Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File: KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier: wKkP15DDiV+hMLjqhRNDwwvZLZnwz0HPpQ5R73+FCwU=
Subject key identifier: 96:27:44:79:72:A7:92:DD:DB:9E:09:65:B8:3A:E7:F4:3E:8D:2E:26
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer: /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial: 0D7D
Authority info access: rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number: 0D7D
Signing time: Sat 23 Aug 2025 01:02:06 +0000
Manifest this update: Sat 23 Aug 2025 01:02:05 +0000
Manifest next update: Mon 25 Aug 2025 01:02:05 +0000
Files and hashes: 1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: 2EL8gdaGKj4B0e54Ar1L5jPH3//lyBHkDQA+5ftHhXY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3453 (0xd7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Validity
Not Before: Aug 23 01:02:05 2025 GMT
Not After : Aug 25 01:02:05 2025 GMT
Subject: CN=68a9130e-446c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:bb:29:de:d9:cc:0b:a2:7b:be:54:49:42:
e9:07:d0:1f:c7:29:02:e0:5f:60:55:80:83:7d:18:
b5:cd:f1:c7:4e:c5:f0:1e:eb:c8:fe:6a:ad:6d:14:
e8:82:5b:00:9b:4c:5c:5d:6b:c6:fc:9c:c1:8f:b9:
0f:95:5b:16:87:2d:52:ee:19:d7:81:99:88:36:88:
a1:73:f8:e3:1a:84:8e:e7:5f:92:af:f0:ba:3b:45:
ef:35:69:18:cd:81:38:b7:16:e3:50:f6:5b:28:f2:
8f:50:04:e7:b3:b7:b8:e8:9b:26:03:50:a8:f9:98:
46:91:9c:18:f1:41:b9:c2:ac:c4:26:ba:76:87:ab:
e3:a2:59:5f:12:75:6a:dc:c7:08:1c:de:21:23:53:
4e:9e:2d:79:cd:5e:94:e3:72:29:24:82:81:e0:4c:
c8:e0:28:de:c2:00:b3:0b:7e:f1:7f:4d:21:4d:44:
5a:ac:b6:b7:97:81:97:3e:5d:b5:da:13:7d:e5:91:
be:1f:59:3c:05:d1:de:9d:eb:d6:e8:3b:fd:25:32:
bb:ad:f3:16:08:ff:b1:95:a5:05:14:fd:12:da:22:
65:6a:ff:ac:00:30:97:b5:78:7d:58:46:c3:99:4c:
0f:19:3b:ec:27:8f:4a:35:41:26:6e:3c:ee:a5:83:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:27:44:79:72:A7:92:DD:DB:9E:09:65:B8:3A:E7:F4:3E:8D:2E:26
X509v3 Authority Key Identifier:
keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d9:f8:ce:29:bb:a6:8d:0e:36:b7:aa:22:5a:44:32:93:6d:
e5:1f:57:3a:57:b8:29:95:48:22:d1:7f:78:2f:3d:07:c3:e8:
3a:b1:41:64:a1:1e:1d:e8:f8:e7:15:2a:96:87:67:85:c5:7c:
1e:9a:d7:49:c1:0e:43:b6:de:c7:1c:e0:cb:ee:a5:3a:75:7c:
73:df:c4:ac:99:17:06:72:11:01:a5:93:e8:34:07:0c:7f:26:
f8:e8:34:fc:27:3e:ee:13:93:e1:21:ec:66:52:bd:0b:bc:6d:
7a:48:e4:e0:03:c8:9c:cd:a0:07:b3:53:c5:2c:5a:da:e5:83:
33:5a:23:de:3e:eb:94:eb:be:5d:e8:4a:1d:f0:a1:20:7d:ef:
60:72:9a:53:fd:7e:97:a4:94:4b:53:15:f0:25:51:9e:1f:ce:
80:ba:ee:b3:b4:e1:4d:cf:fb:e7:54:73:b4:3f:fa:7b:7b:93:
19:ba:e2:02:25:69:54:52:c0:80:92:8b:9f:49:d5:de:85:1b:
ab:48:36:dd:a6:50:49:86:79:b2:12:10:d8:c4:62:8d:cc:ef:
9a:17:00:56:3d:bc:24:c8:e4:15:22:7e:9f:2b:da:22:d2:d1:
3a:34:75:e3:81:aa:bf:ef:76:10:fa:e6:d7:69:78:56:3a:eb:
25:41:7b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:24:34 2025 by rpki-client