Manifest
$ rpki-client -vvf krill.ipgua.com/repo/pongery/0/BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.mft
File: BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.mft (raw, json)
Hash identifier: wR7GzbwmWMCpud+kmk7xwm/DUy1s6bDZYaN5JQgbXlU=
Subject key identifier: 34:29:7F:0F:7F:0F:52:BB:12:C1:51:EF:FD:70:FA:CF:FF:D5:A3:E0
Authority key identifier: BD:D4:45:1C:46:A2:D9:A5:78:C4:C0:15:D6:BC:94:25:C6:57:7F:E2
Certificate issuer: /CN=bdd4451c46a2d9a578c4c015d6bc9425c6577fe2
Certificate serial: 4CE580AAAAC87CA45A43F7B7968723C467A5FD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdRFHEai2aV4xMAV1ryUJcZXf-I.cer
Subject info access: rsync://krill.ipgua.com/repo/pongery/0/BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.mft
Manifest number: 27
Signing time: Fri 27 Mar 2026 19:49:23 +0000
Manifest this update: Fri 27 Mar 2026 19:44:23 +0000
Manifest next update: Sat 28 Mar 2026 21:33:23 +0000
Files and hashes: 1: BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.crl (hash: bLBnUGXkm4ax6lETqhHHSqrfj2pduzytQ9dDy+WnjAI=)
Validation: OK
Signature path: rsync://krill.ipgua.com/repo/pongery/0/BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.crl
rsync://krill.ipgua.com/repo/pongery/0/BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdRFHEai2aV4xMAV1ryUJcZXf-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 21:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e5:80:aa:aa:c8:7c:a4:5a:43:f7:b7:96:87:23:c4:67:a5:fd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd4451c46a2d9a578c4c015d6bc9425c6577fe2
Validity
Not Before: Mar 27 19:44:23 2026 GMT
Not After : Mar 28 21:33:23 2026 GMT
Subject: CN=34297F0F7F0F52BB12C151EFFD70FACFFFD5A3E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:e8:84:2d:0a:16:ec:63:74:44:02:a2:ac:
6c:4f:e2:27:c8:2c:5a:76:50:76:7a:2f:1f:f6:f7:
39:e3:3f:2d:9a:55:d1:27:5a:e1:f5:4e:99:ba:3f:
a1:7c:7c:5d:2b:8b:80:77:55:2e:e9:b4:a7:b7:d5:
8f:c9:e9:15:c4:87:75:b5:4e:dc:0d:d9:23:15:37:
cd:ea:02:07:36:f2:dc:94:2b:1c:f7:29:1e:30:7d:
62:34:8f:69:d2:e6:31:aa:37:9b:e2:e1:53:db:67:
12:99:29:15:05:bb:e7:f7:bd:06:1a:2a:94:fe:d8:
6b:cf:58:3c:29:90:42:ed:4c:2e:62:7d:2b:4b:57:
ff:c3:05:32:12:fc:04:24:c6:cb:98:a2:c4:e8:8f:
d8:79:dc:bd:61:c7:4e:3c:db:81:13:bd:66:a2:e5:
25:d6:8f:10:48:93:95:7a:06:6f:ec:fd:9b:c0:3b:
e5:9f:23:59:ff:22:b5:cb:eb:cb:c9:60:04:fd:24:
4d:e7:d3:cb:be:e8:e3:94:ad:97:da:a0:49:ad:bf:
2c:0c:86:89:ba:bf:17:a0:39:6b:8b:62:92:f8:0b:
ee:93:32:ce:0a:a9:51:3f:ed:85:46:6f:77:be:b2:
0e:9e:7c:92:65:34:23:0e:13:68:c7:8e:ed:3c:fa:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:29:7F:0F:7F:0F:52:BB:12:C1:51:EF:FD:70:FA:CF:FF:D5:A3:E0
X509v3 Authority Key Identifier:
keyid:BD:D4:45:1C:46:A2:D9:A5:78:C4:C0:15:D6:BC:94:25:C6:57:7F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.ipgua.com/repo/pongery/0/BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdRFHEai2aV4xMAV1ryUJcZXf-I.cer
Subject Information Access:
Signed Object - URI:rsync://krill.ipgua.com/repo/pongery/0/BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:95:67:12:8a:30:a4:99:89:26:c7:df:69:10:9a:cc:a3:4e:
75:a3:d9:04:10:bf:e5:58:fa:30:28:02:2b:11:64:40:a5:a9:
5d:63:55:92:08:df:53:19:92:a4:0b:67:dd:60:6b:53:59:ea:
0b:b5:eb:d7:7c:c6:ae:80:a7:d1:06:8c:5b:a6:f0:46:a0:37:
44:33:c8:81:f9:00:94:0f:9d:2a:7f:fd:7a:85:89:9a:6b:67:
6c:d0:c3:6a:dc:f1:53:77:bd:7e:0f:03:80:7c:cc:78:4b:e0:
0b:f1:62:66:39:a5:df:56:10:5b:5d:79:6c:e4:2c:2e:e1:f6:
d3:63:ef:60:78:d9:83:6f:6e:64:8b:d2:d2:32:f4:64:f9:8d:
57:9a:6b:16:52:db:40:19:02:be:54:91:56:e7:91:8c:ff:4f:
7f:f0:8c:df:9c:50:76:9a:2d:cc:c6:05:92:e8:43:10:c9:15:
ea:01:14:80:7d:e9:a4:34:50:6f:ac:79:29:73:89:bd:43:76:
c3:dd:bd:07:61:aa:e9:7d:38:f5:1c:71:04:2b:be:ae:f4:73:
ea:2c:ba:ba:1b:c7:9e:2f:3e:61:22:a2:e1:78:24:f0:9d:7d:
bf:36:6f:9f:a4:28:c2:6d:76:fb:a7:6f:80:30:68:e0:c6:a0:
a8:87:f8:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 28 14:30:01 2026 by rpki-client