Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
File: lyz9rusSb2_NRpalkPcBiDeqX_I.mft (raw, json)
Hash identifier: mT6GXzDl3+NCW8MZznKFwG0tQ0r8/4rFu85Q0qE96PE=
Subject key identifier: D5:54:71:79:4B:48:C5:61:0C:C9:9D:FA:B5:14:31:FB:53:B6:8E:DA
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Certificate issuer: /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial: 0628
Authority info access: rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
Manifest number: 0627
Signing time: Sat 02 Aug 2025 02:19:55 +0000
Manifest this update: Sat 02 Aug 2025 02:19:54 +0000
Manifest next update: Mon 04 Aug 2025 02:19:54 +0000
Files and hashes: 1: lyz9rusSb2_NRpalkPcBiDeqX_I.crl (hash: eQJ5sGYukqNdOd1JmH9K4WjYdTJds/i9NW8m3Cx0mdg=)
2: FCF2744EE4DD11ED83CFE7E95C736454.roa (hash: 7tfnNvaHIqZ7VHDcLuyEzEdaFsax5cOARy6FVza2SjE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 04 Aug 2025 00:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576 (0x628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EBDD7RI, serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Validity
Not Before: Aug 2 02:19:54 2025 GMT
Not After : Aug 4 02:19:54 2025 GMT
Subject: CN=688d75cb-7e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:c2:03:bd:fd:99:49:8a:ce:35:df:2c:f8:
cc:bc:e8:e5:c1:2e:74:88:ec:77:13:aa:bb:df:0a:
3a:c9:d4:d0:90:06:5d:6a:2a:ef:3b:79:12:a7:a8:
c1:d5:e2:00:12:f5:d7:20:a3:62:8e:06:f7:fe:21:
b3:1a:ef:85:d0:51:40:1c:c0:fd:ee:81:3b:2b:a1:
0f:15:0e:2b:87:46:d0:af:8a:29:c1:e3:fa:cd:6b:
e8:62:bb:6b:9b:bf:87:ec:e8:bb:77:c6:2a:bc:0d:
b0:64:77:2b:36:d0:f6:2d:b8:f7:d9:70:37:01:64:
2b:c0:98:4f:97:11:02:15:36:74:17:0c:4d:d1:1b:
b9:dd:e7:b0:14:ee:56:6c:eb:62:62:ac:fa:a3:d5:
b7:fe:dc:71:26:28:92:0b:f7:22:9a:3e:92:a0:32:
99:7c:15:39:92:27:02:71:60:13:32:94:e4:4d:0a:
52:0f:0c:b3:9d:e4:37:79:a6:b3:51:0f:10:8c:84:
32:6b:30:3c:22:eb:fb:42:b2:3a:30:cd:9e:17:cf:
90:8a:41:2f:03:6d:1e:3b:e9:5d:7f:d0:0a:33:56:
f6:9a:3d:46:f8:02:c4:ed:82:df:74:d1:e3:34:1a:
a5:8d:a0:e0:08:1e:2c:45:e6:12:56:01:ed:94:58:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:54:71:79:4B:48:C5:61:0C:C9:9D:FA:B5:14:31:FB:53:B6:8E:DA
X509v3 Authority Key Identifier:
keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f3:d5:a5:21:e0:27:12:bc:0b:46:89:78:38:62:c2:61:eb:
63:45:6f:2d:1a:7e:91:48:cd:96:4a:b7:77:d4:e6:81:04:db:
77:e0:43:75:5a:cb:2f:92:e0:b2:67:1d:34:51:f2:a5:65:e1:
37:b8:c2:2b:ed:1d:45:8f:84:97:eb:bb:ce:2b:ca:f5:75:0a:
31:d8:0c:24:03:44:e9:b2:1d:89:22:50:de:4d:07:2f:b1:2b:
07:88:c9:bd:b2:ae:e4:67:e1:ee:98:7c:02:ee:bc:13:ec:5e:
4a:21:3b:86:70:ad:b5:2b:d1:09:3f:d7:d3:f0:36:64:a9:7d:
a4:5a:0c:10:f9:d3:6b:d3:7e:69:f9:73:fe:46:90:d5:3d:3a:
dc:7c:b0:4f:4b:53:4d:74:6c:7c:2f:c4:91:64:54:b4:2c:58:
d1:94:14:25:26:03:0e:87:f7:c6:8d:1b:ee:43:cd:d3:ed:0e:
d7:c9:12:7b:75:75:2e:48:e4:5f:69:17:cc:b1:7c:37:8b:27:
26:28:af:11:5d:ac:fd:10:44:b4:d2:ba:8a:39:87:0c:cd:7d:
c3:46:f3:cb:e8:7c:6f:66:e1:62:ad:f7:5c:47:3c:18:bd:b1:
40:4c:3e:a5:5e:f5:28:83:53:af:17:9e:5c:b8:ed:b8:8f:bd:
53:a0:d2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 00:49:17 2025 by rpki-client