Manifest
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File: 0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier: cKUCeRtCHJGMVNr2AUHJ4rN3bG2TE3xXuP+fwIzCBUE=
Subject key identifier: AC:74:DA:76:D7:26:D8:3B:C0:33:D2:A3:3D:3B:B9:3B:58:26:9C:FF
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer: /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial: 3ED4EE897C758772EBD36E9F693505AD3D4D5A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number: 0715
Signing time: Wed 25 Mar 2026 18:00:02 +0000
Manifest this update: Wed 25 Mar 2026 17:55:02 +0000
Manifest next update: Thu 26 Mar 2026 19:04:02 +0000
Files and hashes: 1: AS52025.asa (hash: 0cART3UxOz/6aHpexCfelOtyRnZcgQSotGkDfXzMbRc=)
2: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: keBwazy/iAd3Y2cTxeu56+kKIBBQLxg1Rnlcl3l4dS0=)
Validation: OK
Signature path: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d4:ee:89:7c:75:87:72:eb:d3:6e:9f:69:35:05:ad:3d:4d:5a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
Validity
Not Before: Mar 25 17:55:02 2026 GMT
Not After : Mar 26 19:04:02 2026 GMT
Subject: CN=AC74DA76D726D83BC033D2A33D3BB93B58269CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:ed:13:d3:de:d4:70:70:18:04:99:1a:a1:
09:48:27:cf:97:95:83:ed:dd:94:30:3a:32:ce:af:
d5:28:06:6e:cc:0b:93:d0:9d:8e:c9:75:39:15:b5:
43:57:8e:24:f8:fb:52:8c:4a:c2:1b:9a:23:49:8c:
99:46:a7:1d:47:f5:67:20:2e:3d:b5:a5:4f:0c:36:
eb:57:15:48:16:94:fb:ff:de:2d:b3:d8:f2:56:f0:
7c:42:1e:73:9e:69:a2:cb:cb:5e:26:b2:bc:fc:4a:
df:79:7e:47:7d:93:01:f0:6d:3a:ec:06:58:99:a9:
ec:8d:21:bd:60:e7:71:e0:ba:d4:98:b9:c3:ed:66:
d2:0d:ba:30:be:30:f4:c4:2e:82:7e:68:e3:8f:89:
40:03:45:71:5c:fe:35:0a:67:24:51:06:70:35:b4:
e1:aa:33:ac:ff:d8:74:0d:1c:b1:97:ee:f3:4e:d7:
c7:e8:97:f7:7e:84:f4:47:7c:f7:db:b1:e1:12:65:
b5:16:b2:6c:07:1c:12:6e:18:86:ae:56:f3:fe:ff:
45:6c:71:8e:1e:88:fd:27:f0:aa:81:2c:07:f0:f0:
9a:16:26:6f:cd:02:67:f0:75:a7:15:de:b5:af:a1:
b0:37:98:77:1e:1d:61:2c:62:40:43:f6:a5:5a:ce:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:74:DA:76:D7:26:D8:3B:C0:33:D2:A3:3D:3B:B9:3B:58:26:9C:FF
X509v3 Authority Key Identifier:
keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:14:c3:3f:46:f1:41:77:25:17:5c:11:6f:97:94:02:18:41:
df:0b:93:aa:1f:c0:67:6d:da:64:18:ab:85:02:d7:24:19:e3:
5f:03:af:39:ea:ac:a1:08:a6:28:25:3d:89:f1:2c:b8:62:66:
a4:ee:02:19:97:3c:69:46:05:06:b9:e2:40:3c:5f:f5:89:a5:
55:23:21:68:b7:a0:1e:71:1a:b6:d1:db:79:78:9e:e5:fd:02:
3b:09:67:d7:44:ae:f1:42:46:b1:4e:23:cb:8e:e6:96:f2:81:
77:97:fb:a1:0f:54:38:d6:22:c2:4c:f9:d1:b9:b4:00:c4:92:
3e:6d:f5:c2:12:d0:cc:7a:fe:38:fe:bc:ce:67:e7:f5:2f:ef:
86:e0:27:5f:d2:7b:f8:08:0b:58:20:89:cc:dc:0d:b0:e0:ab:
b7:83:a9:a0:1b:9e:1c:df:83:5a:26:6e:7c:82:69:0a:45:8f:
49:b5:2e:42:c0:4d:02:1e:35:79:09:45:32:dc:a2:2a:ca:cc:
93:8d:35:4e:47:c8:a2:07:7a:5a:9f:95:3a:b6:34:9c:c6:71:
bf:83:13:d5:6d:f8:b4:33:e9:5b:98:8a:b9:9f:de:7e:62:0f:
f2:57:fb:03:00:24:38:bf:9e:80:56:cc:7a:54:12:d0:1f:70:
d9:ee:76:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:59 2026 by rpki-client