Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
File: iij_MQ2n34MJz6tNz5ojWEK2CHI.mft (raw, json)
Hash identifier: xx2w0FdEopgR11jn//fM1mJgXeI+Rew6J/HA3eVfwNE=
Subject key identifier: 34:72:E3:C4:87:0E:99:0D:B8:FE:61:96:32:69:A6:26:96:F8:E5:55
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial: 0194BA842030F4A1021639C367C87B9A869C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
Manifest number: 0217
Signing time: Fri 31 Jan 2025 04:00:08 +0000
Manifest this update: Fri 31 Jan 2025 04:00:08 +0000
Manifest next update: Sat 01 Feb 2025 04:00:08 +0000
Files and hashes: 1: 2jBpGTk2ogY4V-pzJnCImL6EwNA.roa (hash: YyHHsV3O+5v5axtSYHO7phMGXdaESVAHbKKQJf3jg5c=)
2: iij_MQ2n34MJz6tNz5ojWEK2CHI.crl (hash: soMMkOfyH7ancQtJfTXHOtdThGqBaJ575BEQ6cn/2eQ=)
3: wGH7RXqHeAFJhSqqiUIKLWLMppk.roa (hash: U9kx/pm8Ri8hF/pstRPu9ajTlV//o1HJNh3HJey1hVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:20:30:f4:a1:02:16:39:c3:67:c8:7b:9a:86:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Validity
Not Before: Jan 31 04:00:08 2025 GMT
Not After : Feb 1 04:00:08 2025 GMT
Subject: CN=3472e3c4870e990db8fe61963269a62696f8e555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:fd:ee:96:4f:97:e9:5e:fe:75:cc:19:37:
61:6e:43:8b:99:a5:a0:6d:23:18:1c:aa:33:08:d9:
9e:c7:65:9c:ed:b8:05:7e:c1:8c:62:ce:73:8e:c4:
d1:ef:dc:4f:4b:31:02:f0:b6:9f:c7:95:a2:9f:3d:
e2:e8:68:d7:be:db:20:2b:62:05:3f:3f:af:eb:bc:
b3:9f:3b:56:ef:ac:0e:e2:9f:2c:4c:8d:f1:2b:ba:
f2:4e:5a:22:df:51:7e:c3:66:37:96:94:da:9f:78:
35:66:23:79:04:d9:85:69:a5:67:02:8d:e2:0b:21:
61:be:bc:03:e3:b0:7b:d2:83:f0:f1:1e:cb:a4:e9:
fe:13:23:4b:cd:d2:c2:69:3b:9f:d5:3e:74:16:1f:
2b:6a:92:ae:2c:92:36:01:ca:50:d2:e6:f9:76:e4:
57:3d:62:9b:0e:47:1b:7c:6d:df:46:16:1b:f4:fb:
92:40:76:b1:70:51:0b:76:72:2b:62:98:75:f8:9e:
ab:91:f7:b6:13:e8:a5:0c:63:26:f4:8c:6e:e5:bb:
d2:60:f9:ed:5b:c0:df:09:29:4e:78:93:41:64:2f:
9e:4c:08:61:29:b7:0f:b7:21:de:1f:3d:4e:37:94:
bc:1d:24:23:03:3d:a3:d6:ef:8b:29:2d:3b:77:0a:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:72:E3:C4:87:0E:99:0D:B8:FE:61:96:32:69:A6:26:96:F8:E5:55
X509v3 Authority Key Identifier:
keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:eb:1c:2d:cf:ab:bd:52:83:b6:db:4b:57:9d:33:8f:bc:3f:
2a:d8:d8:4e:53:03:e0:2c:14:d8:1a:13:6b:73:d0:f4:a2:ed:
78:3f:35:0d:77:0b:bd:03:40:ee:19:00:90:ce:07:39:ac:12:
4a:56:6d:39:81:a3:a2:4e:61:07:26:b0:c5:ea:8f:15:8c:db:
00:84:3e:06:30:3f:f8:99:25:89:fa:db:34:6b:00:2d:58:fc:
27:0c:f0:90:90:eb:34:b2:7b:fc:d2:98:47:4f:78:e9:36:76:
f6:dc:8a:02:71:18:12:58:a1:b1:15:61:a8:d8:77:96:f5:e8:
af:b0:16:9b:ea:56:6b:3c:03:48:5a:38:ba:50:18:3d:bc:dc:
33:7a:64:41:58:1a:10:d9:32:dc:c5:bd:05:d5:b5:a3:3c:30:
43:4a:0b:27:bc:b7:d3:59:1c:bb:7d:3f:4b:41:bb:0c:79:61:
8a:d4:4a:75:17:d1:27:a5:37:75:50:be:d1:8d:78:6f:b9:96:
09:45:76:47:11:ba:06:1c:5d:23:10:6f:b4:f2:2a:90:e5:ad:
dc:9f:b0:b7:85:15:0e:3d:25:fc:8f:ea:4c:b0:a8:c3:f0:9e:
8b:a2:84:ae:b4:cf:59:6d:b0:00:50:c6:5b:06:36:94:d2:df:
67:1f:12:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:18 2025 by rpki-client on console-fra.rpki-client.org