
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
File: iij_MQ2n34MJz6tNz5ojWEK2CHI.mft (raw, json)
Hash identifier: A2fFMaeA7apocgBu9dzRWV3aZL6rMFNFa5N4sU3h3eA=
Subject key identifier: 1C:79:45:1E:51:40:DD:61:BE:BB:66:1E:32:D5:57:16:8E:53:29:7F
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial: 0199FAA101CB269A67F86A4FBB54F04E45AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
Manifest number: 04D0
Signing time: Sun 19 Oct 2025 04:01:19 +0000
Manifest this update: Sun 19 Oct 2025 04:01:19 +0000
Manifest next update: Mon 20 Oct 2025 04:01:19 +0000
Files and hashes: 1: 0aPhXVyce0SICbpq9bOaehiO5Pw.roa (hash: QZjecyF8WoZMTAQ+88px6Agq67hFp09iHfOWPO4elas=)
2: 2jBpGTk2ogY4V-pzJnCImL6EwNA.roa (hash: YyHHsV3O+5v5axtSYHO7phMGXdaESVAHbKKQJf3jg5c=)
3: iij_MQ2n34MJz6tNz5ojWEK2CHI.crl (hash: /dzx7zMhwmQMoxkzXweMODw3CwMHmEmY8r0zLjjVHjE=)
4: mMg3E1Nb2aLQF9y3s1zWz-BTo_Q.roa (hash: cvp5yOj8Ixek1gITTHoV35TmSlVgKcQg6j0GCNNS5mI=)
5: wGH7RXqHeAFJhSqqiUIKLWLMppk.roa (hash: U9kx/pm8Ri8hF/pstRPu9ajTlV//o1HJNh3HJey1hVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:01:cb:26:9a:67:f8:6a:4f:bb:54:f0:4e:45:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Validity
Not Before: Oct 19 04:01:19 2025 GMT
Not After : Oct 20 04:01:19 2025 GMT
Subject: CN=1c79451e5140dd61bebb661e32d557168e53297f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:c8:32:fe:13:dd:97:f9:cd:f3:75:4e:3a:
fc:8b:8a:89:eb:c1:17:c1:71:03:f7:60:1a:36:0a:
2f:6a:dc:31:cd:de:2f:08:47:31:33:bc:a3:17:02:
d8:f4:35:e5:7b:16:75:a1:32:b8:5b:39:d3:a3:89:
e0:12:33:77:3f:44:e4:8e:fe:13:ae:a0:39:5b:ff:
dc:7d:57:d4:75:c9:7b:60:f7:78:f3:08:9e:54:d1:
ec:cf:df:d5:a6:b3:ee:4b:38:f5:a3:5b:58:c4:67:
0a:bd:d7:53:36:9d:09:ea:3d:a8:0d:5b:df:9a:67:
4e:b2:bc:b1:3b:fc:c8:af:b9:ac:ca:a2:bb:a1:a3:
b8:f5:62:40:f0:99:1a:6f:6c:d3:47:07:0d:cc:46:
92:60:2e:14:de:f5:35:03:b9:1a:a2:f5:79:f1:4e:
22:87:e5:c7:a2:20:c1:13:41:57:79:37:87:58:e6:
59:10:de:e9:b9:f1:42:59:0c:fe:78:ec:0c:4e:bd:
42:44:44:3d:66:4f:8b:8e:38:ef:d7:ff:92:cc:c1:
c8:a8:96:c3:0e:f7:74:a0:4e:b3:31:24:4c:f5:6b:
bd:e5:c6:7e:99:d2:db:e2:30:70:ef:8a:15:d2:95:
28:e6:8b:25:e1:63:08:5a:8a:5f:6c:98:79:bc:61:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:79:45:1E:51:40:DD:61:BE:BB:66:1E:32:D5:57:16:8E:53:29:7F
X509v3 Authority Key Identifier:
keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6d:19:cf:69:f1:47:6f:4e:ed:88:b9:0b:25:00:1f:4b:4d:
ff:b0:57:34:48:be:ae:77:48:d0:71:f5:0c:d8:93:0e:44:85:
98:1f:58:6d:d7:b6:bc:a6:d8:13:02:bf:e2:30:0e:5d:06:92:
7c:03:94:c3:c7:df:c9:f5:2e:b5:31:da:8c:c7:4e:79:34:49:
d4:de:4c:3b:7b:6d:9d:cc:21:6a:81:dd:82:e3:ca:5f:83:5a:
45:e2:65:79:1c:53:d1:9a:1a:a6:f4:52:17:65:a1:cc:59:ea:
72:67:2f:e0:2f:e8:2f:62:60:8f:c3:4b:2f:e7:17:85:bc:d8:
4b:61:d6:35:70:f6:8d:68:1f:ee:fb:f3:c5:11:89:db:f2:cc:
5d:41:64:84:1d:8f:f0:42:a5:bf:1a:f1:3e:c9:25:2c:0f:4b:
4a:85:d3:ac:b8:a7:ae:17:0e:0c:11:c5:2c:2c:cc:8a:4e:25:
7a:50:15:fa:f8:10:c2:7c:a4:72:b4:a0:be:43:f7:c7:6f:1c:
6f:6b:b6:07:a2:79:31:d1:1d:0d:19:31:62:96:4d:ec:c5:92:
3b:48:ef:fe:68:ae:79:a3:65:3d:06:32:8e:50:f0:8c:b7:53:
1c:67:da:81:ed:7b:ad:7c:83:83:8c:7f:9b:93:ff:f4:bd:35:
7c:c7:1e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:11 2025 by rpki-client