Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
File: iij_MQ2n34MJz6tNz5ojWEK2CHI.mft (raw, json)
Hash identifier: IKP4XuNmqv4V/pFC10/36IOdBqaPGb0S+Vxx94WsHYs=
Subject key identifier: FC:FB:D5:25:DC:D4:D7:18:33:90:6D:93:19:40:03:FC:5C:07:EC:57
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial: 01968624424A9553030BF0A2400B34121B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
Manifest number: 0305
Signing time: Wed 30 Apr 2025 10:00:45 +0000
Manifest this update: Wed 30 Apr 2025 10:00:45 +0000
Manifest next update: Thu 01 May 2025 10:00:45 +0000
Files and hashes: 1: 2jBpGTk2ogY4V-pzJnCImL6EwNA.roa (hash: YyHHsV3O+5v5axtSYHO7phMGXdaESVAHbKKQJf3jg5c=)
2: iij_MQ2n34MJz6tNz5ojWEK2CHI.crl (hash: Xj6FcSHG8QOcYroBb+0JRsELf1xDjCQGIw412NmrMg4=)
3: wGH7RXqHeAFJhSqqiUIKLWLMppk.roa (hash: U9kx/pm8Ri8hF/pstRPu9ajTlV//o1HJNh3HJey1hVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:24:42:4a:95:53:03:0b:f0:a2:40:0b:34:12:1b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Validity
Not Before: Apr 30 10:00:45 2025 GMT
Not After : May 1 10:00:45 2025 GMT
Subject: CN=fcfbd525dcd4d71833906d93194003fc5c07ec57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:f7:2d:e1:10:37:58:41:65:89:d0:07:3b:
be:f9:20:fa:b8:ae:6c:e8:a6:2f:16:e0:1f:ce:f9:
61:4b:29:4d:4a:38:df:53:da:7c:ce:44:23:9d:78:
fe:cf:7a:ae:18:79:0c:2a:ad:52:df:ea:10:62:a4:
a8:f4:07:e4:8e:7c:22:00:e8:ad:24:2f:eb:04:75:
5f:bc:bf:3a:5b:5f:28:80:74:b7:82:0e:00:4c:a1:
b9:37:d2:35:2e:4f:e7:a6:9c:4b:fb:ac:8a:5a:09:
cc:0a:e5:d0:00:3c:c1:55:cf:89:61:d1:c3:b5:02:
1a:e9:73:02:2d:af:35:bc:80:6e:b3:ab:9d:26:87:
6b:1a:36:e0:ce:ad:cf:c2:cc:a1:67:1a:f5:5a:dd:
a2:55:40:0a:2f:68:0d:8b:f0:3e:d5:2e:0b:da:12:
2f:c6:ba:c3:56:d6:60:23:07:b5:19:a6:35:83:59:
b9:66:81:e4:a7:f5:c4:02:fa:98:97:7d:8b:98:16:
06:2d:cb:87:4e:7e:55:44:88:bd:2b:8c:b5:29:dc:
0e:5d:f8:ae:e6:64:2c:62:5f:38:ef:3d:4c:21:2e:
07:b2:8f:c5:50:c0:b9:10:4e:95:7d:9a:3d:f3:bb:
e8:a0:9a:87:16:84:a8:22:2b:b2:ec:65:d7:e0:c0:
71:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FB:D5:25:DC:D4:D7:18:33:90:6D:93:19:40:03:FC:5C:07:EC:57
X509v3 Authority Key Identifier:
keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:52:64:d2:96:4d:cd:90:6f:09:8f:79:11:b9:e9:fa:b3:dc:
0d:82:01:43:4b:fd:35:eb:35:ec:7c:22:d4:26:f2:c0:94:63:
00:98:e3:34:72:d6:f9:de:fe:35:5e:08:67:55:42:87:5d:dc:
b5:0f:b7:aa:4b:7a:1f:ad:f4:1b:d5:51:e2:ba:af:ee:33:51:
f4:92:a5:be:0f:80:c6:d6:34:9e:5f:94:61:75:ac:19:f8:a6:
74:b8:b4:a4:77:cf:c3:a1:4b:e5:0b:48:ef:f8:73:89:71:f2:
75:04:69:58:7b:e3:38:34:f6:7e:71:f6:02:9e:ae:18:f3:b9:
a0:94:9c:e7:3f:8c:8e:91:6e:d9:7f:82:c7:f7:eb:ec:da:e7:
8d:09:01:cd:14:7a:c3:ed:e8:b4:d7:13:19:0d:b4:82:72:57:
5e:dc:b0:bb:6a:ad:9c:62:d6:e7:e9:03:c5:9d:2b:03:41:00:
92:87:b5:60:57:50:c3:58:a4:17:b1:03:72:75:13:65:ec:7b:
23:0d:c0:84:4b:52:ad:ae:82:be:4b:06:9f:0c:91:ed:9e:0a:
e6:01:76:cc:04:7d:b3:07:aa:50:32:ff:cc:3e:eb:23:87:ef:
d5:b2:d3:f6:98:9c:e2:87:63:e4:65:ac:0a:eb:e9:95:79:e8:
73:4f:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:20:11 2025 by rpki-client