Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File: 7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier: JxZGsaoDKDdPXDSoj5xkbDFBwLKO8eMBWJMELAG8dis=
Subject key identifier: ED:40:5A:65:D8:31:EA:D0:95:24:3A:F4:0C:21:26:D0:F4:F4:73:DC
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer: /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial: 01A4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number: 01A4
Signing time: Wed 04 Jun 2025 04:29:45 +0000
Manifest this update: Wed 04 Jun 2025 04:29:44 +0000
Manifest next update: Fri 06 Jun 2025 04:29:44 +0000
Files and hashes: 1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: kbBsV+Q/SXR8CrmG9j+NwhGQkKRfdrpQH3TH+kXBPFw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Validity
Not Before: Jun 4 04:29:44 2025 GMT
Not After : Jun 6 04:29:44 2025 GMT
Subject: CN=683fcbb9-ced7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:1b:55:d6:bd:dd:b1:c4:a3:07:76:76:82:
14:93:de:f9:48:b4:8c:fb:84:0e:c2:c8:90:4b:55:
7e:b3:d7:2f:5f:4e:f0:f9:3a:bc:47:66:f4:41:03:
f7:e2:8e:69:ad:49:8e:b7:6b:41:73:f3:5c:6a:ca:
ec:23:ab:3c:2e:30:d0:71:ae:6c:36:db:5b:ac:bf:
59:6d:db:ff:02:21:eb:31:89:4b:5c:3a:36:28:2a:
f9:44:a2:f8:d2:a9:c6:b8:7d:4b:e7:a5:e6:a8:56:
9c:43:04:7c:dc:05:d9:e2:32:b6:8a:1d:eb:31:6a:
8b:34:9f:e1:18:4c:a8:47:8c:c0:86:3e:4d:da:fb:
23:0b:d6:14:12:46:a0:a4:0e:1d:58:8f:1e:8b:1c:
93:04:c1:48:3c:d4:d1:ce:b8:6c:9b:3a:c2:4d:2b:
78:3d:93:ee:67:46:f3:9b:15:e6:f3:53:82:ce:c8:
85:48:3e:2d:fb:3f:4a:2f:1b:1f:73:82:d4:ef:61:
53:5c:cd:34:d4:2a:4f:2b:9b:09:67:18:b6:78:fb:
fa:0f:b8:14:ba:b1:91:21:7c:61:9b:a1:11:c2:03:
45:2c:73:ce:7d:78:7a:4b:ef:f3:ca:21:af:f1:5e:
0a:09:b7:46:c6:01:04:1c:36:64:9b:63:df:3f:ae:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:40:5A:65:D8:31:EA:D0:95:24:3A:F4:0C:21:26:D0:F4:F4:73:DC
X509v3 Authority Key Identifier:
keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fe:29:4d:65:f2:5a:2f:f8:55:5b:f2:e9:e9:db:8c:5e:59:
73:75:73:41:4e:5d:dc:e5:d7:bb:f4:74:82:07:ad:7f:6b:26:
88:0b:b4:9f:95:05:cd:60:9b:b0:f4:06:74:6d:0c:83:4f:a7:
fe:44:00:57:fb:77:96:63:4c:62:4a:45:47:dc:6e:81:c8:2d:
8e:41:31:27:ca:ea:98:7b:8c:f3:9f:98:49:99:d6:27:0e:76:
a5:70:36:1d:95:5c:27:af:b4:ed:55:44:84:4a:95:3f:5f:54:
3c:de:f6:06:0d:13:c1:65:d8:8a:31:08:8a:58:72:09:f8:83:
27:7c:e8:82:70:36:0d:d5:ad:fb:6e:03:2e:d1:79:36:41:4c:
da:87:7e:cb:43:76:ec:6c:21:f9:2d:bb:04:08:53:d0:cc:6e:
c3:c9:6e:e8:3a:90:36:80:9c:0f:e7:8b:a8:98:b9:b9:37:0a:
26:9f:3c:85:dd:8a:ee:2e:a3:ab:c0:6e:1a:07:e2:04:f3:29:
fc:54:67:35:9d:04:3d:fc:c0:e8:ce:b2:c0:ee:64:cb:1f:f4:
43:52:8f:d5:68:44:8e:bd:4c:33:47:21:5c:46:14:5d:fb:d3:
69:8f:db:bc:bb:11:f0:ca:2b:f5:af:3b:cf:f1:6d:37:fb:7d:
e4:b3:f1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:16:49 2025 by rpki-client