Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
File: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft (raw, json)
Hash identifier: /AD1pd8vpztwiDzzThPgUZ7gcLMxzWFOCC9QuzIgz3M=
Subject key identifier: 3E:02:E1:D9:7F:C4:07:63:94:FA:4B:E2:6B:EE:E1:B7:5B:FF:FF:72
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 0FD2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
Manifest number: 0F2F
Signing time: Wed 04 Jun 2025 00:45:44 +0000
Manifest this update: Wed 04 Jun 2025 00:45:37 +0000
Manifest next update: Fri 06 Jun 2025 00:45:37 +0000
Files and hashes: 1: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl (hash: kn0lrXawXXfO0m4oZYJZh0GyrWg6xRmuIt1hdjc2vbU=)
2: KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer (hash: 7QtdnaQza7N4jDnPovc1w8gF48Ij+qmzZLDIkyC63O8=)
3: n10GlKN56yP6tAip1LvVCOGqOSI.cer (hash: 4EvvdvWNdGnaHC0ksGa9n34SIrtveRqx7aUjfJ5vgAM=)
4: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (hash: bBV5obWB28b3fjtHXuMC6GE0zb3F2jnXWysfemiYklw=)
5: ZbPoGBw9qNHWQehKRcjvgjndfqc.cer (hash: CC3hg+mcFc4UQvWif2Z6cGSaFUXRvXNRNJBbDnIHepk=)
6: OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer (hash: rOTGOTt3lhWZ9SfTS235YkHvYjCeNdAkZtvftw0cvF4=)
7: 6vTkF_QNHJDUbdlViOspDev7ius.cer (hash: JYh5Iqrt4qoHSp6swIesPEtVVSEDDysMp71dOKb2ow0=)
8: 8GzMRNUs-b4RXOx6TaaxMJukOaU.cer (hash: AhHBgKR9j/6MxZii8GMzEcZ3icKR5vSn1U96Lut42oI=)
9: nYezEXqhvXgot91GTXMHa66NzJY.cer (hash: BA4R/qMEmq9shG2AzCjk53F+kykngTuQNTlYjUKEEzc=)
10: qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (hash: jkPeHZLkph4AzMqn8n5gUr6W70YNpBkeTAvz2j8/sTw=)
11: D1pm1nbRb8eSfE4kaUoejHekQGs.cer (hash: NTfudnRepXxK1NGJ1lOWpfBClqBr1/uPZzAhn8ECkk0=)
12: SGm5dfSdmA_lFc7dSaDEDruBrKI.cer (hash: SWyEW0ny7DVt22fVGXyUitLE2JKk91dpiv1RN6IWJYM=)
13: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer (hash: SKc016m8ZfBvJifk221ftKMQnw2b9DH1+uoR0q7sCrI=)
14: pyKwoONloK3D2e6zzL_MBi2Q76k.cer (hash: km5ZQRKr6MuRSMSkLPjEu48TVmAJxaKADCUvLLLg5pE=)
15: gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer (hash: 2ldNgrPGbqk7UmMFXzOFMiDHVNv+SnifaFsIo1ljShU=)
16: YiXGU2dIRI8cYBvpr6uCfJptjJg.cer (hash: x30oGqbSvDOgtg8EVHsWv0U6J+s6R5CmW9IqDdDHFik=)
17: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer (hash: 9hpPYklOD3XG/G8S7pdKH5CWcV6yfvG+mmcFzdbdANU=)
18: lyz9rusSb2_NRpalkPcBiDeqX_I.cer (hash: bxdyY+YC5sMpCqFa4CchM4qwJZ4/UDW29OSQHF8vXKg=)
19: 8ZI823Vz-wlzku4GArwdsbV78OM.cer (hash: uCddsWdTHuhu5zutaMvClmXkP3yNhSdEe0lg+ZnGJf8=)
20: BinJnUdgwom4TNvs8bbBPPUl6q8.cer (hash: qzqa/EWjKYt10shJo6iqZfyO12/WeiCNb221+cMBDl4=)
21: btXWd58RVP-e4YoO_T3bdQZOoeU.cer (hash: A7NGQB9Y2tDK0hdHpY14+eWiYUNSilHI6Cst0V4PN8g=)
22: W8VPKEgipxexrUw3z2nQls5_Z3M.cer (hash: s9iHUxqoqEycr0EEXtUBqyzDYCl+yqrLelwsJZWIgl0=)
23: MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer (hash: NmhijwgaaRi7wfyDtBhDaDrHkolrhLeYVUkjNd6EoNc=)
24: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (hash: QY1uIbSDSrt6JZK4BqOanR6OMpSYU61g21V6Nk95CXY=)
25: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer (hash: Vx8lkbe2NR9bjeDT7O6AuwX/6SOJPkcaQrSLwwrYULA=)
26: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (hash: 2LL1qyXgeBRiJonvJRKLq/Q4yexHpVqtjOIDk4QZo6E=)
27: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (hash: rS2pcd7r7ooWVJNNDn+2116kQ37UYpf+i3iwIY8mG5c=)
28: VCiBspPW4uKh8hlSyLwDISbuu8k.cer (hash: TNkTO/pixFRRXLoSIPl4IxLnS9nF1IoL86pR0YdCzQg=)
29: bynJvMAklSDlBwZp-vZmUm98jzA.cer (hash: ikkS/ZM+jg2Wfqd8pmrhX/sC4BJhR/M0ONoBX5eZ3qM=)
30: 8qncFw2PMqBEwa8QUgRdbU4kIus.cer (hash: zDmK+MKgRiaziwVTgCusHGz8cinKCsIwDgBaRFvdSU0=)
31: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer (hash: 1bY/LWpjUEz4TNJbFG0XryMvHG3oC1g3zrRLJvSnwXM=)
32: mwftdzFoum4LC-Pl3LLPeB96yCo.cer (hash: wqMcExsMYRVHd4ij2jyGrBfJAXDPQ5Idh6TDGeKZLXY=)
33: 48LJS_VpO0HwWh1WV9GnhLXVcmE.cer (hash: n1VD08oUn/IQqNfjAeJRzt/NrlyG0pwtoNy2cGABQKg=)
34: qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer (hash: geB1ekaUnJR16eMRyFdk0rOgBzNirsc2PboPTc3PEPk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4050 (0xfd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Jun 4 00:45:37 2025 GMT
Not After : Jun 6 00:45:37 2025 GMT
Subject: CN=683f9731-a4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:4e:92:d3:7b:f1:7a:7d:4f:ae:ed:2f:1d:
36:73:11:24:08:5e:0f:17:72:ee:89:f7:3a:80:f4:
35:c1:2e:74:cb:cf:f9:c0:d2:1e:a3:df:4c:e6:7a:
6d:26:41:70:bf:f4:fd:c0:ba:39:e3:ce:61:ba:85:
ed:96:2d:15:1e:b5:5f:3b:a2:ea:dc:4a:c0:09:7f:
6d:a9:91:fa:1d:56:7c:79:db:1e:db:9a:7e:bf:de:
76:7c:76:3e:b1:9a:61:2f:ca:8c:35:8a:fb:67:c8:
56:c6:8b:f2:ef:7e:bd:2f:ea:05:50:5a:97:a2:56:
4e:a3:76:f3:f1:ac:05:46:46:d4:ca:ba:48:d2:55:
de:58:f5:9a:98:a7:7b:af:c6:32:72:a0:6d:1a:58:
59:ea:fc:25:1e:28:d5:16:e1:8d:a8:4c:ef:a4:d1:
74:ab:77:57:8b:8d:07:13:03:ef:4e:23:68:ca:6c:
6e:59:43:87:09:db:5c:c9:be:98:0e:80:ac:b5:ec:
0d:ad:4b:5b:92:83:35:06:00:f7:25:22:ae:bc:f4:
02:9b:4f:00:4e:52:54:7a:29:09:ba:46:57:67:83:
e8:a3:9d:e3:8b:f2:0b:bf:c4:b2:97:a6:38:3d:ac:
89:28:05:35:3f:cf:9e:73:77:e7:72:e9:6d:0c:6b:
09:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:02:E1:D9:7F:C4:07:63:94:FA:4B:E2:6B:EE:E1:B7:5B:FF:FF:72
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:bf:74:fd:be:4a:d3:50:33:5e:0f:dd:7f:f8:ca:b2:fa:77:
53:b3:65:f9:9d:98:4c:d9:6c:6e:b7:60:bd:88:ab:90:03:6e:
c6:7f:3f:e1:36:1d:00:17:e6:b0:c2:34:13:c9:25:50:3e:f5:
9a:40:96:2b:37:e3:56:ae:3c:a2:b3:d6:9d:3f:53:e5:50:94:
60:45:7c:e7:a4:3b:3c:c9:cb:df:92:9e:eb:a8:ca:59:4c:5c:
06:11:07:fd:ec:2a:1c:52:e0:ac:1c:e2:da:8a:28:76:e9:25:
05:c9:bb:9f:0a:e6:30:34:78:53:5e:d8:7b:e5:9c:e0:87:d5:
ab:d6:6b:8c:8b:88:b3:85:82:c6:70:ad:10:94:f1:08:ff:75:
9c:14:af:64:98:ac:a5:ab:ce:50:1e:6e:c6:b1:75:94:76:2f:
0e:74:dd:93:66:22:32:3d:48:5c:89:a7:00:87:ce:04:f9:fb:
2a:7d:87:54:5a:3a:db:55:c6:77:00:ac:2c:9f:ad:d9:87:38:
81:1b:90:81:e1:4c:08:12:36:3a:ed:84:17:ed:59:f4:3d:63:
65:50:ad:3e:8f:b6:31:42:5c:aa:00:f4:df:3c:c3:f8:6e:30:
a4:13:28:6e:e9:b8:eb:4e:03:e6:a8:79:e7:a4:f7:cd:ef:b7:
d7:01:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:34:55 2025 by rpki-client