Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
File: NaE6RzFmxUdFBUsur-85WeOenW8.mft (raw, json)
Hash identifier: 9L9ggriUkpm8zqvGtIX6LTdcFHAKpp2X/0c/lW2wssw=
Subject key identifier: D4:1D:21:FE:5A:F8:F2:FE:A7:EB:8E:73:05:CF:5A:09:CA:E9:FA:85
Authority key identifier: 35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
Certificate issuer: /CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Certificate serial: 04C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
Manifest number: 04C7
Signing time: Wed 04 Jun 2025 02:49:27 +0000
Manifest this update: Wed 04 Jun 2025 02:49:26 +0000
Manifest next update: Fri 06 Jun 2025 02:49:26 +0000
Files and hashes: 1: NaE6RzFmxUdFBUsur-85WeOenW8.crl (hash: t4dXxilt6ZKyAzJRiv1165aO5Oyb+JFYmOkczQrKg2k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1225 (0x4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3666101AF, serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Validity
Not Before: Jun 4 02:49:26 2025 GMT
Not After : Jun 6 02:49:26 2025 GMT
Subject: CN=683fb437-4036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:5e:ed:42:62:5a:dd:78:6f:86:41:b1:d0:
c3:9d:7b:03:7e:b4:53:f7:a8:3f:8c:11:88:6a:2c:
65:96:b1:de:ca:69:84:f1:40:a7:6e:a8:55:9a:5e:
7b:e3:97:04:b2:31:48:21:a1:ca:14:4e:94:29:2e:
1e:79:a2:5e:ba:0c:5c:f5:ab:84:79:d5:68:d6:13:
1c:29:31:48:34:98:e6:4a:50:9b:71:a8:f7:66:12:
b2:7f:4a:bf:59:ce:e8:7e:f1:63:54:51:91:ce:5c:
cf:b4:2b:4f:d4:6f:0f:95:c7:75:0f:81:10:55:73:
71:df:49:cd:db:dd:55:30:c9:00:ff:b4:cd:4b:a6:
18:a9:2c:96:8e:ae:29:f8:e7:99:d3:af:a2:6f:40:
e2:e9:ac:56:c3:43:df:be:50:5a:d8:99:42:88:80:
6d:a5:69:8d:25:73:b9:50:69:a8:d0:de:cb:c3:82:
43:f0:c0:b1:7f:a0:cf:5f:65:8d:d5:b9:bf:5c:b5:
ac:99:4e:fa:c3:d6:2c:af:b7:fc:af:95:85:fe:6b:
c0:59:6d:4a:bc:f9:56:9c:97:c4:23:1b:4f:d5:d7:
4d:93:d4:8d:fd:84:65:7f:19:20:47:82:b3:05:a7:
03:e2:b6:66:f9:44:5d:73:da:5a:e3:ec:17:31:52:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1D:21:FE:5A:F8:F2:FE:A7:EB:8E:73:05:CF:5A:09:CA:E9:FA:85
X509v3 Authority Key Identifier:
keyid:35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:eb:cb:a8:31:80:3b:fa:95:27:95:d5:43:5d:b8:ec:6a:26:
49:b2:16:ee:c9:bb:12:8b:78:23:b4:bc:88:d0:7a:96:48:60:
53:60:cf:31:24:34:d1:2a:4e:39:b7:e6:74:b4:40:05:50:50:
eb:40:80:c9:13:a2:6f:c1:00:71:b9:e8:a1:3f:8a:e2:84:5f:
30:2f:6e:a8:30:4d:a2:57:d7:fa:c8:7a:79:86:5e:30:d2:49:
33:8a:92:da:67:46:9e:44:9f:6e:f6:8a:15:26:11:e0:58:44:
14:85:af:e4:07:7e:d0:e8:6d:c1:e7:80:40:d3:cd:bd:be:99:
39:70:7e:c8:26:7e:70:9c:c0:24:b7:26:9e:3e:5b:4c:0a:c7:
04:10:9a:77:c6:b4:6b:6d:21:49:fd:5a:31:57:9f:b1:d7:e0:
6c:54:19:0e:98:e7:be:9d:21:06:5b:da:f4:c7:9e:7a:1f:ee:
9f:69:4b:19:18:72:3c:39:7e:1d:a7:30:4e:ba:ca:7e:df:9a:
21:b2:09:3d:bb:99:4d:d8:50:32:97:24:c2:9b:23:f6:08:32:
29:91:53:31:e3:82:07:78:83:ff:48:27:87:29:f3:99:b6:5f:
39:14:db:e8:5c:8b:cd:f2:5c:cf:de:80:40:ea:5e:a3:2b:15:
d9:29:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:01:46 2025 by rpki-client