Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier: +c/BPwnxep3tH3jMYqzJJOVPtOFsWmAbF64hB1CMv80=
Subject key identifier: 5D:6E:5E:E4:F0:74:94:1A:FC:CB:79:25:2D:A6:AB:F0:FC:E2:2E:4B
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer: /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial: 02C1
Authority info access: rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number: 02C0
Signing time: Thu 03 Jul 2025 03:58:53 +0000
Manifest this update: Thu 03 Jul 2025 03:58:52 +0000
Manifest next update: Sat 05 Jul 2025 03:58:52 +0000
Files and hashes: 1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: x9Fux/KQkG2Ysa9uukq7PygHqUuHBEo8PKgSMHER86s=)
2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Validity
Not Before: Jul 3 03:58:52 2025 GMT
Not After : Jul 5 03:58:52 2025 GMT
Subject: CN=6865fffd-500b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:f7:89:8f:df:4b:d6:23:f7:89:f3:ec:ff:
9e:40:49:d1:e8:48:60:46:f5:c7:bd:2e:c6:63:39:
bf:17:bc:ff:f6:69:8a:e3:c1:af:a7:b9:4e:95:61:
d7:76:b8:d7:66:3e:7a:50:ba:f5:ee:51:2d:4a:f0:
71:6e:4f:ba:0f:4d:a0:93:a0:37:6c:f6:07:f7:f8:
67:11:ce:ec:59:27:26:fa:83:d7:ca:52:f6:56:1a:
41:42:6b:07:8b:ce:41:9d:f8:1a:3a:61:a5:45:53:
a7:9e:86:49:ac:9c:78:36:f4:62:95:9c:9e:86:01:
45:ef:a8:d1:74:ba:24:18:89:90:f5:9d:b1:49:20:
02:6c:39:96:bb:f1:b1:4c:51:9f:e7:11:94:6c:60:
da:0c:b4:2c:53:ac:96:40:34:64:14:1c:d1:a8:aa:
a5:6e:52:51:3f:37:b3:11:5a:7d:9c:35:98:14:8c:
bb:1a:41:e7:cd:8c:99:df:f9:00:c5:d9:60:f1:48:
f1:6c:91:db:4f:91:20:16:12:de:b4:a1:e3:86:21:
19:5b:99:99:f3:19:6f:69:16:8e:36:75:30:02:43:
77:68:e8:b6:b6:49:1a:72:8a:27:a2:e6:4b:46:39:
6c:fb:25:b5:79:af:73:28:78:e9:01:6f:fd:2c:15:
b3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6E:5E:E4:F0:74:94:1A:FC:CB:79:25:2D:A6:AB:F0:FC:E2:2E:4B
X509v3 Authority Key Identifier:
keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:20:93:d0:16:d1:1f:46:a2:f4:a2:3f:00:e8:ef:05:3d:75:
9a:b4:e5:ca:e8:b8:40:d2:9b:28:52:d3:5f:a6:59:ce:88:72:
03:d3:26:19:7a:e8:b9:ff:7b:74:9d:3f:58:69:4e:dc:49:72:
89:98:1d:4e:a8:9a:3b:bc:df:09:fe:09:21:71:51:dd:95:f9:
75:9b:1b:21:d5:b1:7f:cc:61:60:bd:ad:1d:c6:b5:5b:1a:80:
c1:ef:2d:18:fd:65:d0:01:7d:18:32:01:0f:50:ad:cb:24:4e:
86:ed:53:fd:19:7c:2b:ad:06:d3:bf:92:a1:57:90:52:d0:2c:
56:16:11:78:f8:eb:86:a9:ca:b2:34:e5:96:8c:4d:0a:a5:bf:
03:3c:56:82:9e:90:ad:05:82:f3:8d:8c:a3:1c:9c:23:5d:10:
f7:e6:4b:03:24:1e:df:83:44:73:5f:22:b3:a4:19:72:3d:6f:
7b:c0:41:c7:ff:16:d1:00:c0:67:68:fc:c9:4c:cc:4d:a9:aa:
46:66:36:73:86:b8:c0:ea:7d:6c:04:3c:38:b4:c3:20:fc:50:
e3:7d:f6:0c:91:a6:f8:4f:ac:1e:b8:62:b6:a6:3d:7c:76:b2:
15:43:b5:25:58:a7:3c:1e:30:fc:fd:8e:84:44:24:a4:44:70:
c9:05:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 19:50:04 2025 by rpki-client