Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
File: iij_MQ2n34MJz6tNz5ojWEK2CHI.mft (raw, json)
Hash identifier: msgBlkxAQiim5J/WyC/ovnYD6Cob6mcsInpzcbRFKjk=
Subject key identifier: 20:81:88:CD:F3:B7:D3:3D:AB:4B:11:A8:0A:E5:65:9D:D8:20:F0:BF
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial: 01963EB00BC3BFB6A43E93822990972E56AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
Manifest number: 02E0
Signing time: Wed 16 Apr 2025 13:00:46 +0000
Manifest this update: Wed 16 Apr 2025 13:00:46 +0000
Manifest next update: Thu 17 Apr 2025 13:00:46 +0000
Files and hashes: 1: 2jBpGTk2ogY4V-pzJnCImL6EwNA.roa (hash: YyHHsV3O+5v5axtSYHO7phMGXdaESVAHbKKQJf3jg5c=)
2: iij_MQ2n34MJz6tNz5ojWEK2CHI.crl (hash: w/jdq7o5xmnGXIUM/FvrOCBwecQTFMoY0d+mDHBet0s=)
3: wGH7RXqHeAFJhSqqiUIKLWLMppk.roa (hash: U9kx/pm8Ri8hF/pstRPu9ajTlV//o1HJNh3HJey1hVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:b0:0b:c3:bf:b6:a4:3e:93:82:29:90:97:2e:56:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Validity
Not Before: Apr 16 13:00:46 2025 GMT
Not After : Apr 17 13:00:46 2025 GMT
Subject: CN=208188cdf3b7d33dab4b11a80ae5659dd820f0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a0:87:e0:11:b2:03:0a:60:3d:cb:d2:36:1a:
71:d6:32:84:f1:53:36:17:df:2c:8f:37:17:34:57:
03:fe:92:d0:c3:ec:28:8c:87:74:78:02:79:49:11:
c7:8e:0f:32:fb:2e:51:cf:fa:15:e1:ec:ff:7a:a1:
46:c6:33:dc:3e:bc:2a:9e:9f:f5:65:91:db:2a:3d:
ed:42:14:7f:ce:8f:c7:2c:18:ce:79:ba:9f:ca:71:
a9:a4:c5:87:24:8c:72:e4:a2:52:1f:8e:fd:03:72:
68:4a:b3:f3:c0:05:a3:9c:7b:85:67:4c:c3:20:23:
f2:cb:7f:f2:3c:fa:59:e7:56:da:27:dc:b7:b2:a1:
1c:5d:ff:f1:e9:a1:17:cf:c8:88:dd:1b:c9:6f:2d:
95:f0:5b:8c:15:a5:0a:22:ac:35:78:b3:2b:40:b6:
2e:2d:fd:ef:a5:e1:cb:6b:d0:1e:7f:7f:e9:91:62:
a4:3c:23:d7:b9:cb:20:8a:ca:6b:8d:ce:c8:29:d7:
01:6a:73:c3:db:33:84:58:3b:16:56:a7:8e:56:25:
f8:91:1b:bf:2f:c5:10:e7:7e:b6:a2:c0:41:03:3a:
10:08:e0:c4:34:7f:c5:97:32:2a:4f:ec:41:fe:d5:
24:41:6d:2a:9b:61:21:51:4a:4f:f4:ad:f5:6a:fa:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:81:88:CD:F3:B7:D3:3D:AB:4B:11:A8:0A:E5:65:9D:D8:20:F0:BF
X509v3 Authority Key Identifier:
keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:96:2b:7e:ca:8a:b2:a8:2c:6a:7c:13:17:9f:61:b6:96:5f:
ab:aa:64:94:44:51:af:c7:1c:e2:0a:14:38:6c:77:e5:a7:f4:
fe:70:4e:68:ff:b9:f9:02:4e:c4:56:fa:59:fa:09:72:67:8d:
f1:fe:dc:6b:72:95:f5:4c:af:17:24:fa:73:f8:72:28:3f:05:
9a:aa:2f:33:0e:54:29:71:bc:14:74:d5:c9:67:57:45:5c:ac:
25:df:32:85:b2:02:d7:33:2a:2f:af:0b:5c:cc:37:15:2a:98:
e9:25:c5:fc:f1:8d:e7:1e:d2:a8:a7:86:5e:04:8a:02:2d:20:
57:12:9e:e3:8e:da:52:c8:cb:f6:47:dc:09:5c:f6:90:cc:f6:
77:37:b7:19:4b:26:10:c7:89:4d:92:a6:6e:2c:ac:e2:67:69:
31:a9:9e:23:12:b0:05:10:ca:b4:cf:40:2e:21:83:c0:9a:01:
93:cf:2b:7f:96:77:ea:ae:d3:ce:9b:bc:51:03:7d:b3:5c:1d:
28:97:3f:1a:ef:76:7a:4b:4d:3e:fe:ea:86:f9:7a:f8:44:49:
9f:15:a9:65:ef:9a:e2:72:1b:f3:56:b7:c3:83:0d:66:c0:a4:
8c:35:16:f7:95:5a:b7:17:b6:62:f9:15:0a:54:24:9f:09:15:
45:1b:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:26:45 2025 by rpki-client