
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File: nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier: EOKzYsMnpdOAyQRxYaAJnSrh/IQaWDL18qxb/BFKg3k=
Subject key identifier: 2B:0B:B9:9F:03:A6:CB:E7:0B:70:21:EA:48:1F:67:55:80:F2:B9:7B
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer: /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial: 08F7
Authority info access: rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number: 08F3
Signing time: Wed 11 Jun 2025 01:22:35 +0000
Manifest this update: Wed 11 Jun 2025 01:22:34 +0000
Manifest next update: Fri 13 Jun 2025 01:22:34 +0000
Files and hashes: 1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: pvnc1RvoPkXjryjxdfeL+jbrWL2xkrRyqITxuFt9gX8=)
2: D327BE38980311EE8CAFD532D25BE465.roa (hash: S6gTdluMy3bxrOQWOaTfSvtXEYSyREhvKUaAZL3cXu4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 13 Jun 2025 00:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2295 (0x8f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Validity
Not Before: Jun 11 01:22:34 2025 GMT
Not After : Jun 13 01:22:34 2025 GMT
Subject: CN=6848da5b-241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:70:15:de:16:b2:29:d5:d9:67:db:c9:fb:
0c:4c:b3:e4:86:62:e6:88:f8:98:85:5b:ca:50:cd:
17:73:42:56:95:57:80:99:52:8d:26:b2:60:73:5b:
e9:d4:24:7a:3e:12:c7:9c:03:07:f8:9b:30:b3:39:
6a:8c:f7:72:03:28:71:54:85:bc:b1:a9:47:68:d3:
3e:06:b9:1f:3d:2c:88:bd:77:4c:c5:ec:30:1d:41:
02:dc:51:40:b5:ad:16:b3:c8:cd:81:81:05:c1:33:
27:0d:c5:f3:87:34:a6:24:ae:86:95:2c:24:18:4c:
b0:f6:1d:9a:d6:ec:8e:23:00:32:0d:3b:13:0c:68:
cd:5e:da:3d:06:d0:04:1d:be:c7:6d:93:54:be:4a:
be:d5:8a:fb:7a:e0:21:b4:f4:c6:7e:3e:de:d6:92:
a6:5e:86:4c:4f:d1:08:fa:2a:b7:fc:d1:d1:8b:ee:
03:ce:46:8f:6f:57:70:73:e2:6c:e6:49:4b:07:06:
12:75:06:44:04:a7:d1:21:ac:04:53:81:a2:a8:6d:
38:52:e8:01:15:29:81:0c:5d:b8:59:1b:97:29:69:
19:e9:f1:04:4a:bc:da:57:66:3e:ff:5b:7a:46:1a:
d6:b4:23:5f:2a:7e:a8:94:fd:8e:1e:7e:dc:f3:be:
74:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0B:B9:9F:03:A6:CB:E7:0B:70:21:EA:48:1F:67:55:80:F2:B9:7B
X509v3 Authority Key Identifier:
keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a8:95:30:c2:6d:e7:58:63:88:b4:53:f4:26:a9:9e:8c:8a:
79:5f:f5:3e:f9:80:5e:e6:52:e1:68:fb:21:99:b0:3e:b2:21:
08:c2:97:72:1a:bc:bb:ce:db:fe:31:ee:67:bc:85:1c:8d:1a:
2c:5f:dc:f4:a4:18:5c:8d:6a:f5:0e:e5:1e:75:06:b6:ef:67:
5f:24:b5:82:ca:0a:5a:a5:8b:66:db:3a:aa:d2:cc:bb:70:dd:
f8:c8:5c:c3:8f:29:8c:4c:e4:8f:a8:a6:0c:31:99:a9:c5:8e:
b7:fa:43:5e:bf:dd:5b:b7:63:6e:e2:bf:1d:ab:1e:df:19:7a:
0d:c6:7e:1d:11:aa:8f:3c:4c:9c:fb:99:41:01:d7:0f:6a:af:
1b:f8:29:b6:b5:2f:20:83:38:28:49:8c:8c:74:32:e5:8e:65:
10:11:50:ae:c2:1c:dc:0d:d7:b2:07:3e:81:4b:5e:95:be:58:
a1:1a:fd:9c:d0:85:ef:b9:13:68:1a:d8:3e:87:b9:2a:c7:76:
68:49:18:06:18:22:df:ea:60:4f:c2:d5:e6:ec:f0:21:ca:02:
e5:aa:ff:66:c4:7f:c8:cf:1c:87:52:49:fb:c7:49:6c:d7:80:
5d:d7:ef:12:48:e0:b8:67:e5:88:69:7d:58:25:60:b1:2a:dc:
d1:68:b4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:12:00 2025 by rpki-client