Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
File: GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json)
Hash identifier: E2dGdNnJ61WP3LSqhgd81jLxkjgpldHUqOHExUguPN4=
Subject key identifier: C2:02:FD:B2:21:6B:01:48:E6:09:94:DF:35:83:D8:68:7C:DE:08:FF
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 019A7180A446A7831E872D175ABCA4035C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
Manifest number: 0B89
Signing time: Tue 11 Nov 2025 06:00:47 +0000
Manifest this update: Tue 11 Nov 2025 06:00:47 +0000
Manifest next update: Wed 12 Nov 2025 06:00:47 +0000
Files and hashes: 1: Fl2jGenKnA0BUtxUSthdz--uOV8.roa (hash: kqQXqIucUTzP/77Y+W4OOsJofh0MCiecSiZ2fc/tf0Y=)
2: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: kxhQJu10H+3gyPNuJ1c1PKr77oVsqZmATS8vISm2LX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:a4:46:a7:83:1e:87:2d:17:5a:bc:a4:03:5c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Nov 11 06:00:47 2025 GMT
Not After : Nov 12 06:00:47 2025 GMT
Subject: CN=c202fdb2216b0148e60994df3583d8687cde08ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:04:72:96:7a:48:1f:6e:13:2b:d1:b4:57:
02:2e:7d:6e:e9:8d:0b:ff:ba:d0:e2:1d:16:d2:55:
9e:b0:96:aa:8e:fa:78:bf:e3:7d:b4:0e:49:5e:b6:
dc:73:00:f9:05:51:ee:a1:a6:02:95:a7:e3:e6:8f:
10:1a:6c:11:d6:21:05:53:c1:e8:79:32:c9:70:89:
af:c7:46:1a:3e:64:d2:5f:79:ff:e4:5c:e8:b0:17:
f1:b7:50:c8:c6:23:d6:5f:6d:36:f2:3d:49:ad:e8:
3c:af:59:b9:bb:6f:9f:94:6b:da:79:2f:d3:56:26:
d3:cc:52:6d:f1:93:41:4b:78:15:6e:7a:b5:45:9c:
cb:16:b9:8c:01:c8:e6:6a:c0:32:3d:96:76:28:37:
77:47:0f:4a:d2:ac:df:79:3f:df:aa:26:f7:b9:d1:
71:51:db:c2:a9:de:89:9c:d1:b4:c5:d7:a7:f7:26:
6b:fc:bb:73:62:92:c1:1b:62:3d:cb:35:92:f1:5b:
23:db:b3:46:ea:fc:99:74:8e:53:ed:c1:7f:19:1b:
d2:11:12:a1:6e:dd:1d:e3:17:c9:53:5c:66:f9:23:
0f:81:e9:79:77:63:bd:2e:3b:fa:ff:a0:3f:1d:0d:
6b:ee:84:5b:7e:79:de:dc:34:d2:db:b6:c8:a1:a4:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:02:FD:B2:21:6B:01:48:E6:09:94:DF:35:83:D8:68:7C:DE:08:FF
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:10:36:c6:fe:54:7a:18:f6:2b:a1:f7:b6:08:3d:12:4e:e4:
c4:92:bf:6b:f6:cd:a0:04:a0:43:ad:af:f0:1a:2f:06:43:a7:
be:89:26:4f:5b:9b:d5:12:27:5e:16:4c:13:d7:85:eb:0c:17:
a8:77:b8:fa:c4:c0:3f:9a:81:c7:3a:cb:8b:26:ae:f5:f2:6f:
a9:12:52:c8:41:44:68:f5:ad:90:bc:99:6a:9f:29:d6:56:63:
9d:2e:9b:d2:57:9f:e6:54:8e:19:34:f6:62:46:0e:55:fb:93:
f5:64:c0:4d:1b:51:8a:fa:db:14:25:81:e3:a9:03:74:7f:c1:
53:ef:2b:f1:07:1f:34:19:18:e4:c2:c1:9c:14:b1:31:b3:3d:
e6:9c:c6:22:af:d9:78:a8:d7:21:f0:5e:ff:9b:96:19:48:fb:
ac:97:59:8e:35:0a:ae:0f:4f:a3:c4:97:71:6a:42:80:4d:39:
19:91:da:56:6d:8b:c3:e1:6e:50:63:dc:b3:af:b9:4d:6e:0a:
06:33:69:e6:7d:7c:19:94:54:41:d6:6c:c2:17:7c:df:d2:b0:
30:4d:1f:c2:15:1d:83:95:50:85:5b:57:28:e5:1b:5e:ee:3a:
b2:8a:2b:02:db:5f:bd:35:f4:1e:84:f1:47:bb:ad:f2:c6:d1:
d5:56:6d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:56 2025 by rpki-client