
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: EoNB0vpj37QpWj/iI/4uwDrv2VrPhjL9DtOyPxLybA0=
Subject key identifier: 31:5E:81:CE:FC:96:CE:A3:4A:EF:72:B1:60:81:F5:4E:DD:F1:EE:56
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 78915608E5DACFA591D07A38959744AEB73D8583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 01DF
Signing time: Sun 03 Aug 2025 23:12:58 +0000
Manifest this update: Sun 03 Aug 2025 23:07:58 +0000
Manifest next update: Tue 05 Aug 2025 01:27:58 +0000
Files and hashes: 1: AS215084.asa (hash: VnCOMkKT2maWsf2f4NVt587A2kDQziKAN+YsQMVpLkI=)
2: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: zU5oOk0qaZ/vWDyPe3sLmx7LGxrQL/AV9DRJrdQXwjA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:91:56:08:e5:da:cf:a5:91:d0:7a:38:95:97:44:ae:b7:3d:85:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Aug 3 23:07:58 2025 GMT
Not After : Aug 5 01:27:58 2025 GMT
Subject: CN=315E81CEFC96CEA34AEF72B16081F54EDDF1EE56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:30:3b:1f:e4:51:74:0f:10:f1:c7:da:e5:92:
e3:36:66:0b:bd:e3:d3:1c:31:bb:33:3c:4e:74:22:
64:a9:36:d3:a8:ee:b1:18:63:64:9d:35:2d:44:84:
5b:c6:6b:ce:91:7b:9c:42:ca:aa:41:6f:49:e4:cc:
44:8e:4c:f9:f7:6a:46:6f:61:8e:9f:89:c3:54:a0:
ad:cd:3f:c3:98:23:aa:52:7d:aa:77:a4:66:63:58:
94:de:c1:d4:71:d2:af:a9:d1:27:fd:df:ce:bc:53:
83:8b:3c:2e:e5:60:0a:ef:ef:a2:0b:9d:3b:f2:a4:
41:ce:0b:e6:80:33:cd:e7:0a:45:40:cd:65:bf:73:
bb:66:a9:ad:61:12:bc:2d:1d:c9:15:7f:57:4e:fa:
3d:b2:97:ff:c0:c0:1c:17:c0:b5:c3:ef:04:15:a9:
0c:b2:f8:2a:57:1d:70:5c:8c:0a:6e:61:78:1d:c5:
82:83:c5:d5:f3:5d:2b:5d:b8:d1:9d:fa:85:c4:cd:
a4:c6:58:23:3f:27:cf:1e:bc:30:3f:f4:f3:7b:0f:
0a:f4:e6:34:f8:bd:ff:fb:bc:f4:b1:f5:e9:69:c8:
49:36:18:ca:5c:43:7b:30:fc:25:4c:3e:96:e2:48:
ac:93:50:4d:06:15:f1:93:cc:a5:3e:8b:03:1e:ef:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5E:81:CE:FC:96:CE:A3:4A:EF:72:B1:60:81:F5:4E:DD:F1:EE:56
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f0:5f:e3:f2:0e:85:fe:b2:31:e7:3c:a7:75:ef:be:77:ef:
9b:c1:ac:70:24:aa:3d:60:45:a8:a6:a5:f6:09:38:bd:36:86:
36:c6:2c:27:f6:85:bd:f1:4c:3d:6f:51:68:b7:bc:4e:c2:4a:
40:80:32:55:b3:be:ee:67:ec:59:2e:81:4b:b7:2b:77:73:f9:
17:a2:2a:f1:96:63:af:2f:af:96:44:ee:c2:d2:38:cc:af:85:
53:38:0b:ce:85:b4:af:f6:53:df:29:99:c0:fe:e4:ca:a9:a0:
4e:25:0f:a6:9b:c6:c9:8f:8a:c2:c0:9d:62:ca:fb:27:cc:be:
3a:85:6d:44:97:d3:4e:b2:94:78:11:e8:67:f1:e0:ff:38:ac:
4e:cd:35:5e:4d:4b:94:a4:e7:e4:b5:0a:8d:73:d4:62:e7:5c:
cb:1c:ca:11:2a:7b:02:08:62:f2:f1:0e:73:d7:9a:8a:56:68:
af:c1:26:cc:c1:c1:c8:c5:3c:50:8c:48:5e:a3:04:15:d2:2a:
58:87:17:e1:45:fc:38:ea:27:c5:0b:ca:fc:7d:98:9d:7d:fe:
53:f9:8b:2c:d2:99:7e:bc:3d:e8:95:95:9e:e3:ba:86:04:e5:
ef:b4:cb:b2:58:71:d7:6e:47:27:c7:83:1a:56:a9:b8:1e:cf:
5d:b3:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:17 2025 by rpki-client