Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier: dnZ9UfZkP6aDHb0AEMUwBGlOa5M/SL8XDBVr3zpB5D8=
Subject key identifier: 48:B1:20:23:0C:70:B3:FC:85:8A:7B:11:FA:DB:32:D2:19:DE:25:9D
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer: /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial: 028B
Authority info access: rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number: 028A
Signing time: Sun 11 May 2025 03:58:45 +0000
Manifest this update: Sun 11 May 2025 03:58:44 +0000
Manifest next update: Tue 13 May 2025 03:58:44 +0000
Files and hashes: 1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: 2VcTM4YgnV9JEvrV8MW9n1xYVnYvCwcqgmF+mVsSW6U=)
2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 651 (0x28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Validity
Not Before: May 11 03:58:44 2025 GMT
Not After : May 13 03:58:44 2025 GMT
Subject: CN=68202075-c017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:e6:c5:8d:3e:0f:f4:17:86:f2:bc:0a:d6:
d6:31:e5:e8:d8:01:ea:84:5f:48:5d:0a:9c:06:e9:
0a:cc:a6:18:2a:65:34:e8:b5:94:3e:0c:e4:93:b3:
c3:5d:cc:63:73:63:25:f3:b6:98:42:63:68:85:72:
b0:31:3e:8a:a8:eb:8b:4b:e8:2e:2d:55:6a:a4:d7:
22:6d:65:dd:97:db:23:71:7b:c8:ab:96:c1:9e:a5:
65:f8:11:e1:52:b3:93:06:49:0f:6a:4f:97:77:cf:
a6:df:dc:c5:2f:d4:c5:23:57:88:7c:25:28:19:a8:
68:20:e3:e4:4a:bc:9d:6b:e0:b5:e3:53:a8:aa:7b:
b8:de:92:db:58:84:5d:43:f6:25:34:63:bc:55:ea:
cc:f1:1b:2d:8a:f2:a6:42:da:eb:73:14:e8:82:a0:
97:95:9a:4c:c4:1b:72:27:c8:e1:69:f0:33:f1:62:
22:5c:c9:82:ca:a9:ac:17:e6:fe:58:b1:e4:cd:e5:
96:5e:42:a0:cd:69:19:c2:11:e1:ab:cc:f2:d8:49:
9d:8d:61:9c:57:17:b6:70:6d:d8:39:9c:d1:d8:18:
46:21:c8:b8:e3:cf:62:1b:1c:d7:8e:4d:fd:93:cc:
2d:d6:91:b3:51:f6:fe:e8:85:fc:32:f8:dd:5b:97:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B1:20:23:0C:70:B3:FC:85:8A:7B:11:FA:DB:32:D2:19:DE:25:9D
X509v3 Authority Key Identifier:
keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:00:a0:15:8d:1d:b8:72:d2:ec:b5:04:08:04:88:63:04:23:
0d:62:47:73:7b:a7:92:76:f2:b6:8c:0a:12:02:3a:42:98:3a:
84:21:85:c6:f9:3b:79:11:47:d6:6c:06:a7:80:34:e7:97:3b:
c8:3f:77:f9:03:1b:d8:cc:0f:7b:67:e2:1f:5a:46:db:1b:ad:
fa:2e:ef:fb:10:17:6a:a9:d6:77:26:be:43:d0:18:76:54:f0:
87:7d:02:f9:73:98:51:5d:43:65:c0:d0:a8:5e:80:bd:3b:e2:
dd:e8:1f:14:6b:ce:5f:08:4f:d1:15:84:23:22:20:82:dd:81:
da:f9:18:c5:aa:87:6d:62:16:19:d5:4d:50:1b:69:e9:24:4a:
60:b7:ef:12:4a:c7:3d:11:a4:9c:66:0d:a0:67:0f:7f:c5:ac:
ef:a4:f1:e7:f8:2d:46:fa:56:80:8f:7e:98:d1:a0:1d:7c:61:
93:fa:bb:e7:bd:25:fe:ac:c0:60:98:44:8b:b6:17:88:d1:af:
f7:71:24:00:38:46:0d:dd:66:20:73:f7:92:0f:ee:0f:d2:c3:
2a:88:05:cd:c6:1c:bb:81:73:53:8c:56:f6:18:7f:3d:b7:43:
22:8c:67:09:9f:45:bb:b1:87:fa:52:29:f1:72:96:fc:21:8a:
16:56:41:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:47:57 2025 by rpki-client