Manifest
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File: 0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier: XpMnaXny3lzE1Gf6qL6CaV/VTm6tilfo8uB/+wj+Etc=
Subject key identifier: E6:2F:CE:B5:71:03:AF:BF:BB:3F:02:80:EF:94:30:E8:85:59:E6:D1
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer: /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial: 68EE23358986C23AB2D9E87AE4C61F5C5179B1C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number: 064D
Signing time: Tue 14 Oct 2025 12:26:28 +0000
Manifest this update: Tue 14 Oct 2025 12:21:28 +0000
Manifest next update: Wed 15 Oct 2025 16:12:28 +0000
Files and hashes: 1: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: aQ+K7NiuXx15d6O8gGHrk/bGow0iNkjTnYVyObP9jQg=)
2: AS52025.asa (hash: x51JiPCWuWFkU5jg+o5FU0+E6jgDqMkN6x1bXwy8U10=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ee:23:35:89:86:c2:3a:b2:d9:e8:7a:e4:c6:1f:5c:51:79:b1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
Validity
Not Before: Oct 14 12:21:28 2025 GMT
Not After : Oct 15 16:12:28 2025 GMT
Subject: CN=E62FCEB57103AFBFBB3F0280EF9430E88559E6D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:11:02:34:55:b4:17:5f:30:9a:ea:1f:06:
53:ce:f6:d1:91:d6:4b:82:58:4a:c0:6e:f6:46:56:
6e:f7:8d:a8:d6:02:a3:38:23:59:b5:86:a2:e2:cd:
7f:6e:88:6e:a9:17:50:6a:2c:e0:d2:86:a3:a0:ef:
a7:3e:46:1c:9a:32:ad:30:99:a1:89:b6:ec:88:65:
37:59:0e:dd:de:e9:ef:25:43:f4:85:12:2c:2e:bb:
18:66:87:72:d5:9e:03:75:89:51:d0:f4:fb:44:52:
29:74:d6:52:fb:86:78:37:88:27:1f:31:92:d0:24:
23:31:1b:5d:dd:f5:bc:ad:10:86:c5:a1:89:b3:68:
d0:9c:74:d5:d0:d2:66:42:bf:76:15:f9:87:83:0a:
48:bb:d9:02:f4:92:67:63:44:69:cf:a9:a3:91:0c:
13:92:cf:7b:17:26:5b:30:7d:ee:dd:41:f8:60:ce:
79:cb:f5:5f:76:44:74:e0:36:f9:72:e7:3a:99:a1:
09:5d:b2:d2:e9:8f:03:f2:dc:0d:db:e1:38:a8:f1:
7b:64:24:8f:2e:59:e4:28:ba:5e:24:d5:cf:89:67:
23:78:73:61:45:5f:20:37:77:cb:09:17:15:20:e9:
28:94:56:63:32:bb:b8:ea:74:16:1f:92:93:dc:45:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2F:CE:B5:71:03:AF:BF:BB:3F:02:80:EF:94:30:E8:85:59:E6:D1
X509v3 Authority Key Identifier:
keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:32:62:2b:38:aa:69:56:e1:68:5d:2a:8b:8f:2e:fc:71:6a:
00:2c:18:d0:41:2d:0b:39:cd:54:12:63:19:b2:c7:0d:3b:1d:
da:08:b7:9c:41:f4:5b:e1:98:19:e2:c6:f1:0c:c5:e0:6f:8d:
f5:20:81:a2:e2:2d:97:72:22:56:24:35:8b:bf:62:bc:6b:9e:
72:7b:88:68:6c:3e:81:07:73:6b:d6:a5:66:e3:0f:26:94:84:
a9:e6:fb:eb:2d:25:4f:5b:8f:c6:f1:df:e7:f1:4b:31:14:da:
69:9d:c1:fa:f1:10:40:b8:15:a8:91:c6:21:c3:2f:02:44:30:
19:9f:66:0b:37:21:20:ce:57:5f:9a:1c:8f:24:91:70:bf:dd:
18:24:e2:7c:38:4a:6b:30:75:74:53:81:6d:70:7d:1a:35:eb:
9c:7e:7c:1f:7d:e2:28:a3:d2:22:90:62:08:9b:19:a3:22:7d:
e7:24:5e:bd:9a:04:4b:16:3a:20:25:8b:50:6b:c9:d6:4a:f1:
a4:ad:eb:b4:f3:dc:ef:95:f3:50:14:e4:65:d1:21:1b:8c:52:
7a:29:db:ef:b2:46:09:06:39:40:c1:6f:8d:08:46:b6:05:c9:
98:d5:d8:f8:16:8e:55:c1:08:cb:33:02:b0:40:ed:94:5e:9a:
6c:c3:28:fd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIUaO4jNYmGwjqy2eh65MYfXFF5scQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGJjZjg1M2U4MDMwNTVjODU5ZWYxMDU0NWViMWQ1ODA3
MTI0MmFjYzAeFw0yNTEwMTQxMjIxMjhaFw0yNTEwMTUxNjEyMjhaMDMxMTAvBgNV
BAMTKEU2MkZDRUI1NzEwM0FGQkZCQjNGMDI4MEVGOTQzMEU4ODU1OUU2RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ7RECNFW0F18wmuofBlPO9tGR
1kuCWErAbvZGVm73jajWAqM4I1m1hqLizX9uiG6pF1BqLODShqOg76c+RhyaMq0w
maGJtuyIZTdZDt3e6e8lQ/SFEiwuuxhmh3LVngN1iVHQ9PtEUil01lL7hng3iCcf
MZLQJCMxG13d9bytEIbFoYmzaNCcdNXQ0mZCv3YV+YeDCki72QL0kmdjRGnPqaOR
DBOSz3sXJlswfe7dQfhgznnL9V92RHTgNvly5zqZoQldstLpjwPy3A3b4Tio8Xtk
JI8uWeQoul4k1c+JZyN4c2FFXyA3d8sJFxUg6SiUVmMyu7jqdBYfkpPcRTfxAgMB
AAGjggH5MIIB9TAdBgNVHQ4EFgQU5i/OtXEDr7+7PwKA75Qw6IVZ5tEwHwYDVR0j
BBgwFoAUC8+FPoAwVchZ7xBUXrHVgHEkKswwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMC8wQkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcx
MjQyQUNDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8v
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQzgtRlBvQXdWY2haN3hC
VVhySFZnSEVrS3N3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJz
eW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3MvMC8w
QkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcxMjQyQUNDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjTJiKziqaVbhaF0qi48u/HFqACwY0EEtCznNVBJjGbLHDTsd2gi3nEH0W+GY
GeLG8QzF4G+N9SCBouItl3IiViQ1i79ivGuecnuIaGw+gQdza9alZuMPJpSEqeb7
6y0lT1uPxvHf5/FLMRTaaZ3B+vEQQLgVqJHGIcMvAkQwGZ9mCzchIM5XX5ocjySR
cL/dGCTifDhKazB1dFOBbXB9GjXrnH58H33iKKPSIpBiCJsZoyJ95yRevZoESxY6
ICWLUGvJ1krxpK3rtPPc75XzUBTkZdEhG4xSeinb77JGCQY5QMFvjQhGtgXJmNXY
+BaOVcEIyzMCsEDtlF6abMMo/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:44 2025 by rpki-client