Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier: 00Z0UPb2ELJeRsC+UA7rHJu5RBy1YNxc0oBZc0sL3FI=
Subject key identifier: C2:DD:03:6F:1E:07:11:EA:99:6D:A7:AB:5A:A6:BB:53:B6:72:9A:17
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer: /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial: 02A5
Authority info access: rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number: 02A4
Signing time: Fri 06 Jun 2025 03:59:04 +0000
Manifest this update: Fri 06 Jun 2025 03:59:03 +0000
Manifest next update: Sun 08 Jun 2025 03:59:03 +0000
Files and hashes: 1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: Sv+9GSsp9HnIiQPDpjjyr0zIZwsgPs6LKtSyTXLUGCc=)
2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Validity
Not Before: Jun 6 03:59:03 2025 GMT
Not After : Jun 8 03:59:03 2025 GMT
Subject: CN=68426788-df90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:7c:7d:8c:a8:89:ef:80:b1:be:bf:30:a3:
6a:ea:81:43:71:4b:6d:0c:40:dc:d9:98:3b:77:2c:
9f:86:e2:53:09:8b:85:ab:8f:1d:a3:fe:58:86:1a:
c4:ac:26:56:58:71:db:69:38:e0:76:82:e5:ad:ea:
1c:4b:a3:d7:6e:9e:9e:82:b1:d3:9b:c3:cc:9f:26:
29:24:58:20:55:a4:bf:ce:5b:45:80:44:d3:3e:3b:
87:38:77:0f:e5:3d:7c:11:cf:13:cf:51:2d:e9:55:
1c:0d:a2:6c:64:75:6c:03:ae:8c:11:b4:07:d2:8c:
49:02:c6:7c:54:bf:58:5e:b9:1a:bf:83:b8:2b:b6:
ec:0a:f1:02:90:bd:9c:8e:86:b6:9d:40:b1:b1:36:
f9:2b:8f:92:ce:88:d9:b3:26:9e:f8:e6:0d:69:77:
f7:f9:b7:d7:da:91:3f:bb:94:93:ba:93:07:2f:5a:
bf:50:b7:c2:ca:d2:38:9e:05:b0:40:2d:e2:3f:be:
22:f5:bc:31:63:05:08:67:83:b4:e1:38:13:5a:06:
ed:44:ae:12:85:eb:e8:71:8e:cb:ce:c2:eb:70:f9:
2a:b8:23:7f:22:8c:e3:02:d2:ca:9c:db:84:07:5b:
f5:54:7a:4a:e0:ca:4d:03:6e:8a:c6:eb:a7:cf:1a:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DD:03:6F:1E:07:11:EA:99:6D:A7:AB:5A:A6:BB:53:B6:72:9A:17
X509v3 Authority Key Identifier:
keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:b1:4f:8b:c5:96:c8:fd:f0:88:68:42:3a:40:0f:6d:1a:e8:
01:b8:e9:2a:ad:b8:de:97:8a:e5:76:62:03:01:07:10:e1:1b:
83:f3:d8:f9:95:69:4b:f5:77:41:3b:2c:50:7d:bb:30:4c:87:
2c:5b:ad:51:46:3f:59:63:a1:72:dd:95:36:e2:e5:84:39:9f:
d9:0d:7e:f8:90:f0:52:6b:d1:93:53:50:b8:53:94:8c:f0:87:
b6:86:fe:51:73:ba:de:76:f7:71:03:8b:40:12:0d:d6:2e:e7:
17:07:6e:1d:45:80:d2:a6:13:bf:80:87:f9:d0:18:14:12:57:
ee:2b:00:95:b9:b6:5b:eb:a1:f9:7f:63:8f:b2:66:ea:19:b3:
7b:8a:a7:92:12:1d:b5:e9:46:29:34:25:75:7a:4d:04:79:bf:
01:2f:e0:36:0f:5c:a9:da:2b:d3:73:63:fd:14:a4:61:f2:cb:
5a:ed:f5:d9:94:bc:b0:76:1e:27:7c:3a:06:30:00:06:7c:96:
8c:01:b1:c3:55:a3:48:65:ab:4a:f6:a3:60:69:1e:7e:57:a4:
34:7c:c7:ff:a1:cf:be:99:31:41:6a:36:4e:14:bd:dc:6f:90:
a6:30:29:58:d2:79:b0:3d:7b:11:cf:51:bd:bd:b0:52:96:15:
32:86:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:55:15 2025 by rpki-client