
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
File: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft (raw, json)
Hash identifier: IC7hucDvbUfNktzqY+a5YTBw0DvOi6JEJZaGgFN319U=
Subject key identifier: 74:AF:2E:51:F5:BA:96:6C:36:09:CB:27:DC:6E:D7:7C:7B:F6:05:30
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 106E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
Manifest number: 0FC5
Signing time: Sat 25 Oct 2025 00:45:32 +0000
Manifest this update: Sat 25 Oct 2025 00:45:29 +0000
Manifest next update: Mon 27 Oct 2025 00:45:29 +0000
Files and hashes: 1: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl (hash: TeUry/iz4d+ua9HOqLbJm/k4hHpEBvFi5cjcwkIge1M=)
2: KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer (hash: 7QtdnaQza7N4jDnPovc1w8gF48Ij+qmzZLDIkyC63O8=)
3: n10GlKN56yP6tAip1LvVCOGqOSI.cer (hash: 4EvvdvWNdGnaHC0ksGa9n34SIrtveRqx7aUjfJ5vgAM=)
4: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (hash: bBV5obWB28b3fjtHXuMC6GE0zb3F2jnXWysfemiYklw=)
5: ZbPoGBw9qNHWQehKRcjvgjndfqc.cer (hash: CC3hg+mcFc4UQvWif2Z6cGSaFUXRvXNRNJBbDnIHepk=)
6: sOuFTcDYmjIzySVR0W0U1DjPVR8.cer (hash: DpTRWhjCxqJPv0tA3HKAJTvp2o1a7CI8HDBrqVfTOTg=)
7: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer (hash: dslyP+wRPUnioCJrBU2EarUy9Gis6BBRiNzD4Ok9qtg=)
8: OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer (hash: rOTGOTt3lhWZ9SfTS235YkHvYjCeNdAkZtvftw0cvF4=)
9: 6vTkF_QNHJDUbdlViOspDev7ius.cer (hash: JYh5Iqrt4qoHSp6swIesPEtVVSEDDysMp71dOKb2ow0=)
10: 8GzMRNUs-b4RXOx6TaaxMJukOaU.cer (hash: AhHBgKR9j/6MxZii8GMzEcZ3icKR5vSn1U96Lut42oI=)
11: nYezEXqhvXgot91GTXMHa66NzJY.cer (hash: BA4R/qMEmq9shG2AzCjk53F+kykngTuQNTlYjUKEEzc=)
12: qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (hash: jkPeHZLkph4AzMqn8n5gUr6W70YNpBkeTAvz2j8/sTw=)
13: D1pm1nbRb8eSfE4kaUoejHekQGs.cer (hash: NTfudnRepXxK1NGJ1lOWpfBClqBr1/uPZzAhn8ECkk0=)
14: SGm5dfSdmA_lFc7dSaDEDruBrKI.cer (hash: SWyEW0ny7DVt22fVGXyUitLE2JKk91dpiv1RN6IWJYM=)
15: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer (hash: SKc016m8ZfBvJifk221ftKMQnw2b9DH1+uoR0q7sCrI=)
16: pyKwoONloK3D2e6zzL_MBi2Q76k.cer (hash: km5ZQRKr6MuRSMSkLPjEu48TVmAJxaKADCUvLLLg5pE=)
17: gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer (hash: 2ldNgrPGbqk7UmMFXzOFMiDHVNv+SnifaFsIo1ljShU=)
18: YiXGU2dIRI8cYBvpr6uCfJptjJg.cer (hash: x30oGqbSvDOgtg8EVHsWv0U6J+s6R5CmW9IqDdDHFik=)
19: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer (hash: 9hpPYklOD3XG/G8S7pdKH5CWcV6yfvG+mmcFzdbdANU=)
20: lyz9rusSb2_NRpalkPcBiDeqX_I.cer (hash: bxdyY+YC5sMpCqFa4CchM4qwJZ4/UDW29OSQHF8vXKg=)
21: 8ZI823Vz-wlzku4GArwdsbV78OM.cer (hash: uCddsWdTHuhu5zutaMvClmXkP3yNhSdEe0lg+ZnGJf8=)
22: BinJnUdgwom4TNvs8bbBPPUl6q8.cer (hash: qzqa/EWjKYt10shJo6iqZfyO12/WeiCNb221+cMBDl4=)
23: btXWd58RVP-e4YoO_T3bdQZOoeU.cer (hash: A7NGQB9Y2tDK0hdHpY14+eWiYUNSilHI6Cst0V4PN8g=)
24: 5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer (hash: ogkdWMCSCp8TH1UsMGksxpT3c3fYVMvy5zn9Uq5GspE=)
25: W8VPKEgipxexrUw3z2nQls5_Z3M.cer (hash: s9iHUxqoqEycr0EEXtUBqyzDYCl+yqrLelwsJZWIgl0=)
26: 1F-q3w0PsrIYxNl-HvQbwMkznC8.cer (hash: pEQr+A60oSWY/kcRrRbGG0Tp9jeeN4neU7ayipYIlpw=)
27: MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer (hash: NmhijwgaaRi7wfyDtBhDaDrHkolrhLeYVUkjNd6EoNc=)
28: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (hash: QY1uIbSDSrt6JZK4BqOanR6OMpSYU61g21V6Nk95CXY=)
29: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer (hash: Vx8lkbe2NR9bjeDT7O6AuwX/6SOJPkcaQrSLwwrYULA=)
30: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (hash: 2LL1qyXgeBRiJonvJRKLq/Q4yexHpVqtjOIDk4QZo6E=)
31: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (hash: rS2pcd7r7ooWVJNNDn+2116kQ37UYpf+i3iwIY8mG5c=)
32: VCiBspPW4uKh8hlSyLwDISbuu8k.cer (hash: TNkTO/pixFRRXLoSIPl4IxLnS9nF1IoL86pR0YdCzQg=)
33: ShihNoN8fkklQFrLpOOnPS4t9d4.cer (hash: TD/rChZMStyBeKdEGSrDGDlahtRc7JCEAFzA6+l3cRM=)
34: bynJvMAklSDlBwZp-vZmUm98jzA.cer (hash: ikkS/ZM+jg2Wfqd8pmrhX/sC4BJhR/M0ONoBX5eZ3qM=)
35: 8qncFw2PMqBEwa8QUgRdbU4kIus.cer (hash: zDmK+MKgRiaziwVTgCusHGz8cinKCsIwDgBaRFvdSU0=)
36: i-GoLMm4kURYOcv-vplg8wM9pUI.cer (hash: a7LKY45MlLtsNts6PbOTMOHUPfe/UslJzJzAyod75Hc=)
37: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer (hash: 1bY/LWpjUEz4TNJbFG0XryMvHG3oC1g3zrRLJvSnwXM=)
38: mwftdzFoum4LC-Pl3LLPeB96yCo.cer (hash: wqMcExsMYRVHd4ij2jyGrBfJAXDPQ5Idh6TDGeKZLXY=)
39: 48LJS_VpO0HwWh1WV9GnhLXVcmE.cer (hash: n1VD08oUn/IQqNfjAeJRzt/NrlyG0pwtoNy2cGABQKg=)
40: qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer (hash: geB1ekaUnJR16eMRyFdk0rOgBzNirsc2PboPTc3PEPk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 27 Oct 2025 00:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4206 (0x106e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Oct 25 00:45:29 2025 GMT
Not After : Oct 27 00:45:29 2025 GMT
Subject: CN=68fc1daa-d089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:96:6b:e3:c1:13:d7:84:94:ef:2c:5f:d7:3c:
c2:96:1b:c1:07:c9:74:f3:20:20:01:b8:ae:ff:14:
57:06:ca:61:3b:ab:38:44:60:fa:2a:e7:5b:de:7e:
52:64:1e:24:ad:ef:46:e7:90:b0:51:10:0f:53:66:
26:4b:f2:2f:17:02:01:ca:df:30:91:10:f4:24:ce:
71:ef:0e:f7:f0:d9:ef:7c:61:f0:54:da:a2:30:0c:
59:11:87:74:91:a9:a1:ca:f0:d2:83:b3:7d:cb:95:
91:57:bf:0a:14:25:4e:fb:d2:98:0e:14:48:0e:7b:
d9:38:e8:8b:3f:70:94:8f:07:21:ed:bc:a7:d2:e9:
42:8f:2e:e1:71:8f:fc:c4:38:04:6a:88:0a:55:23:
55:8a:7e:5e:44:6e:6b:ac:66:d2:94:0d:30:4f:72:
85:2b:f7:68:6a:f4:f5:c5:fa:a6:c6:83:b2:65:d0:
91:dc:c5:a6:cc:fa:94:72:47:93:dc:4f:d3:f5:a1:
d4:3e:d1:28:36:89:13:90:de:b1:3a:93:ae:5b:1a:
37:20:b6:36:99:68:0e:66:97:95:e6:04:9a:7b:f2:
1b:2b:5e:58:77:fd:79:71:43:0d:89:d5:d9:4e:bf:
65:b6:76:37:bc:f7:17:13:6b:e0:f2:35:90:73:ed:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AF:2E:51:F5:BA:96:6C:36:09:CB:27:DC:6E:D7:7C:7B:F6:05:30
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:55:37:e8:88:a1:37:36:42:c7:94:bd:ba:19:7f:f8:b4:5e:
4a:9c:13:3e:f4:1e:31:29:31:a5:40:a0:60:d3:e3:ef:14:f5:
15:9d:95:b8:89:a9:92:67:cc:31:48:f4:ae:d6:ea:ae:5d:80:
b3:28:05:ea:26:ae:83:41:64:79:9e:e8:a8:bb:8a:43:16:af:
32:43:4b:c3:17:74:36:66:22:03:ec:7f:da:7e:3a:9e:7e:c3:
ce:00:ff:0d:8f:71:d7:f6:30:6b:ac:b9:10:65:22:db:86:ee:
21:a2:b8:93:52:54:f7:00:fb:f6:c4:64:0f:34:e1:a9:2b:d4:
22:8b:0f:43:cd:44:b5:c6:8d:95:d9:93:6f:f7:6a:1c:74:89:
23:09:c4:10:84:00:3e:c5:3a:51:c5:cc:85:7e:f3:83:aa:0e:
c1:3c:7f:f5:5d:b4:00:fb:89:46:aa:04:f7:6d:75:8a:8f:45:
f7:1c:d4:28:a5:0e:e8:04:ea:b2:e3:15:f8:2f:bd:f2:de:da:
c1:02:b1:10:86:04:34:a4:31:0f:09:ef:64:8c:ff:30:77:e4:
c8:48:51:1b:51:99:c5:56:fe:eb:84:a8:be:dd:10:93:c7:4b:
69:17:4a:19:df:65:cd:2f:2d:40:a4:c8:39:2a:6b:54:e8:ed:
e2:c3:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:03:35 2025 by rpki-client