
Manifest
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File: 0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier: BCVYFC1wEsFDPYhjxkyRfaGqm9SJTBwBuexpXxP0jyE=
Subject key identifier: 24:BD:0A:A9:B9:4B:E5:0F:CC:C5:59:A2:37:5C:F8:62:B7:35:E5:41
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer: /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial: 06F4AB2F2AAFEFBA252BB0C8AF8C3E10299232FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number: 066E
Signing time: Sun 09 Nov 2025 00:00:02 +0000
Manifest this update: Sat 08 Nov 2025 23:55:02 +0000
Manifest next update: Mon 10 Nov 2025 00:29:02 +0000
Files and hashes: 1: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: 9c/zCym/tuzNsnEciw+bQRFkt4SRPEH6DEiM9mGLAXs=)
2: AS52025.asa (hash: x51JiPCWuWFkU5jg+o5FU0+E6jgDqMkN6x1bXwy8U10=)
Validation: OK
Signature path: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Nov 2025 00:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f4:ab:2f:2a:af:ef:ba:25:2b:b0:c8:af:8c:3e:10:29:92:32:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
Validity
Not Before: Nov 8 23:55:02 2025 GMT
Not After : Nov 10 00:29:02 2025 GMT
Subject: CN=24BD0AA9B94BE50FCCC559A2375CF862B735E541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:23:53:5a:11:9e:79:7c:02:34:8a:b0:79:
94:50:d5:f8:a6:59:f1:30:26:05:99:bc:14:25:5e:
eb:ad:d4:63:f0:d6:20:4c:06:eb:39:dc:58:2e:2b:
84:c1:a9:63:8b:d2:77:e1:a6:98:b3:af:33:98:3f:
50:4d:0d:85:2e:db:e5:73:e2:a4:34:3a:d2:15:25:
50:94:97:5e:a5:fb:98:ad:26:91:0a:71:95:74:4c:
fd:b3:ac:4d:b9:0f:39:a4:00:17:3c:bd:6b:59:0a:
35:e9:e6:87:4b:86:b6:85:58:17:75:22:45:f1:ea:
10:01:a1:07:1d:ac:fb:20:58:67:ce:a7:ac:c8:94:
7c:0f:16:d5:3f:eb:22:20:44:99:51:92:e4:03:89:
61:f6:08:bc:4f:10:66:cb:fc:1e:0d:7f:03:2b:30:
62:67:28:02:76:ee:68:02:6a:0d:1c:1b:44:30:50:
57:49:05:ca:ce:f5:11:c9:65:9a:a3:0c:7f:8d:5d:
73:e0:44:34:38:64:ac:59:b9:15:57:ee:82:a2:02:
13:a8:f9:dc:34:7f:f6:12:01:e7:a4:4b:73:35:dc:
12:8d:6a:ee:61:8e:84:93:10:0f:72:7a:cd:8e:00:
af:d1:17:c1:00:03:ef:2b:ee:07:a6:92:d1:1d:b1:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BD:0A:A9:B9:4B:E5:0F:CC:C5:59:A2:37:5C:F8:62:B7:35:E5:41
X509v3 Authority Key Identifier:
keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3c:84:1f:ca:34:e1:60:45:49:f2:12:01:b1:7a:de:94:1b:
84:73:bd:11:cc:a0:b8:a7:7f:c5:ab:68:3c:da:14:2d:38:31:
d1:68:91:3c:01:36:f6:ab:6b:7b:36:75:e5:14:65:0a:1e:04:
9c:0d:7e:83:f8:af:43:a7:02:eb:f3:b5:60:c8:c5:47:0d:e5:
9b:16:78:12:40:d0:a1:9e:0b:fb:9d:3b:fa:11:c6:08:1b:13:
fe:c9:d5:1d:48:79:65:15:f6:a0:27:cd:2d:dc:3a:12:3c:a5:
98:08:81:a9:5a:ed:27:9a:c3:54:ac:89:47:c5:a5:ee:c5:04:
40:21:9b:37:58:3d:28:69:63:e9:9d:b3:d2:98:d8:53:bc:a9:
ad:9c:88:d5:0e:e0:41:fc:9a:e7:c2:89:87:2a:45:87:fa:4c:
77:12:f5:c2:27:72:c1:f8:40:b1:ae:9e:d0:5b:ae:c9:80:96:
17:dd:44:17:91:61:34:71:2a:f9:eb:2d:ed:ee:fb:84:40:f2:
46:63:cd:e4:af:f9:6d:0d:18:93:a6:30:45:f0:3f:c5:ae:f4:
81:da:f6:8b:81:8a:88:df:b3:49:12:48:0f:7b:8a:04:af:aa:
64:03:21:f7:f9:ae:e1:fc:e9:25:a0:a1:d4:5e:cb:71:b1:63:
c3:30:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 11:48:34 2025 by rpki-client