Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File: KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier: waqa7hJ4Nq6pumPj8gZrwbgvSisLkBRzYL2vxZILedI=
Subject key identifier: 82:5E:B1:A1:89:7C:D4:70:AD:6A:D3:E5:C3:C9:B3:05:F9:77:59:B8
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer: /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial: 0D1A
Authority info access: rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number: 0D1A
Signing time: Sat 17 May 2025 01:02:14 +0000
Manifest this update: Sat 17 May 2025 01:02:13 +0000
Manifest next update: Mon 19 May 2025 01:02:13 +0000
Files and hashes: 1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: TSSRgWP1bzTwH8Rkm41SDmUDIgwc7Wrp6zH5E46qsYk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 19 May 2025 00:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3354 (0xd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Validity
Not Before: May 17 01:02:13 2025 GMT
Not After : May 19 01:02:13 2025 GMT
Subject: CN=6827e016-d150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:76:ce:39:6a:35:67:86:34:d2:47:cc:ef:
4b:a0:d5:d6:ef:bd:d4:91:1f:2c:27:eb:e7:2a:c5:
69:43:24:c6:d1:97:bf:dc:fa:cd:77:67:7e:8c:f0:
09:23:c2:f7:4b:f3:60:98:f5:f6:9e:8d:d3:df:4e:
df:31:40:48:a1:92:a7:df:ee:fa:51:e4:e6:83:7d:
aa:6a:a1:83:7d:93:69:7e:b8:80:c9:97:d1:58:1b:
09:e6:57:f4:4e:ca:00:d6:6d:b6:40:82:7a:bc:af:
19:30:32:fb:f1:82:1f:ed:11:27:1e:2e:7a:55:e4:
c5:2b:88:b5:29:96:35:fd:08:9a:49:ea:96:90:8f:
5f:5b:a2:6f:b7:9a:c3:3b:80:a5:07:b8:44:11:28:
75:ee:0c:3a:58:4a:ca:4e:a8:10:34:a3:1f:cd:61:
e4:8c:34:32:d1:fe:01:94:8e:3e:18:76:0c:b8:ba:
8f:2e:cf:23:53:e7:67:6d:57:1e:d3:af:df:37:57:
e4:18:69:b5:55:e0:f0:19:65:ce:a6:3a:62:1f:68:
82:d1:4a:03:08:19:6d:50:fa:eb:68:a8:24:a1:4a:
f0:fe:a7:da:99:78:e8:41:59:83:7e:5e:c0:3f:64:
ce:71:7d:3c:37:9b:3b:02:57:a5:dc:72:0b:78:6d:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5E:B1:A1:89:7C:D4:70:AD:6A:D3:E5:C3:C9:B3:05:F9:77:59:B8
X509v3 Authority Key Identifier:
keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:25:5a:b4:9a:10:02:db:23:38:2d:12:ec:85:7b:51:07:0c:
4c:ac:9c:c3:56:a1:b4:b4:80:7a:a8:f9:49:a5:fe:00:63:f9:
77:0f:00:4b:f4:8b:a6:89:21:34:2c:75:d4:2e:25:aa:c3:1a:
74:5f:70:03:9d:cf:e3:e3:d4:5e:60:8c:ec:6a:7d:c9:63:99:
3b:9c:a2:c8:7c:ba:ce:07:f2:19:1b:40:9d:b0:b4:57:e3:87:
9f:5e:12:9e:80:c0:c5:3d:c1:04:90:c6:d6:35:4d:3d:be:3c:
f3:2e:d0:ed:15:2e:87:d1:93:d3:48:8a:51:98:10:6f:81:45:
78:83:17:c1:99:9d:e7:9c:3b:5b:5e:95:0c:84:7a:10:bf:6b:
de:f8:ff:bb:20:d5:68:a6:b5:4e:4b:59:9c:2b:cd:d5:12:13:
f5:bb:fa:a5:bb:2e:dc:78:d7:d5:38:a6:3c:3d:62:d3:c6:a5:
bb:ab:ae:0e:d3:b9:1e:ae:b7:a6:11:6c:6c:a9:54:2f:8a:65:
75:0b:e2:af:05:8a:9a:a8:48:64:76:b0:27:62:5d:f5:0c:af:
dd:98:df:08:7f:f9:76:84:2f:24:37:9c:ae:5d:49:22:06:c8:
58:dd:d6:41:a7:4a:3e:6d:60:5a:f3:61:b7:70:42:cf:0d:e9:
b1:ec:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:51:31 2025 by rpki-client