
$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
File: BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft (raw, json)
Hash identifier: +YjXKBf8j9mGeNbiz+tFWzr973Tcz4d2o+jsWvaw3cY=
Subject key identifier: 5A:E9:BE:FF:69:5D:2F:12:34:14:11:A9:EE:1E:3F:22:BD:37:5F:47
Authority key identifier: BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06
Certificate issuer: /CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
Certificate serial: 5A56E8C7B51B70C3224E1E3F447DB2F78959C4C4
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
Subject info access: rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
Manifest number: 4A
Signing time: Fri 25 Sep 2026 20:45:51 +0000
Manifest this update: Fri 25 Sep 2026 20:40:51 +0000
Manifest next update: Sat 26 Sep 2026 21:57:51 +0000
Files and hashes: 1: 326131343a373538333a653130303a3a2f34302d3430203d3e20323135373630.roa (hash: 9iYXqz2uZswuFGmbb3I2IKAg+SWvtdIdDTWgAWdK6sI=)
2: 326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa (hash: BaRn+VV9Mjv1d3bI1ejWVjhYGt/Z44aYBaRQrdawqUg=)
3: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: 0WfGIbdnCqY+ccClEvoLWkuTmchpzxdgcLtMMvZROJk=)
4: 326131343a373538333a653162303a3a2f34342d3434203d3e20323135373630.roa (hash: Sbur0LFeWPNeDmxIDkcbbfwfykhvNRJQKSdXoitfsqA=)
5: BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl (hash: e7kNOLncftdNzaxEfqBxq/xIi6KMDsfUc53ppg0fHmc=)
6: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: ZlZazCwIM5LGuIaeyYSvXDahbBBCJ7o6hK9PdYVxgtg=)
Validation: OK
Signature path: rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl
rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:56:e8:c7:b5:1b:70:c3:22:4e:1e:3f:44:7d:b2:f7:89:59:c4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
Validity
Not Before: Sep 25 20:40:51 2026 GMT
Not After : Sep 26 21:57:51 2026 GMT
Subject: CN=5AE9BEFF695D2F12341411A9EE1E3F22BD375F47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:50:d9:54:de:bb:a4:42:09:b8:67:c4:60:
77:6c:f1:9d:fb:9b:32:f8:93:ba:b7:fb:ea:f8:b4:
cf:4f:85:40:ba:c3:00:62:4a:bf:d5:b1:a1:d2:f0:
57:31:4b:ff:eb:0f:cc:47:b5:d6:fd:98:6a:66:19:
ec:8c:9f:b5:cf:fd:03:b6:9e:be:87:f6:3e:57:3f:
31:77:cc:73:0b:74:f7:91:b9:76:e0:7b:13:32:ca:
21:d3:42:f8:6c:64:50:85:b0:40:49:71:f0:42:ab:
d8:09:77:07:48:07:29:63:f8:db:1e:19:2d:ae:a7:
12:ff:df:1b:04:0e:4c:5d:6f:e8:56:3c:c8:bc:58:
3b:ce:1d:cc:5d:1d:01:dd:9b:2c:ce:bd:99:0e:43:
c4:85:1e:cd:fa:f5:1e:a4:ea:ef:24:ab:25:2c:92:
93:fd:2d:fa:15:d1:ad:72:bc:95:56:be:9f:e6:d7:
27:fb:9a:3f:21:f6:e4:46:cb:71:42:87:1b:a5:e4:
89:6b:a0:50:0f:bd:58:26:f3:14:ba:91:16:c5:6e:
3d:fe:7c:d1:86:5b:ac:87:aa:2f:0e:8b:80:cc:48:
c5:0b:8e:3f:5e:94:95:cc:61:b5:f2:3e:b4:4e:a9:
05:88:06:08:37:a8:54:0c:f0:d0:0f:84:ae:bb:45:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E9:BE:FF:69:5D:2F:12:34:14:11:A9:EE:1E:3F:22:BD:37:5F:47
X509v3 Authority Key Identifier:
keyid:BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
Subject Information Access:
Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8e:57:e7:c0:a4:46:cd:79:d3:0d:c5:fa:d1:a3:44:b7:00:
d0:41:d7:2a:af:1c:29:81:cd:9c:2e:4b:04:79:e8:ca:7d:94:
26:a3:5c:0e:c1:11:65:58:21:9e:74:86:81:ee:b5:cf:a6:b0:
0d:12:5a:1b:2e:03:e2:f7:b3:cb:bc:42:95:ba:87:b6:84:37:
68:bb:95:d1:5c:bd:20:68:44:94:10:24:92:33:65:a1:bc:65:
39:2c:b1:c4:82:88:30:3c:c1:8b:a4:68:1c:09:f1:b5:1d:a1:
0b:db:d2:73:95:69:b2:e0:e8:74:80:78:58:c1:24:99:db:16:
6b:95:d7:5e:7f:47:81:3e:df:08:05:0a:4b:8d:d7:c4:3b:57:
f7:1f:c4:c3:0d:bb:df:49:55:5a:22:c1:10:19:d4:9e:17:81:
9f:07:0f:66:df:3c:cb:f9:d6:9c:5b:89:55:06:cd:e9:de:50:
22:ca:e2:c2:b7:8d:96:d8:af:26:2f:b7:93:ca:c0:98:db:f4:
bd:ef:1b:da:cc:a1:4a:a5:02:98:9c:f6:3c:d7:40:fb:13:c8:
dd:4e:fd:f0:b6:47:2a:5f:e3:53:8c:50:8c:3e:10:f8:95:66:
d0:1f:8c:c6:ac:3b:2d:95:d4:63:8c:77:26:60:d6:d5:ed:31:
f6:c4:9f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:29:06 2026 by rpki-client