Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
File: GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json)
Hash identifier: lxRwoAC3LlwNE+VDH5Ut6VENqjJxqy7GIiUpzOyDU2g=
Subject key identifier: 8D:95:D8:BE:09:6F:71:0E:5F:68:CF:59:D2:13:7D:30:D4:FE:E4:1B
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 0199FBB3681293CE111AF114C71B0FC6FD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
Manifest number: 0B4C
Signing time: Sun 19 Oct 2025 09:01:02 +0000
Manifest this update: Sun 19 Oct 2025 09:01:02 +0000
Manifest next update: Mon 20 Oct 2025 09:01:02 +0000
Files and hashes: 1: Fl2jGenKnA0BUtxUSthdz--uOV8.roa (hash: kqQXqIucUTzP/77Y+W4OOsJofh0MCiecSiZ2fc/tf0Y=)
2: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: qtfK9yNj6pascKBFOZB+TeD2hjhCqasQcfZ4V5NS3OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:68:12:93:ce:11:1a:f1:14:c7:1b:0f:c6:fd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Oct 19 09:01:02 2025 GMT
Not After : Oct 20 09:01:02 2025 GMT
Subject: CN=8d95d8be096f710e5f68cf59d2137d30d4fee41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:6b:d9:d2:12:e8:d6:9b:6d:0e:00:b7:e5:
a8:e2:a1:1b:be:b8:a6:0b:85:cc:f1:d7:2e:02:63:
8a:a6:75:9d:b1:a7:d3:93:e8:50:2f:6a:5e:81:a7:
a6:e8:e9:fc:63:fc:79:69:0d:1b:59:00:e2:87:4b:
b3:aa:f1:fe:1a:de:08:1b:b8:a1:f5:f8:9d:1c:63:
9e:d9:77:b6:7c:1b:b7:f2:f3:b0:70:e7:72:1d:90:
a7:41:cc:b7:11:2c:1c:77:9a:b9:a1:a5:ea:94:37:
bc:21:69:09:13:97:23:30:d7:68:c0:54:47:e9:af:
52:b7:3a:38:19:75:0d:db:fd:89:41:e4:91:2d:e1:
2c:55:76:1f:04:ff:d3:23:d7:69:0f:a5:af:be:e5:
a1:e2:c9:21:3c:d8:06:16:e7:e3:0a:29:96:77:53:
41:78:5a:9f:1b:ba:5f:54:02:25:2f:f7:07:0c:06:
b0:4d:ca:ac:4d:b3:6f:c8:b0:e8:6f:44:89:49:0a:
59:59:40:6c:0a:81:8f:a8:61:21:83:93:c4:b8:d3:
73:01:db:fb:c2:25:2f:97:5f:33:d8:75:bd:6c:df:
d1:5f:9b:d3:3d:30:61:a3:1b:4c:1e:9d:3f:8d:37:
a0:cc:00:ac:6a:21:16:15:43:00:fe:28:2e:9b:a8:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:95:D8:BE:09:6F:71:0E:5F:68:CF:59:D2:13:7D:30:D4:FE:E4:1B
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c9:a8:83:82:fd:78:c9:c1:5a:b8:56:46:ff:4c:63:48:c8:
66:d7:0d:dc:3f:6a:a3:f1:26:44:54:48:be:6a:d0:5f:9c:b6:
be:3d:7e:80:21:e5:e4:05:e0:5c:62:98:10:7e:f9:c2:fa:0b:
25:4c:fb:30:a5:89:18:9c:42:a1:2a:88:03:32:07:d8:a8:3f:
f2:18:76:a5:d9:f3:9b:4a:70:ec:67:f6:8f:37:d8:46:38:f8:
aa:52:5e:d5:cc:17:64:1d:04:49:ad:c0:96:f1:26:9a:0f:c9:
26:c2:14:5c:86:f2:2e:6b:d7:73:6c:e0:f9:7b:42:93:5b:29:
b8:30:ff:ab:42:f2:49:0d:30:f6:54:ef:bc:6c:ce:75:c7:21:
06:50:5e:ab:48:32:3c:31:8d:2d:1b:2e:3b:1c:d7:60:7b:3f:
25:bd:7b:a0:3e:f6:ae:e6:a0:5b:70:fa:02:67:25:02:2f:b0:
cc:f6:28:e2:c4:5a:4f:17:22:d8:c9:f7:2a:27:b2:f3:26:55:
b7:c7:1a:bf:6e:04:79:77:76:53:c9:96:56:f7:cc:ca:7c:71:
6f:7a:c2:9b:e2:66:6e:6e:2d:2e:79:05:46:76:b8:38:36:4b:
03:17:cc:d0:67:b5:ed:d8:72:36:2d:d0:fa:6e:39:e4:e4:b7:
00:c3:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:18 2025 by rpki-client