Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: V1R/faiqrceoemekSBAuF3umIB4uI7OUzOkvU5Llowk=
Subject key identifier: FC:C1:3B:ED:62:5A:85:2C:1F:7D:A2:74:0B:51:80:4D:6F:42:AA:0A
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 399484DDF20F0C083B276792D0B4425AEC85789F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 01AD
Signing time: Sat 28 Jun 2025 17:41:11 +0000
Manifest this update: Sat 28 Jun 2025 17:36:11 +0000
Manifest next update: Sun 29 Jun 2025 21:07:11 +0000
Files and hashes: 1: AS215084.asa (hash: VnCOMkKT2maWsf2f4NVt587A2kDQziKAN+YsQMVpLkI=)
2: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: vFADAchB+UExNBBdFXqaCgY06CrbXG+puptOUOJ/8Iw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:94:84:dd:f2:0f:0c:08:3b:27:67:92:d0:b4:42:5a:ec:85:78:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Jun 28 17:36:11 2025 GMT
Not After : Jun 29 21:07:11 2025 GMT
Subject: CN=FCC13BED625A852C1F7DA2740B51804D6F42AA0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:5b:51:ee:f5:c0:8e:c0:bc:04:e2:93:df:
ab:a2:c4:57:38:f7:80:c9:a4:e6:7e:54:5b:b3:6b:
28:58:de:56:58:55:fe:51:1e:0b:8d:12:31:b4:f2:
c4:c1:5e:02:63:a9:aa:2f:35:70:75:ce:e3:e3:c0:
96:fd:f2:50:88:e6:de:5d:ac:fb:aa:df:8f:57:2f:
5d:30:33:97:57:23:81:9a:1b:fa:29:6b:58:86:a5:
e0:da:76:56:e8:bf:0a:1e:09:1f:18:5e:da:d1:25:
dd:52:ef:de:9b:1a:a1:fe:e0:d4:7d:db:4d:a6:08:
26:29:9e:60:b8:de:e8:4e:61:fc:b6:75:09:ac:db:
3d:36:a0:11:3c:89:34:b4:81:aa:39:0d:5e:0b:5f:
9b:a9:72:b3:cb:da:63:25:78:59:35:19:c8:92:4e:
cc:4a:68:f1:bb:63:55:bf:b8:a9:0a:c2:6d:d9:ce:
7e:6e:95:2e:ef:cc:e6:76:be:ec:d1:02:b5:d2:ed:
3a:39:40:8c:41:8e:63:40:1f:7a:a0:d9:85:dc:0b:
65:b7:b4:69:2b:17:19:cf:0e:d7:47:f8:71:c0:c2:
c5:6b:d5:87:b5:b2:87:b5:63:53:3b:e7:1c:a7:d6:
db:b0:11:dd:1c:75:6c:e6:89:1b:d6:ec:41:a3:d5:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C1:3B:ED:62:5A:85:2C:1F:7D:A2:74:0B:51:80:4D:6F:42:AA:0A
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fe:17:f2:54:4c:bd:5f:ea:27:26:45:5e:ed:c8:90:fc:66:
b3:7c:46:97:07:16:2a:f0:42:5f:84:b3:5c:e6:4c:77:2d:c8:
4b:05:84:eb:dd:f6:d1:a3:7e:54:12:f7:8f:91:7b:ed:5b:4e:
e9:36:aa:61:e9:97:ff:cd:1e:84:a3:31:f9:16:c1:1a:6b:3a:
d9:df:21:7e:c0:73:2b:3c:ca:f2:1b:18:70:c2:56:75:a7:f1:
77:db:19:62:14:65:0a:2c:68:b4:c8:d7:b3:c2:d9:48:df:0e:
69:19:a8:98:93:e3:4f:0b:3a:c3:87:e8:fe:88:27:c6:33:14:
76:a0:2a:3c:e2:7e:2e:f0:7c:a7:e5:bc:b9:5a:d4:48:ef:8d:
91:5d:3e:ea:3e:23:27:2d:7e:24:e5:a8:d8:80:55:9b:01:40:
41:c6:1f:5c:d3:3d:c5:6c:33:3b:b4:6c:dd:e1:4c:22:92:fc:
54:d5:16:ed:e3:5b:b6:44:b8:6d:0e:ff:1c:0d:61:06:c2:53:
e9:c3:d9:d0:f5:64:17:d7:dc:87:80:01:d2:da:06:8a:ca:18:
a1:b8:80:a9:37:3f:ff:b2:52:31:bd:47:8a:ba:d5:dd:f4:a5:
d1:6b:67:61:3f:5e:8a:f8:76:10:11:38:b1:e5:47:8b:38:ce:
b5:bd:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:17 2025 by rpki-client