Manifest
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File: 0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier: RD2IAxCbHA6/4XCenU0FfrEt2vKReX4XquvG3fcpibo=
Subject key identifier: B5:A5:0B:53:81:0C:85:FD:58:75:AE:15:4B:B7:AF:C0:7B:74:2D:2B
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer: /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial: 55C4FE83E519A4698E506C18CEC714C814A09B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number: 05CB
Signing time: Wed 23 Jul 2025 02:19:06 +0000
Manifest this update: Wed 23 Jul 2025 02:14:06 +0000
Manifest next update: Thu 24 Jul 2025 17:57:06 +0000
Files and hashes: 1: AS52025.asa (hash: tRwDhB2fCfi4WlE9h/+KAiXulT1s7p6mz7bJ4qX4gD4=)
2: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: BmelClLnJ8msqs7RItrkTX+t/E9Y/aALDt3P1QYRhOA=)
Validation: OK
Signature path: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c4:fe:83:e5:19:a4:69:8e:50:6c:18:ce:c7:14:c8:14:a0:9b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
Validity
Not Before: Jul 23 02:14:06 2025 GMT
Not After : Jul 24 17:57:06 2025 GMT
Subject: CN=B5A50B53810C85FD5875AE154BB7AFC07B742D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:20:2d:97:02:93:76:25:20:e6:ae:d4:be:
e0:c3:fb:e6:fb:a8:07:0c:34:ab:43:6e:01:6e:96:
70:bd:08:23:29:d7:ee:18:16:76:c0:23:2b:dd:49:
91:c8:6d:0a:49:00:3f:a6:cb:f8:bd:b8:ef:1d:17:
17:cf:e5:25:34:a1:3a:d6:77:4a:56:1b:97:4c:e1:
42:8c:ae:c7:42:7a:79:90:50:95:d2:72:6e:41:fd:
58:be:25:c1:4b:f7:cf:cd:55:ac:2e:3e:2e:f0:27:
f4:29:31:a5:27:fa:1d:70:e7:48:88:e2:72:08:d7:
dc:0e:76:5c:fd:69:47:9b:08:af:0f:f7:8d:5e:73:
02:21:9e:ea:c3:80:b3:ab:31:22:25:19:48:85:2f:
08:64:f0:85:ae:83:dc:6d:78:d9:f7:f0:d3:fc:b3:
f4:66:b6:19:a5:a1:f8:75:a0:f2:fb:b5:73:3a:fa:
12:e0:56:cc:b8:cc:28:7c:a0:22:b4:d2:8b:fd:b2:
df:64:3e:76:b6:f0:f9:57:4d:ab:23:16:d6:55:f9:
5d:38:28:3b:d5:4f:bd:64:e7:aa:74:2d:c6:bc:db:
a8:e9:c7:98:9a:c2:8d:c4:04:37:bf:c3:77:69:ff:
c9:4e:76:21:b6:c8:f7:d8:b0:b3:9a:84:e0:b0:8a:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A5:0B:53:81:0C:85:FD:58:75:AE:15:4B:B7:AF:C0:7B:74:2D:2B
X509v3 Authority Key Identifier:
keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0b:a1:f3:87:6a:94:57:a4:79:24:11:ca:90:3c:99:64:8e:
73:26:94:24:66:c3:a5:b4:c2:77:e3:86:d5:0e:27:e3:5f:55:
b6:e4:e4:89:62:13:35:41:ed:66:81:bb:94:69:50:87:b2:7b:
3f:7e:78:df:51:f6:cb:a4:04:59:da:3b:d4:50:c2:81:3c:d4:
a7:70:38:88:92:c6:6b:58:26:3b:82:5e:f7:4c:52:b6:f0:0d:
d3:55:a4:36:d8:76:01:8d:ce:a0:e7:f6:e6:21:28:bd:0b:49:
37:fe:9a:3a:d6:be:ad:b5:5f:01:e7:d9:4b:6d:b0:dc:9c:0c:
17:ad:38:33:46:60:1b:b5:ad:5d:44:a6:6e:84:da:7f:6f:d5:
48:d2:7e:94:d3:d4:32:23:04:87:d9:c4:a7:01:8d:b4:62:ed:
db:a2:2a:e2:4c:3d:ef:e0:41:1e:84:e3:9c:00:37:0a:2c:01:
8d:2a:4c:aa:36:35:f2:03:f9:aa:cd:ae:d7:ac:b9:48:eb:81:
d7:95:1a:36:17:f3:c3:ad:88:84:62:ae:dd:1c:a0:f7:3d:54:
5c:ac:40:b7:14:7c:d7:cf:25:dc:64:e8:1d:ec:63:04:0d:fd:
e8:70:b8:2f:3a:c9:98:de:1d:84:78:3d:99:10:08:e9:fd:24:
2b:05:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 16:08:05 2025 by rpki-client