Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier: yt4YEZszNrPEgwdM/JPJYmA6mgRL2LjN1NTyIgTMZ/Y=
Subject key identifier: CF:ED:82:DE:2F:8A:4C:97:45:02:81:8F:C5:F1:BB:B1:74:21:D5:26
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer: /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial: 06A6
Authority info access: rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number: 06A1
Signing time: Fri 02 May 2025 02:02:38 +0000
Manifest this update: Fri 02 May 2025 02:02:38 +0000
Manifest next update: Sun 04 May 2025 02:02:38 +0000
Files and hashes: 1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: pkBXEt/fLVuIdPG99fU3c64gb/vkBwCIE+40YHXOf58=)
2: 9EF8FBBA1BFB11EE8D767F5E4AD9E6FC.roa (hash: ic/Fv7vDPLdwq215X1uSW0oAemEyGKLMsbDQyRvHOkE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 04 May 2025 00:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Validity
Not Before: May 2 02:02:38 2025 GMT
Not After : May 4 02:02:38 2025 GMT
Subject: CN=681427be-8f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:6d:40:bc:cf:f9:25:42:4b:88:6d:46:bf:
de:70:46:67:c3:44:9e:a6:5a:7e:57:76:d9:be:3d:
03:c0:15:23:6c:00:81:3f:11:ec:31:c6:62:a2:1c:
3f:19:53:70:97:d9:52:18:68:b5:4a:18:49:1f:41:
d6:bf:45:4c:42:e4:02:54:3d:22:14:b6:43:6c:93:
93:09:50:41:ec:cc:7b:f0:af:09:a7:ca:e0:27:f2:
7b:c8:83:db:0a:37:9b:33:d9:80:9f:d7:d3:f1:c9:
52:68:f0:d8:c1:fe:09:54:3c:bc:aa:39:b9:70:29:
cf:a6:01:6a:11:d0:39:34:ab:45:5c:1b:77:92:89:
bc:81:19:ca:0a:cc:a4:57:42:3f:05:31:b0:38:63:
be:1f:aa:f6:d9:33:83:0d:71:6c:ff:fe:01:97:24:
20:b2:62:57:77:1c:25:e3:75:12:c2:e5:05:46:28:
05:c0:08:5c:ea:b0:57:59:78:52:94:66:78:2a:af:
9b:54:15:98:51:d8:8d:eb:7e:0d:c7:d3:9a:d7:98:
53:99:60:bd:e0:32:d9:9b:13:59:00:fd:4d:99:4d:
8b:59:be:9b:84:4d:cb:be:7c:f5:f9:5c:48:f0:03:
3c:da:e6:64:02:92:80:a2:f2:4f:aa:9a:20:f7:1d:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:ED:82:DE:2F:8A:4C:97:45:02:81:8F:C5:F1:BB:B1:74:21:D5:26
X509v3 Authority Key Identifier:
keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:a3:81:79:9e:50:76:a6:bd:6e:6f:5d:67:1e:68:d6:8c:e5:
9f:82:e3:f1:2e:66:65:d3:b1:df:08:c1:ce:6b:1a:51:c7:42:
15:5b:5c:20:d7:89:6f:20:c1:55:d2:96:b7:09:14:e7:01:0a:
35:14:45:3a:4f:48:1a:07:3e:3d:70:b7:3a:78:03:e5:28:54:
85:e2:2b:e5:52:51:ff:34:6a:2f:56:64:90:ce:1e:09:57:ba:
9d:22:7b:5b:7d:55:55:bd:c9:21:98:ee:40:8e:79:7a:7c:66:
d2:39:19:fb:2f:0c:a5:63:5d:8b:a8:52:22:ff:79:03:fc:2e:
17:9c:4a:7a:41:40:66:ed:f9:32:bc:6c:f7:d7:5c:92:fc:44:
a7:95:41:6b:b7:6d:6e:bc:30:9f:2d:c3:d9:d0:38:9e:4d:79:
b8:3a:1a:af:37:1e:e4:9e:1a:20:70:ba:3e:df:6d:88:39:9d:
87:3e:8c:b0:71:80:f4:5b:81:93:42:0e:28:4f:79:44:6a:54:
cb:37:40:f4:ea:46:bf:2d:05:42:1b:34:04:d8:21:5a:2d:8c:
d9:97:09:d8:36:a0:1f:4b:f5:ff:6a:37:99:01:49:99:cd:ad:
ec:6c:2f:75:00:f6:65:16:9d:df:6d:40:37:51:98:64:f9:57:
af:25:0f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:44:19 2025 by rpki-client