Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
File: iij_MQ2n34MJz6tNz5ojWEK2CHI.mft (raw, json)
Hash identifier: 5Up5IXS3jPSuzaSr+YdQy4DbQcBgOpKxfleHUb2FpZU=
Subject key identifier: 14:32:69:A4:D0:17:17:20:3E:BF:24:1D:40:7C:10:C9:1E:67:1B:E7
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial: 01969F3F6E47F722AD4BE29AC8F6EFDCD42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
Manifest number: 0312
Signing time: Mon 05 May 2025 07:00:56 +0000
Manifest this update: Mon 05 May 2025 07:00:56 +0000
Manifest next update: Tue 06 May 2025 07:00:56 +0000
Files and hashes: 1: 2jBpGTk2ogY4V-pzJnCImL6EwNA.roa (hash: YyHHsV3O+5v5axtSYHO7phMGXdaESVAHbKKQJf3jg5c=)
2: iij_MQ2n34MJz6tNz5ojWEK2CHI.crl (hash: rg1g9eJgLnTRzEXqUyLmINkDSZzdLvYlq31+0mFZy8s=)
3: wGH7RXqHeAFJhSqqiUIKLWLMppk.roa (hash: U9kx/pm8Ri8hF/pstRPu9ajTlV//o1HJNh3HJey1hVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:6e:47:f7:22:ad:4b:e2:9a:c8:f6:ef:dc:d4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Validity
Not Before: May 5 07:00:56 2025 GMT
Not After : May 6 07:00:56 2025 GMT
Subject: CN=143269a4d01717203ebf241d407c10c91e671be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:dd:f1:80:dc:51:66:e5:88:b3:01:95:a5:
5c:8d:3b:d7:0e:aa:e9:38:0d:9b:42:79:bb:ee:75:
a6:27:8b:cb:e8:8b:c3:97:7d:0c:f4:88:65:61:c6:
68:86:39:40:d7:e5:60:0c:55:ba:14:41:50:55:e5:
d1:83:c5:12:2b:90:ab:02:42:70:c6:e7:8c:9d:36:
1d:ef:8a:fa:56:eb:e8:74:2f:40:4c:f4:d0:dd:23:
6e:a5:d1:b8:9b:7d:7c:55:10:5d:0e:a9:21:6a:b7:
0d:6a:61:0f:aa:a9:48:97:c4:5f:1e:6c:fc:56:6d:
c0:19:7d:f2:45:54:9e:e5:e3:03:72:d7:7b:84:3f:
0e:78:4f:ea:ec:a2:cc:e2:50:57:60:4d:3b:94:ed:
08:73:c1:df:c1:0b:e5:3d:8b:7f:63:71:7c:89:57:
bc:ec:60:fc:50:fe:c0:d4:e7:30:d5:69:ed:0e:c2:
db:c4:5a:60:70:59:ee:64:05:0a:68:bc:12:9a:28:
4f:49:a2:86:f7:95:36:93:3e:86:ed:38:06:ed:a3:
72:13:6b:25:4d:85:68:8e:a3:14:3d:33:41:58:7a:
a0:62:cc:89:44:ef:fe:6d:b2:d1:cc:dd:33:72:82:
0a:f2:36:09:1a:6f:39:6e:54:37:33:3c:cd:5f:a7:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:32:69:A4:D0:17:17:20:3E:BF:24:1D:40:7C:10:C9:1E:67:1B:E7
X509v3 Authority Key Identifier:
keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:09:b5:06:58:76:a0:9f:7c:41:8a:d9:a9:30:e1:dd:1e:ad:
02:fd:0d:4e:db:2d:fb:52:0e:46:63:53:61:a8:c3:ca:43:c6:
09:b6:7e:4e:1d:4c:11:25:ec:46:3b:5b:f7:00:e5:40:1f:47:
7e:77:29:73:fa:f2:da:f6:70:5d:78:a6:b7:8c:a6:f5:13:92:
8f:4d:4a:8c:35:e5:ba:66:1e:d8:7a:44:0b:b6:0b:7c:70:dc:
14:58:f1:99:49:51:d7:33:cb:95:3b:0b:31:b6:41:89:7d:b5:
b0:e8:81:ae:5f:af:e8:f3:7b:18:6e:4f:13:07:fd:b1:c8:4a:
25:1a:6a:15:c6:8e:aa:60:31:be:86:77:2e:0b:29:3d:1d:0c:
fd:7c:88:a8:92:e3:0e:3b:84:bd:ea:0a:8f:49:4e:b1:6f:c4:
de:16:2e:9c:75:d1:f0:62:f9:f3:80:0f:bc:70:19:4d:c6:2b:
59:07:b2:48:53:e6:9a:72:12:19:51:41:4f:42:b4:58:ba:b9:
86:b7:c7:e2:50:95:6b:a5:f8:bc:6f:69:8f:99:2c:ba:92:65:
6d:1b:6a:63:7b:a8:cf:67:53:f5:3a:76:e0:ea:21:30:25:70:
8b:cd:1a:01:27:a0:47:c3:b5:70:9f:be:84:96:e0:d8:0e:bc:
5c:a0:da:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:01:12 2025 by rpki-client