
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
File: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft (raw, json)
Hash identifier: V6CMXHKDh+kw2nczg1UnW7tgWaKPfygDZ5ZH8jHIVgI=
Subject key identifier: E0:59:B6:C2:0E:8B:25:EE:BA:33:37:CF:CB:03:35:24:5A:A3:C3:7C
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 107A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
Manifest number: 0FD1
Signing time: Wed 05 Nov 2025 00:45:33 +0000
Manifest this update: Wed 05 Nov 2025 00:45:30 +0000
Manifest next update: Fri 07 Nov 2025 00:45:30 +0000
Files and hashes: 1: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl (hash: dCgQzqSuBC1qk0UpJgW4G+Wc6CtClMZkE7s5C6KFWnQ=)
2: KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer (hash: 7QtdnaQza7N4jDnPovc1w8gF48Ij+qmzZLDIkyC63O8=)
3: n10GlKN56yP6tAip1LvVCOGqOSI.cer (hash: 4EvvdvWNdGnaHC0ksGa9n34SIrtveRqx7aUjfJ5vgAM=)
4: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (hash: bBV5obWB28b3fjtHXuMC6GE0zb3F2jnXWysfemiYklw=)
5: ZbPoGBw9qNHWQehKRcjvgjndfqc.cer (hash: CC3hg+mcFc4UQvWif2Z6cGSaFUXRvXNRNJBbDnIHepk=)
6: sOuFTcDYmjIzySVR0W0U1DjPVR8.cer (hash: DpTRWhjCxqJPv0tA3HKAJTvp2o1a7CI8HDBrqVfTOTg=)
7: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer (hash: dslyP+wRPUnioCJrBU2EarUy9Gis6BBRiNzD4Ok9qtg=)
8: OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer (hash: rOTGOTt3lhWZ9SfTS235YkHvYjCeNdAkZtvftw0cvF4=)
9: 6vTkF_QNHJDUbdlViOspDev7ius.cer (hash: JYh5Iqrt4qoHSp6swIesPEtVVSEDDysMp71dOKb2ow0=)
10: 8GzMRNUs-b4RXOx6TaaxMJukOaU.cer (hash: AhHBgKR9j/6MxZii8GMzEcZ3icKR5vSn1U96Lut42oI=)
11: nYezEXqhvXgot91GTXMHa66NzJY.cer (hash: BA4R/qMEmq9shG2AzCjk53F+kykngTuQNTlYjUKEEzc=)
12: qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (hash: jkPeHZLkph4AzMqn8n5gUr6W70YNpBkeTAvz2j8/sTw=)
13: D1pm1nbRb8eSfE4kaUoejHekQGs.cer (hash: NTfudnRepXxK1NGJ1lOWpfBClqBr1/uPZzAhn8ECkk0=)
14: SGm5dfSdmA_lFc7dSaDEDruBrKI.cer (hash: SWyEW0ny7DVt22fVGXyUitLE2JKk91dpiv1RN6IWJYM=)
15: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer (hash: SKc016m8ZfBvJifk221ftKMQnw2b9DH1+uoR0q7sCrI=)
16: pyKwoONloK3D2e6zzL_MBi2Q76k.cer (hash: km5ZQRKr6MuRSMSkLPjEu48TVmAJxaKADCUvLLLg5pE=)
17: gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer (hash: 2ldNgrPGbqk7UmMFXzOFMiDHVNv+SnifaFsIo1ljShU=)
18: YiXGU2dIRI8cYBvpr6uCfJptjJg.cer (hash: x30oGqbSvDOgtg8EVHsWv0U6J+s6R5CmW9IqDdDHFik=)
19: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer (hash: 9hpPYklOD3XG/G8S7pdKH5CWcV6yfvG+mmcFzdbdANU=)
20: lyz9rusSb2_NRpalkPcBiDeqX_I.cer (hash: bxdyY+YC5sMpCqFa4CchM4qwJZ4/UDW29OSQHF8vXKg=)
21: 8ZI823Vz-wlzku4GArwdsbV78OM.cer (hash: uCddsWdTHuhu5zutaMvClmXkP3yNhSdEe0lg+ZnGJf8=)
22: BinJnUdgwom4TNvs8bbBPPUl6q8.cer (hash: qzqa/EWjKYt10shJo6iqZfyO12/WeiCNb221+cMBDl4=)
23: btXWd58RVP-e4YoO_T3bdQZOoeU.cer (hash: A7NGQB9Y2tDK0hdHpY14+eWiYUNSilHI6Cst0V4PN8g=)
24: 5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer (hash: ogkdWMCSCp8TH1UsMGksxpT3c3fYVMvy5zn9Uq5GspE=)
25: W8VPKEgipxexrUw3z2nQls5_Z3M.cer (hash: s9iHUxqoqEycr0EEXtUBqyzDYCl+yqrLelwsJZWIgl0=)
26: 1F-q3w0PsrIYxNl-HvQbwMkznC8.cer (hash: pEQr+A60oSWY/kcRrRbGG0Tp9jeeN4neU7ayipYIlpw=)
27: MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer (hash: NmhijwgaaRi7wfyDtBhDaDrHkolrhLeYVUkjNd6EoNc=)
28: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (hash: QY1uIbSDSrt6JZK4BqOanR6OMpSYU61g21V6Nk95CXY=)
29: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer (hash: Vx8lkbe2NR9bjeDT7O6AuwX/6SOJPkcaQrSLwwrYULA=)
30: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (hash: 2LL1qyXgeBRiJonvJRKLq/Q4yexHpVqtjOIDk4QZo6E=)
31: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (hash: rS2pcd7r7ooWVJNNDn+2116kQ37UYpf+i3iwIY8mG5c=)
32: VCiBspPW4uKh8hlSyLwDISbuu8k.cer (hash: TNkTO/pixFRRXLoSIPl4IxLnS9nF1IoL86pR0YdCzQg=)
33: ShihNoN8fkklQFrLpOOnPS4t9d4.cer (hash: TD/rChZMStyBeKdEGSrDGDlahtRc7JCEAFzA6+l3cRM=)
34: bynJvMAklSDlBwZp-vZmUm98jzA.cer (hash: ikkS/ZM+jg2Wfqd8pmrhX/sC4BJhR/M0ONoBX5eZ3qM=)
35: 8qncFw2PMqBEwa8QUgRdbU4kIus.cer (hash: zDmK+MKgRiaziwVTgCusHGz8cinKCsIwDgBaRFvdSU0=)
36: i-GoLMm4kURYOcv-vplg8wM9pUI.cer (hash: a7LKY45MlLtsNts6PbOTMOHUPfe/UslJzJzAyod75Hc=)
37: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer (hash: 1bY/LWpjUEz4TNJbFG0XryMvHG3oC1g3zrRLJvSnwXM=)
38: mwftdzFoum4LC-Pl3LLPeB96yCo.cer (hash: wqMcExsMYRVHd4ij2jyGrBfJAXDPQ5Idh6TDGeKZLXY=)
39: 48LJS_VpO0HwWh1WV9GnhLXVcmE.cer (hash: n1VD08oUn/IQqNfjAeJRzt/NrlyG0pwtoNy2cGABQKg=)
40: qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer (hash: geB1ekaUnJR16eMRyFdk0rOgBzNirsc2PboPTc3PEPk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4218 (0x107a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Nov 5 00:45:30 2025 GMT
Not After : Nov 7 00:45:30 2025 GMT
Subject: CN=690a9e2a-285f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:7d:7d:68:16:12:4f:47:36:5b:49:1b:cc:
91:d8:b7:4b:16:fc:85:84:8a:9d:9c:78:a9:71:f1:
b4:5f:fc:cb:b9:c8:a6:45:53:46:28:07:5c:6e:32:
b0:fa:7e:b2:83:9d:21:69:5f:3f:bd:5a:32:d4:d6:
b7:9a:a9:72:0b:ac:c4:26:38:6c:4c:9c:5f:8e:a9:
56:db:c6:60:f1:1e:94:7e:3c:9a:de:f1:0a:6e:9d:
64:cd:eb:fb:28:c2:56:06:75:ec:a3:38:a5:3e:71:
ac:39:56:58:c2:22:1c:74:51:e8:f8:11:93:7f:cd:
64:db:16:69:44:d6:5c:41:b0:ce:7b:5b:16:c0:bb:
cc:32:4f:c7:fa:90:3f:e0:76:16:80:b1:fc:ce:e2:
92:be:32:8e:e2:74:e4:8b:c6:b0:cc:b6:ed:2f:85:
e2:1d:ad:a0:e6:b4:d6:e7:62:75:2c:b6:09:15:d8:
64:56:eb:ad:bf:d5:53:c2:96:ea:92:80:d7:49:36:
f9:8f:71:6b:3c:e5:0b:d0:82:38:f8:6e:46:63:82:
cd:63:ff:b0:5d:d3:a0:5f:a7:15:06:a9:7c:0d:6a:
b0:b8:6b:e3:55:a7:4f:1b:1d:c5:03:4e:67:15:6e:
dc:02:4c:2f:ad:6f:31:34:1e:d8:6a:46:7a:99:b6:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:59:B6:C2:0E:8B:25:EE:BA:33:37:CF:CB:03:35:24:5A:A3:C3:7C
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:4b:c4:31:dc:e0:06:4d:87:c6:02:1d:67:5e:f4:63:7a:a1:
50:71:cf:e3:e2:bb:5b:f4:52:2e:4b:eb:88:5a:d1:30:b4:a5:
49:b4:2c:26:86:1c:dd:41:32:e9:86:58:b4:17:ca:0b:d5:bf:
79:ff:30:43:19:50:3f:18:72:c1:54:97:f9:cd:b3:ce:7d:c0:
57:d8:e1:c4:b1:e0:33:4a:76:c1:85:1e:50:c6:f6:7a:6e:bc:
b7:6e:ff:e3:09:34:63:3d:cd:16:39:71:0b:bd:1e:3d:ea:1f:
95:3d:ae:58:9a:b7:f3:cf:22:5a:35:9e:74:df:ce:8b:60:43:
bb:c0:26:a7:2e:1d:26:8a:9a:ba:fc:67:cf:b5:45:d0:2c:dd:
39:17:31:c7:3a:58:31:fc:56:c8:54:61:19:aa:df:47:ec:46:
f0:b5:5f:26:53:c8:22:d5:21:0d:ce:74:76:d2:97:cf:9a:3e:
c4:4b:4b:37:51:03:06:c3:20:ab:c4:d6:90:39:30:0b:30:98:
70:ed:ce:89:25:e9:9e:32:de:d3:3f:65:3b:85:60:2d:e9:e4:
a2:f6:25:c1:d9:96:34:40:35:41:92:2a:e2:ec:d2:e9:dd:fd:
67:d8:bb:64:b5:46:2c:d9:2e:2f:4c:01:1c:fb:ee:5d:d2:c4:
c7:31:b2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:51:29 2025 by rpki-client