
Manifest
$ rpki-client -vvf krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft
File: ED42F9C384F588482A56A937C446B70EB594BD3F.mft (raw, json)
Hash identifier: K7MQN+C1nughRbdQJrCIefR9Dn4XMghSuPWHSE9eIrI=
Subject key identifier: 5E:69:D8:E3:07:F4:46:72:7A:7C:3D:EB:70:8B:B6:0C:69:56:33:A8
Authority key identifier: ED:42:F9:C3:84:F5:88:48:2A:56:A9:37:C4:46:B7:0E:B5:94:BD:3F
Certificate issuer: /CN=ed42f9c384f588482a56a937c446b70eb594bd3f
Certificate serial: 2B1AC03AD00CEDA4E2D06CE7F9CF3928B69A1B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UL5w4T1iEgqVqk3xEa3DrWUvT8.cer
Subject info access: rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft
Manifest number: 27
Signing time: Wed 25 Mar 2026 17:27:23 +0000
Manifest this update: Wed 25 Mar 2026 17:22:23 +0000
Manifest next update: Thu 26 Mar 2026 18:56:23 +0000
Files and hashes: 1: ED42F9C384F588482A56A937C446B70EB594BD3F.crl (hash: 5hKyLucIB1arKsNypzDsaAuUJvdzwpZFch7iIhxgxmg=)
2: AS200160.asa (hash: wegf8lsrFR11khR+xErF138NnD8sFeefJ2iqiJK1DFg=)
Validation: OK
Signature path: rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.crl
rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UL5w4T1iEgqVqk3xEa3DrWUvT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:1a:c0:3a:d0:0c:ed:a4:e2:d0:6c:e7:f9:cf:39:28:b6:9a:1b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed42f9c384f588482a56a937c446b70eb594bd3f
Validity
Not Before: Mar 25 17:22:23 2026 GMT
Not After : Mar 26 18:56:23 2026 GMT
Subject: CN=5E69D8E307F446727A7C3DEB708BB60C695633A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:97:d7:ba:b1:c4:bd:05:70:b3:df:ee:1d:
c1:3c:25:e0:90:1b:81:e7:1c:3a:6d:e8:c0:97:f8:
e5:15:d4:a1:3a:b0:41:08:99:9f:20:a7:59:01:6d:
52:33:83:c9:2d:58:24:f2:c2:cd:26:98:47:ee:4f:
1f:6d:96:34:81:a0:09:7c:5c:45:63:f9:04:a5:61:
cf:9e:77:28:15:0f:83:8e:eb:20:19:d2:33:8c:11:
97:df:39:c9:ab:e6:a3:a1:74:05:bb:21:8f:f3:28:
74:35:67:b9:5d:c6:33:83:ad:0a:97:a1:cf:dc:33:
f1:26:70:7b:a0:eb:4f:9f:55:e2:0c:3e:72:09:bb:
aa:c3:b2:e2:f6:7b:26:65:75:00:93:9a:54:4e:09:
c7:ee:a5:59:77:9a:da:af:d2:2d:7c:5a:97:c3:a8:
75:64:2e:54:5c:0c:14:ee:3d:7d:37:8e:05:c6:53:
7b:cf:49:a7:36:7f:64:50:4d:77:f8:09:57:d4:50:
40:0b:77:a5:ae:63:ac:7c:2b:77:ca:52:2e:0f:6d:
ae:f2:e3:cf:8a:e7:06:d9:fa:36:3d:d2:2e:f9:82:
3d:7b:70:d5:9a:48:44:38:32:6a:17:ad:58:af:1b:
ec:56:92:30:a7:42:1d:6a:6f:56:38:c8:8e:ce:8a:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:69:D8:E3:07:F4:46:72:7A:7C:3D:EB:70:8B:B6:0C:69:56:33:A8
X509v3 Authority Key Identifier:
keyid:ED:42:F9:C3:84:F5:88:48:2A:56:A9:37:C4:46:B7:0E:B5:94:BD:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UL5w4T1iEgqVqk3xEa3DrWUvT8.cer
Subject Information Access:
Signed Object - URI:rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9c:e4:3c:1f:1e:0e:ff:6f:2f:ac:ca:e8:b4:d2:b2:ae:dc:
a3:88:5e:3e:fe:6f:7d:7f:39:35:ec:68:de:cd:47:cb:02:7d:
aa:de:6f:47:66:5e:aa:89:db:d6:c4:91:00:02:9e:bb:c7:7f:
e3:33:38:6c:aa:b5:1b:76:be:37:ea:d9:0e:c7:cd:74:cd:ba:
03:37:4c:c8:c2:40:dc:2e:d5:eb:fc:51:0f:2e:7a:b5:69:19:
c6:a5:c2:cd:56:04:1f:91:72:e5:b4:42:6a:2f:59:0c:38:50:
4e:9d:14:52:b0:74:e8:e2:b0:43:bd:3f:01:5d:79:46:3f:0a:
77:4c:16:92:36:14:a3:07:25:0b:bb:66:e9:cb:9c:0c:d6:4d:
d3:5b:25:89:93:5a:b8:0a:93:4f:22:6c:51:4a:96:88:22:30:
22:5d:f4:eb:71:68:49:6a:d5:09:af:85:53:80:70:7d:4a:d8:
f7:69:20:39:79:a7:f6:16:3e:13:4b:3d:ee:b0:37:73:22:43:
88:6f:bd:fc:0b:fa:b6:df:cb:ed:68:59:30:3f:1d:92:ca:1e:
7c:d5:11:76:3e:67:32:2c:a9:04:4b:c4:f6:20:2a:22:4a:07:
39:0a:c8:94:0f:fa:8e:ac:1f:bc:7c:68:9d:4e:d3:53:e9:7c:
93:a1:3e:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:43 2026 by rpki-client