Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
File: GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json)
Hash identifier: GWaZF/XTti2OmSVbtrzO7DpeBWWWL/1/BiZuHQwjrlY=
Subject key identifier: 3C:7F:A1:64:86:9B:52:8E:D5:29:70:B3:01:A9:C8:3F:4F:93:F3:4B
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 019921E74971024DD5D79A7CA212EC379B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
Manifest number: 0ADB
Signing time: Sun 07 Sep 2025 02:00:29 +0000
Manifest this update: Sun 07 Sep 2025 02:00:29 +0000
Manifest next update: Mon 08 Sep 2025 02:00:29 +0000
Files and hashes: 1: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: FljetElfdnhs9q7r3ye0RVE3v2P97C/wwCrthhpGAIU=)
2: oUQWVvQxjUEP4r2-FkARFneKZMU.roa (hash: UsraHeQYnVuGM8BWVj+JJobHfPofc10SVXUPyIrrYmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:49:71:02:4d:d5:d7:9a:7c:a2:12:ec:37:9b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Sep 7 02:00:29 2025 GMT
Not After : Sep 8 02:00:29 2025 GMT
Subject: CN=3c7fa164869b528ed52970b301a9c83f4f93f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:33:62:59:4e:18:a1:26:8c:c5:eb:53:c4:
ed:a2:78:07:d4:c9:c9:76:fb:f7:85:97:12:35:85:
bb:53:18:54:d8:bd:9b:e4:e2:5d:25:9f:6f:9b:67:
a7:30:b5:1e:23:95:2c:c7:f1:08:1b:71:33:03:7f:
11:1c:21:35:9b:2c:ac:70:ab:7d:8c:e5:0e:83:50:
2f:b4:85:bd:3e:16:06:d1:df:ba:16:06:49:41:3d:
b9:c2:05:9f:50:80:37:c8:ef:15:9b:44:41:5b:bf:
08:33:7e:f4:22:cc:2b:a7:e0:e9:01:b2:ed:cc:b1:
7f:be:7a:84:d4:f4:5c:85:74:44:78:49:61:c4:48:
3a:b0:07:2b:bb:70:e0:83:92:2b:e0:13:3e:32:50:
88:48:46:b3:44:6b:b2:21:cf:05:41:1e:e8:4f:20:
d5:25:46:e5:82:84:04:dc:ec:dd:d8:b9:da:68:04:
7a:a1:21:a0:0e:06:b7:c4:e3:14:d1:fa:4d:c9:c6:
75:dd:0a:c1:f1:38:e8:16:4c:05:bd:f7:8e:bf:cb:
2d:b8:8d:be:46:17:55:b8:20:9b:87:8c:3b:21:92:
8c:45:b5:c0:b6:a3:49:bd:74:ce:65:a3:21:d2:49:
15:3c:ee:d2:82:87:4e:89:d1:ca:d3:88:40:f2:83:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7F:A1:64:86:9B:52:8E:D5:29:70:B3:01:A9:C8:3F:4F:93:F3:4B
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cc:d6:10:06:8e:55:a0:71:cb:4a:05:0b:ad:32:2e:8e:7b:
eb:80:08:35:bb:ea:9b:07:6a:e0:74:21:65:76:4a:9c:ae:b7:
83:96:42:cd:7b:30:20:63:76:d0:f8:66:03:6e:79:05:f7:ac:
61:ff:f4:32:94:2a:e3:2b:63:9c:44:39:f6:b9:e0:ce:41:56:
8e:84:bb:2b:da:14:c7:15:bd:f7:4f:21:65:42:08:d6:21:da:
01:5e:e7:c3:aa:bc:bb:b1:b9:62:ab:e8:a1:8d:a3:18:44:40:
be:a5:01:04:a2:f5:21:f1:d3:0f:66:85:90:e6:d6:34:53:21:
cb:ba:60:c8:25:e8:6d:3a:fa:87:68:f5:fd:7b:0e:e1:40:70:
6b:52:60:ee:ba:90:cc:10:f9:9f:b0:ce:c5:7a:b1:ef:d2:6a:
90:ef:53:86:69:2b:65:5e:80:78:df:cf:bc:98:aa:f9:5c:64:
e9:de:95:4f:cb:52:2f:fd:53:51:20:54:61:e4:48:e7:63:6a:
6a:42:fa:95:7f:18:3e:88:ac:80:17:ad:e5:db:6d:42:78:a2:
0d:df:d7:c8:09:f8:fc:b8:98:17:20:1a:4a:87:42:ad:f8:80:
31:a5:72:08:7b:85:86:fd:23:2d:50:b2:bd:d7:32:12:6d:e6:
31:ee:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:13 2025 by rpki-client