Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
File: GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json)
Hash identifier: Ww0QyWmiiTNH/XKi6FcX8EqhAKAdY3k19yYSTzwZ8qE=
Subject key identifier: BA:CE:30:14:2A:E1:D9:7D:D2:7D:A1:09:54:DA:C4:01:95:38:D0:93
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 019748C2F3ACD1BF29523FC0D9AE05EB0F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
Manifest number: 09E6
Signing time: Sat 07 Jun 2025 05:00:25 +0000
Manifest this update: Sat 07 Jun 2025 05:00:25 +0000
Manifest next update: Sun 08 Jun 2025 05:00:25 +0000
Files and hashes: 1: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: Lu3fBlFWR9Yy+xA1mP6wZ7DN1NoTvdOk+ilUSlYly5s=)
2: oUQWVvQxjUEP4r2-FkARFneKZMU.roa (hash: UsraHeQYnVuGM8BWVj+JJobHfPofc10SVXUPyIrrYmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:f3:ac:d1:bf:29:52:3f:c0:d9:ae:05:eb:0f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Jun 7 05:00:25 2025 GMT
Not After : Jun 8 05:00:25 2025 GMT
Subject: CN=bace30142ae1d97dd27da10954dac4019538d093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:8d:78:64:77:05:8c:fa:f9:27:4b:cb:3d:
69:e5:f5:f5:12:02:8a:1d:68:8e:1e:38:cf:74:a9:
e5:af:af:56:5c:f5:a4:2c:18:b2:55:a2:5d:dd:93:
68:31:fd:62:64:8f:e0:52:24:d0:8c:f6:25:bd:c7:
8d:1f:00:ba:52:1a:bb:24:ca:a9:2c:f4:32:fe:c3:
5d:84:70:00:a2:1f:2b:3d:6f:90:2b:16:dd:f7:45:
0c:a4:f3:66:59:06:95:ae:66:01:6e:af:e7:18:63:
cd:fa:f2:f4:da:0c:07:c0:a2:31:88:89:80:c7:f5:
83:71:c8:13:f7:67:9c:f9:d8:2e:03:a6:a8:1a:40:
76:49:54:26:cd:96:d3:a8:79:61:e2:5c:44:44:19:
4d:8c:c5:2c:77:f1:f9:4f:fb:94:4b:bc:b1:74:52:
0b:2e:55:44:94:4e:e0:98:a9:01:fc:5a:6e:2b:2d:
87:62:e8:f1:0d:18:d5:d1:c2:f5:5c:a5:3a:31:3f:
48:8b:a0:eb:c1:9d:c6:d6:a1:53:c1:5c:b8:cd:c4:
6c:7f:3b:f5:df:9c:c9:03:23:f2:a5:ae:de:ca:cd:
4f:60:13:8b:3f:b4:18:ce:c5:db:ea:82:01:31:76:
08:46:87:21:ea:9e:5a:dd:16:d6:c4:28:fe:a7:37:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CE:30:14:2A:E1:D9:7D:D2:7D:A1:09:54:DA:C4:01:95:38:D0:93
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6a:7b:ba:7c:fc:9d:12:1b:d3:b8:0a:20:dd:a2:37:c8:41:
3b:89:ab:64:4c:1b:3f:3e:48:89:01:3b:6f:e5:57:69:57:76:
05:d9:32:5e:ed:e9:e3:d2:d1:9a:26:4a:cc:cf:e4:f0:88:0f:
6f:8b:2c:36:17:6f:08:9e:e1:b5:c5:2a:45:d2:5c:72:8f:7f:
42:19:9b:cb:2a:9a:c1:0c:4a:82:25:d2:fa:71:26:8b:f0:e6:
68:53:91:5e:3b:ff:69:65:aa:e3:c3:01:eb:92:05:b6:83:e5:
2f:b3:f1:c0:dd:b9:9e:e3:d4:cb:1d:93:92:fc:58:61:61:1e:
7e:f6:04:e0:b8:aa:f6:40:8d:dd:65:b2:ae:a9:91:ea:a6:e5:
74:ff:73:0f:cc:f5:c9:67:9b:51:f5:b9:5d:ab:88:7d:7e:a1:
e1:4b:b9:50:b8:25:7d:1b:a6:0c:af:11:0d:09:39:7b:ae:b6:
af:85:36:1e:06:b7:07:fd:fa:40:c5:2d:96:bf:7a:5e:c5:8c:
b8:c3:64:fa:fa:35:b2:45:ec:8c:64:44:6c:d4:6e:21:04:d3:
88:ff:87:0a:cc:8d:fa:77:6e:c8:a1:d7:6f:14:cf:47:0e:9b:
01:f3:57:70:d7:e5:f2:0d:6e:1e:b4:b4:66:c0:35:60:ea:1e:
b4:c8:5c:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwvOs0b8pUj/A2a4F6w8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMmE0YmZkMmMwYzY5NzY1YTgyOTllZjc0OTY1Zjg2MmE3
MTQ4YjcwHhcNMjUwNjA3MDUwMDI1WhcNMjUwNjA4MDUwMDI1WjAzMTEwLwYDVQQD
EyhiYWNlMzAxNDJhZTFkOTdkZDI3ZGExMDk1NGRhYzQwMTk1MzhkMDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX2NeGR3BYz6+SdLyz1p5fX1EgKK
HWiOHjjPdKnlr69WXPWkLBiyVaJd3ZNoMf1iZI/gUiTQjPYlvceNHwC6Uhq7JMqp
LPQy/sNdhHAAoh8rPW+QKxbd90UMpPNmWQaVrmYBbq/nGGPN+vL02gwHwKIxiImA
x/WDccgT92ec+dguA6aoGkB2SVQmzZbTqHlh4lxERBlNjMUsd/H5T/uUS7yxdFIL
LlVElE7gmKkB/FpuKy2HYujxDRjV0cL1XKU6MT9Ii6DrwZ3G1qFTwVy4zcRsfzv1
35zJAyPypa7eys1PYBOLP7QYzsXb6oIBMXYIRoch6p5a3RbWxCj+pzcOKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrOMBQq4dl90n2hCVTaxAGVONCTMB8GA1UdIwQY
MBaAFBoqS/0sDGl2WoKZ73SWX4YqcUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUt
YmI3MDgwMGMyYTY1LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUtYmI3MDgwMGMyYTY1
LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWp7unz8
nRIb07gKIN2iN8hBO4mrZEwbPz5IiQE7b+VXaVd2BdkyXu3p49LRmiZKzM/k8IgP
b4ssNhdvCJ7htcUqRdJcco9/QhmbyyqawQxKgiXS+nEmi/DmaFORXjv/aWWq48MB
65IFtoPlL7PxwN25nuPUyx2TkvxYYWEefvYE4Liq9kCN3WWyrqmR6qbldP9zD8z1
yWebUfW5XauIfX6h4Uu5ULglfRumDK8RDQk5e662r4U2Hga3B/36QMUtlr96XsWM
uMNk+vo1skXsjGREbNRuIQTTiP+HCsyN+nduyKHXbxTPRw6bAfNXcNfl8g1uHrS0
ZsA1YOoetMhcjg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:48 2025 by rpki-client