Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
File: GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json)
Hash identifier: HLQwPqSTKqIpANKhHCK5DKRZIbc09DnTzLTjEojXsAE=
Subject key identifier: B4:31:27:AE:8D:10:55:9C:CE:64:1D:78:13:EB:BA:C8:61:4D:DA:91
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 0197B6D7345473FF0234330DFC90BDE5D416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
Manifest number: 0A1F
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: rGzGbyzNNsLcaMPld5fw6qGar4lWbGhVadtCplb43io=)
2: oUQWVvQxjUEP4r2-FkARFneKZMU.roa (hash: UsraHeQYnVuGM8BWVj+JJobHfPofc10SVXUPyIrrYmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:34:54:73:ff:02:34:33:0d:fc:90:bd:e5:d4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=b43127ae8d10559cce641d7813ebbac8614dda91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:9d:03:98:a5:a4:a3:95:f8:3e:ae:4b:bf:
12:4d:be:c0:f4:58:68:c8:5d:69:60:1c:2c:18:ac:
95:08:c7:f8:c9:13:be:bf:af:af:26:18:0b:f4:e7:
94:20:de:b7:2a:9f:cc:d5:29:7a:03:61:14:69:94:
de:96:67:7c:e4:40:3b:74:d9:02:8e:23:0e:58:91:
88:3a:f4:51:43:52:58:84:b3:38:b5:2a:d8:26:ea:
6c:e4:ca:2d:d7:5c:0d:b3:0a:d7:cd:57:41:a5:19:
38:f0:e6:01:4c:6c:63:e2:2a:c8:6b:c3:be:97:00:
05:15:24:f3:e2:6e:b6:6b:b0:e8:7d:f0:ba:01:68:
d9:b2:7f:9a:02:27:33:55:cc:2c:18:b5:09:dc:52:
a0:a3:2f:cf:a5:48:03:16:0a:6e:35:9b:47:30:9f:
48:16:8d:aa:0a:1a:2b:d7:09:2c:46:95:81:36:c2:
89:38:42:80:25:fb:a9:30:8e:4a:0d:36:c8:74:97:
ae:37:a4:43:a8:7f:da:e6:9c:59:1b:e8:f7:0a:51:
36:dc:79:da:5f:48:f0:1b:ee:8c:fe:68:0e:37:bd:
d3:d6:2c:3e:ff:78:29:b3:ab:f8:70:74:e3:c7:67:
c7:a7:ac:53:41:cd:74:92:2c:cc:4e:22:bc:87:69:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:31:27:AE:8D:10:55:9C:CE:64:1D:78:13:EB:BA:C8:61:4D:DA:91
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:84:b3:42:68:50:88:c4:b7:b8:21:98:e9:8c:27:e8:2e:a9:
11:bb:ac:21:86:f2:82:db:21:30:a5:a7:63:59:8b:52:87:02:
19:bb:b6:79:e4:4a:e9:d9:06:02:c0:87:f3:66:38:a1:4c:67:
45:a8:19:05:f7:8e:b6:ca:6e:83:19:90:5f:c4:02:6e:fb:1c:
d0:c9:9e:74:c4:c4:f1:fb:86:29:d5:7e:7d:a7:e9:08:23:b9:
f1:f3:16:43:67:fd:9d:8c:0a:aa:94:c3:d4:27:94:3a:6f:3c:
e4:b3:d8:32:21:45:f2:9c:45:e4:1b:ee:30:f9:45:b9:dd:db:
aa:97:44:08:ab:4e:9d:a1:be:e4:31:9c:d2:c5:53:28:54:c9:
ad:ca:61:12:40:cb:53:89:51:92:0e:c6:4c:51:65:01:bf:73:
a9:14:d7:53:39:e4:74:bc:40:de:92:af:1d:0a:e6:4e:6e:a3:
6b:67:76:5b:8f:8c:77:9e:18:c7:10:19:2d:91:70:3a:34:30:
7f:f2:e0:bf:54:ff:b0:de:e4:2f:a6:d1:91:60:0f:9b:d2:d9:
21:cd:e8:6a:e2:b7:4e:40:4f:ba:57:eb:a1:53:b6:cb:72:59:
3b:86:b3:81:12:ea:32:ac:b9:02:af:72:63:b3:a8:ba:94:d3:
46:1f:7f:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21zRUc/8CNDMN/JC95dQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMmE0YmZkMmMwYzY5NzY1YTgyOTllZjc0OTY1Zjg2MmE3
MTQ4YjcwHhcNMjUwNjI4MTQwMDQ2WhcNMjUwNjI5MTQwMDQ2WjAzMTEwLwYDVQQD
EyhiNDMxMjdhZThkMTA1NTljY2U2NDFkNzgxM2ViYmFjODYxNGRkYTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdidA5ilpKOV+D6uS78STb7A9Fho
yF1pYBwsGKyVCMf4yRO+v6+vJhgL9OeUIN63Kp/M1Sl6A2EUaZTelmd85EA7dNkC
jiMOWJGIOvRRQ1JYhLM4tSrYJups5Mot11wNswrXzVdBpRk48OYBTGxj4irIa8O+
lwAFFSTz4m62a7DoffC6AWjZsn+aAiczVcwsGLUJ3FKgoy/PpUgDFgpuNZtHMJ9I
Fo2qChor1wksRpWBNsKJOEKAJfupMI5KDTbIdJeuN6RDqH/a5pxZG+j3ClE23Hna
X0jwG+6M/mgON73T1iw+/3gps6v4cHTjx2fHp6xTQc10kizMTiK8h2kDdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQxJ66NEFWczmQdeBPrushhTdqRMB8GA1UdIwQY
MBaAFBoqS/0sDGl2WoKZ73SWX4YqcUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUt
YmI3MDgwMGMyYTY1LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUtYmI3MDgwMGMyYTY1
LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcISzQmhQ
iMS3uCGY6Ywn6C6pEbusIYbygtshMKWnY1mLUocCGbu2eeRK6dkGAsCH82Y4oUxn
RagZBfeOtspugxmQX8QCbvsc0MmedMTE8fuGKdV+fafpCCO58fMWQ2f9nYwKqpTD
1CeUOm885LPYMiFF8pxF5BvuMPlFud3bqpdECKtOnaG+5DGc0sVTKFTJrcphEkDL
U4lRkg7GTFFlAb9zqRTXUznkdLxA3pKvHQrmTm6ja2d2W4+Md54YxxAZLZFwOjQw
f/Lgv1T/sN7kL6bRkWAPm9LZIc3oauK3TkBPulfroVO2y3JZO4azgRLqMqy5Aq9y
Y7OoupTTRh9/8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:07 2025 by rpki-client