Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
File: NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft (raw, json)
Hash identifier: QpVnNXfo+5/LEODJd9WrlEmri0QDGptUr+75JA9mZWg=
Subject key identifier: 74:E1:48:0E:FB:71:F9:AF:03:79:89:9D:09:18:BE:CF:FA:5C:6C:DC
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Certificate issuer: /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial: 06D5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
Manifest number: 06D2
Signing time: Tue 17 Jun 2025 02:01:56 +0000
Manifest this update: Tue 17 Jun 2025 02:01:56 +0000
Manifest next update: Thu 19 Jun 2025 02:01:56 +0000
Files and hashes: 1: NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl (hash: X+eA/GaloeG6mv48LsY9YonyEC8bbFWbVrw9z7gu5Pc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1749 (0x6d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6DD4AF, serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Validity
Not Before: Jun 17 02:01:56 2025 GMT
Not After : Jun 19 02:01:56 2025 GMT
Subject: CN=6850cc94-5a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:e5:eb:18:59:2b:37:74:be:4d:61:86:24:
fe:8b:c5:8a:1c:46:ee:8c:cf:23:e8:d6:70:cf:8f:
eb:d8:cb:9e:fd:b5:bd:12:65:ce:a0:f6:06:8f:15:
48:4e:e3:a0:83:3a:8d:ec:c2:4c:4f:5b:13:74:05:
66:d7:42:0e:60:f2:c5:80:50:d7:77:50:58:41:7f:
06:0a:5d:42:6d:ea:98:9d:a7:96:6f:ea:c8:99:99:
66:1a:35:6d:d5:97:9c:b7:c0:e3:8f:bd:e4:9f:f4:
ba:4e:ac:ae:cd:43:14:92:1d:62:ae:90:50:3f:c7:
ff:82:ba:b1:97:dd:ee:3e:97:05:af:76:25:45:8f:
1f:8a:cd:12:ea:09:fa:87:75:b4:60:03:b2:e5:d7:
df:15:8f:fc:1f:3c:55:f4:67:51:1a:63:60:19:50:
dd:cc:07:5c:c9:b9:99:7a:58:10:8e:e5:a0:03:b3:
7e:76:f2:63:77:e4:2a:5f:cf:a1:b7:cc:85:9b:56:
bc:a2:0d:d0:9a:0a:5f:ba:b6:f7:73:87:fc:bf:65:
b5:d7:b3:8e:87:77:55:89:e8:be:55:e8:2f:d5:ab:
8a:24:9d:8e:2b:d0:f4:ce:bb:06:f4:98:43:60:bf:
47:37:82:ce:1d:d5:3e:a7:1b:f3:c4:d2:57:d3:31:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:48:0E:FB:71:F9:AF:03:79:89:9D:09:18:BE:CF:FA:5C:6C:DC
X509v3 Authority Key Identifier:
keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:bb:df:c5:e1:b9:e7:7b:39:44:59:0a:d8:7c:28:b5:cf:77:
3d:c2:67:9f:ef:ff:fe:bd:43:1a:99:7a:8e:8d:37:18:3a:7c:
9e:6b:56:9d:95:de:33:aa:b4:53:d3:47:df:ec:8b:85:d0:e1:
ae:ff:d7:56:4d:b6:e7:35:46:75:bf:ec:c0:bb:0b:58:fa:87:
bd:a1:87:56:73:5a:dc:58:49:35:a3:d7:28:42:cf:d7:b3:91:
22:ba:aa:bb:46:5d:be:3f:a7:7d:cd:89:d6:0b:52:29:81:57:
0e:53:58:a8:76:c3:5f:f4:4d:e7:4a:5b:c2:45:cc:15:55:28:
d0:64:7e:86:87:40:0d:56:36:b2:25:28:e7:95:4b:0c:df:6f:
5e:e6:e6:75:38:0f:64:55:86:57:50:e5:db:17:b9:7a:0b:eb:
6d:62:a1:2c:c2:b5:92:55:7c:60:80:d4:dd:3f:53:d5:00:2b:
d2:d0:e1:ee:6f:db:48:58:fb:95:6a:87:e8:db:a7:60:cb:40:
47:f3:5c:f3:d2:65:71:65:14:ca:06:c3:7b:84:cf:17:be:87:
2b:83:69:fb:61:dd:f3:09:bd:1d:35:06:e5:46:48:b2:75:df:
8f:7b:2a:02:74:d7:9d:5e:68:7c:1a:4a:c6:6f:14:9a:b6:db:
25:3c:57:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:29:43 2025 by rpki-client