Manifest
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File: 0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier: dADqVUhM7apKD1F6vHFgaGKBaVQKdZ4XkZgAbKbIV8k=
Subject key identifier: C3:89:40:BA:51:C8:0B:CA:C5:BC:BE:5D:6D:C7:32:2C:D5:6D:B8:17
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer: /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial: 1033A1EFF6E6761FA608855D5DB515D9854310B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number: 0668
Signing time: Tue 04 Nov 2025 08:44:44 +0000
Manifest this update: Tue 04 Nov 2025 08:39:43 +0000
Manifest next update: Wed 05 Nov 2025 09:40:43 +0000
Files and hashes: 1: AS52025.asa (hash: x51JiPCWuWFkU5jg+o5FU0+E6jgDqMkN6x1bXwy8U10=)
2: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: bRgZ1Tx+3g83q4oQ6VH5Qa5yBHXmHODfyEm1AkUd8x0=)
Validation: OK
Signature path: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:33:a1:ef:f6:e6:76:1f:a6:08:85:5d:5d:b5:15:d9:85:43:10:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
Validity
Not Before: Nov 4 08:39:43 2025 GMT
Not After : Nov 5 09:40:43 2025 GMT
Subject: CN=C38940BA51C80BCAC5BCBE5D6DC7322CD56DB817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:51:1e:bf:9d:a6:1e:66:c1:58:0a:04:53:
ac:6b:64:fe:7e:e3:de:4f:87:f2:85:d8:f8:f3:de:
62:e3:b1:d6:c2:d6:48:34:8f:fb:3f:58:d9:b3:f1:
55:df:be:49:4a:7f:0b:3b:57:2f:23:3a:e9:7e:49:
99:8d:15:f2:00:ee:22:dd:33:70:3e:02:d8:ed:1c:
01:a5:a3:0e:b3:06:62:04:60:fa:bc:f0:b1:f9:3f:
a1:10:c0:e8:de:8d:2e:be:df:51:f6:a9:34:78:c6:
d6:cf:36:47:8c:f6:40:9f:16:bf:09:46:bd:69:f4:
64:5f:2e:4f:13:b5:75:91:7c:d0:64:10:0c:58:cc:
c6:8e:a6:be:5d:24:3f:88:c4:b2:60:51:c0:a6:d0:
8b:dd:d8:41:53:dd:5a:11:90:a1:99:ae:9e:4f:c2:
f8:05:e5:d4:b7:93:d4:88:99:cd:08:a1:47:61:62:
5a:4f:39:03:92:04:3a:b1:81:0d:ca:1f:4f:c9:30:
e7:18:50:f4:f2:84:70:70:aa:18:00:26:10:2b:09:
07:37:ab:07:4a:9f:f4:91:e6:65:1d:16:65:db:e7:
f8:13:c6:85:30:e0:ff:3d:59:e3:80:da:cc:dd:20:
2e:5b:7d:7f:ae:27:0c:ee:84:46:3b:df:f7:d1:14:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:89:40:BA:51:C8:0B:CA:C5:BC:BE:5D:6D:C7:32:2C:D5:6D:B8:17
X509v3 Authority Key Identifier:
keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:93:d7:e8:41:98:b2:8a:86:4d:d0:4d:fb:ee:73:59:c1:3d:
fb:3e:44:a5:85:93:25:ad:82:15:87:79:66:99:c8:cc:9e:47:
29:fd:83:43:c4:9e:82:6e:33:c4:45:e7:02:b8:0c:cc:38:aa:
08:af:20:d4:f9:db:1e:4e:bb:dc:5d:ba:15:70:46:46:33:b4:
a9:07:cf:f6:f3:73:a2:ec:93:d2:7d:86:83:ec:7f:86:80:df:
06:1d:4e:81:9d:05:4c:b6:f4:c2:45:53:d5:e3:38:0a:e0:13:
b8:73:b5:db:d3:38:9a:97:8d:8a:44:9e:c6:3e:06:80:5c:44:
11:ec:b4:96:f4:4e:31:37:b8:f9:5a:b1:67:a4:1b:84:ef:43:
c3:72:e0:0d:59:65:38:e3:7b:06:74:0a:75:95:71:04:f8:22:
2f:30:75:06:95:80:b9:dc:31:18:1e:2b:2c:b1:c3:71:32:f4:
52:9b:da:1b:fc:61:da:f3:58:f1:29:96:15:f2:9d:c6:c2:5c:
57:b5:e9:19:86:f5:85:ec:51:65:b5:48:78:74:de:10:c9:1c:
83:cc:7e:3c:a2:a6:b6:05:56:14:af:89:dd:39:46:05:6a:d7:
6f:e5:80:23:cb:57:ca:5f:bc:29:f1:00:f6:a4:47:d3:48:5c:
0b:3c:f7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:15 2025 by rpki-client