4e076afe617635
Certificate serial: 01964933BBB9FAB34242810569122E15A0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
Manifest number: 0C99
Signing time: Fri 18 Apr 2025 14:00:49 +0000
Manifest this update: Fri 18 Apr 2025 14:00:49 +0000
Manifest next update: Sat 19 Apr 2025 14:00:49 +0000
Files and hashes: 1: IO5_JEvZ22FfXOmUGu9fMZcMUEg.roa (hash: 48DAtj6bWzznickwbdFvhSXW2egHCi6ZT4J5DaNor2k=)
2: SBL_SF_9eUppSAeK_k4Hav5hdjU.crl (hash: gBqBwz37CZTDFNA/mBi+3djgCWA1grQwaL0oD+ty714=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:33:bb:b9:fa:b3:42:42:81:05:69:12:2e:15:a0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635
Validity
Not Before: Apr 18 14:00:49 2025 GMT
Not After : Apr 19 14:00:49 2025 GMT
Subject: CN=24afdd38155ca3d8d3dc7c35a76d119fb98a47c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:0e:79:e3:fd:1e:d4:c2:c8:81:e6:27:eb:
14:f4:de:d8:e8:e7:20:05:52:3a:18:e2:9a:e6:e9:
1a:4b:cf:5e:42:05:15:86:02:c8:70:5a:62:ea:98:
e3:7c:5f:31:65:aa:c8:95:32:ea:00:4a:6b:00:34:
2f:46:c7:c8:ad:1b:a6:5d:cc:db:a5:01:17:fe:39:
99:85:cc:e8:e2:2a:28:1a:41:49:35:07:e0:4f:8c:
f4:d9:c7:60:f5:f0:07:98:8e:bb:dd:82:3f:bb:71:
e4:5a:ab:3c:c6:db:fb:84:5c:e2:07:94:71:d7:69:
2e:40:a1:7f:d8:05:d9:f5:61:d6:e8:15:ba:bc:f0:
d2:dc:67:2a:df:4e:21:a7:01:93:6e:f4:10:55:08:
18:5e:f5:bd:06:82:69:14:d1:3a:0a:40:a1:0e:b8:
a6:64:17:2b:3b:de:16:af:bc:7d:67:25:cb:f3:6b:
db:90:c2:6e:83:4d:03:da:fe:a0:da:70:74:53:21:
df:2b:64:89:c2:0b:41:9a:00:d8:be:7f:50:19:1d:
ec:92:b7:bc:00:62:0f:6a:23:8d:f0:37:99:6f:f8:
a1:a0:f5:dc:87:96:89:68:16:bf:36:4f:2f:d1:34:
19:97:a0:cf:74:c0:f5:3e:2c:61:27:dc:39:dd:51:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AF:DD:38:15:5C:A3:D8:D3:DC:7C:35:A7:6D:11:9F:B9:8A:47:C8
X509v3 Authority Key Identifier:
keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d9:13:ba:44:a9:3d:ba:2c:97:16:39:72:3d:c1:d6:e3:ff:
17:51:89:75:95:ca:af:23:8b:55:ce:11:2f:8a:bf:18:78:84:
08:86:b9:a5:b2:65:19:25:c5:f7:30:3d:9f:c4:64:97:bb:65:
e1:29:60:50:42:ec:be:51:5c:a6:b5:18:35:0a:29:c9:4a:aa:
ab:39:bf:f4:ef:50:10:e9:40:10:47:1e:e8:47:36:8e:50:fc:
4d:a6:6e:b8:8d:ed:d3:af:e1:7e:de:84:75:ac:cb:9d:d0:8f:
b0:ed:00:45:f4:91:2c:c9:79:2f:85:8b:53:c3:94:f1:3e:d0:
a4:2b:67:f5:0e:d9:5b:df:4d:c4:3e:97:e9:bb:ff:5e:91:ca:
60:61:41:3c:e3:1a:87:ec:b9:2c:7c:b2:27:09:30:62:c2:84:
40:74:74:3e:5b:d2:ff:ef:3b:85:06:42:c5:a0:19:b6:5d:8d:
f1:fd:fd:ce:fb:b2:a4:3d:88:4e:38:80:08:af:90:8c:7c:bd:
c1:13:d3:0d:bd:ae:8c:ed:4d:2b:89:da:0e:b7:9f:d1:5b:39:
54:47:0c:3c:52:64:c5:53:cf:16:69:69:9e:30:aa:9d:d3:ca:
ec:a7:43:90:c2:7a:16:bc:e8:1d:b5:79:38:50:a7:c6:fc:95:
ef:97:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:05:32 2025 by rpki-client