Manifest
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File: 0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier: OdiqQXsig+6fKpiZHjz8Oir4xTcEL2P2ettf4WM6hz0=
Subject key identifier: 29:64:40:2E:6E:CA:15:A0:28:55:28:CB:35:53:FF:88:07:99:5A:1E
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer: /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial: 63683B95C09EDA7568840ABF309A023EC069C829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number: 0601
Signing time: Sat 23 Aug 2025 01:53:54 +0000
Manifest this update: Sat 23 Aug 2025 01:48:54 +0000
Manifest next update: Sun 24 Aug 2025 14:43:54 +0000
Files and hashes: 1: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: fNzoS+cu808MEDnhqUXQlrUYsiy8dJ8LWSrcugZJprc=)
2: AS52025.asa (hash: tRwDhB2fCfi4WlE9h/+KAiXulT1s7p6mz7bJ4qX4gD4=)
Validation: OK
Signature path: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:68:3b:95:c0:9e:da:75:68:84:0a:bf:30:9a:02:3e:c0:69:c8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
Validity
Not Before: Aug 23 01:48:54 2025 GMT
Not After : Aug 24 14:43:54 2025 GMT
Subject: CN=2964402E6ECA15A0285528CB3553FF8807995A1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:2c:9c:3b:6a:75:67:7e:c8:bc:3b:fc:1b:
c9:29:63:4a:1c:07:ff:a7:dd:6a:2a:04:65:48:d1:
e8:02:d3:31:ab:35:22:3a:49:5f:fc:bc:57:34:7f:
82:9f:38:50:79:86:75:d0:eb:2f:a7:47:43:1b:ec:
fb:7c:f7:18:a9:55:cb:ca:fe:aa:c9:f4:09:6b:e4:
7d:4d:29:cd:3a:97:b1:0e:d1:79:c0:68:58:21:2b:
0e:ca:99:78:dc:f6:dd:63:74:12:0a:d5:4b:94:74:
10:33:a5:ef:aa:c6:fd:e1:a6:1c:3e:d9:e2:95:1f:
62:6b:54:1b:6c:52:ed:a7:99:d6:d1:2c:67:7d:8d:
2a:39:af:bc:c5:40:1e:cb:f5:24:1f:f7:23:47:d1:
fa:67:ab:2c:9b:11:b4:f5:1a:b9:43:69:d3:17:8f:
39:de:5a:fe:b6:68:4a:50:1f:9e:47:d2:0a:98:03:
46:4c:28:14:d2:e5:da:a3:b2:0c:2a:34:62:6a:68:
78:a9:b6:05:4b:ab:8b:ef:35:62:cd:49:29:4d:6c:
a8:69:43:84:ad:65:92:41:ae:a0:11:c7:22:05:64:
7e:09:3f:f3:3e:3c:94:00:e1:14:1e:11:0a:3b:ab:
34:09:8d:72:9b:46:8c:46:f5:a1:dd:80:07:e5:12:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:64:40:2E:6E:CA:15:A0:28:55:28:CB:35:53:FF:88:07:99:5A:1E
X509v3 Authority Key Identifier:
keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ce:3e:21:75:17:ba:bd:54:9c:88:56:65:c2:a3:d6:18:47:
5d:7e:0c:ea:d0:20:3e:e1:10:a1:2c:72:70:2a:21:86:2f:5b:
08:0a:17:70:26:34:53:0e:2b:74:b4:f6:a2:64:0c:be:62:d5:
e5:36:5b:11:47:bd:ae:34:fa:1b:0f:8b:e3:ba:5b:ee:a8:27:
c0:2c:f5:19:a4:6e:01:d0:58:3e:f7:d2:fe:25:ec:ef:9e:2d:
4b:2e:66:84:61:e7:15:11:6f:2d:f8:c6:99:ea:80:c2:cb:09:
d4:ba:40:6a:e2:f0:e2:95:84:d3:00:4d:71:f9:ba:90:e5:77:
4c:2d:91:15:c4:4b:d8:0d:bf:72:1c:5f:d9:b9:ff:0c:13:fd:
5a:0d:8f:6c:9a:f1:eb:b4:4f:40:1a:d8:ef:0a:5a:17:08:68:
7d:8d:6f:10:2f:6c:e3:09:57:f9:dd:52:67:37:c5:a9:f4:3f:
c8:18:c5:02:cb:88:14:44:f5:fe:a0:c5:4b:0a:f5:11:05:18:
b4:2f:ca:f6:8e:d0:20:5a:66:84:f3:6d:03:c7:8a:e9:3e:0d:
75:d7:79:c5:de:ab:25:63:2a:13:7a:7b:07:e5:1d:74:33:85:
e6:bd:5b:22:c5:cc:a6:e6:46:bf:1f:80:b3:7f:31:d9:75:a5:
59:4a:f1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:13 2025 by rpki-client