Manifest
$ rpki-client -vvf krill.ipgua.com/repo/pongery/0/BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.mft
File: BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.mft (raw, json)
Hash identifier: bSz0cbMw7rhQ7jqJQSlWgbr0phCwnyEobiTDkDjoMEg=
Subject key identifier: 0D:4C:1E:98:C1:70:33:6D:42:DD:AD:F5:B5:9D:59:71:78:49:5E:7C
Authority key identifier: BD:D4:45:1C:46:A2:D9:A5:78:C4:C0:15:D6:BC:94:25:C6:57:7F:E2
Certificate issuer: /CN=bdd4451c46a2d9a578c4c015d6bc9425c6577fe2
Certificate serial: 24CBCF47E8FB0DFCDFA1710B2E21B8BEBDB8FEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdRFHEai2aV4xMAV1ryUJcZXf-I.cer
Subject info access: rsync://krill.ipgua.com/repo/pongery/0/BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.mft
Manifest number: 29
Signing time: Sun 29 Mar 2026 07:35:51 +0000
Manifest this update: Sun 29 Mar 2026 07:30:51 +0000
Manifest next update: Mon 30 Mar 2026 08:30:51 +0000
Files and hashes: 1: BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.crl (hash: ovhzyjIwmBtCLHYzK2bKtzuOmn1os5L2A5h28tEhVvI=)
Validation: OK
Signature path: rsync://krill.ipgua.com/repo/pongery/0/BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.crl
rsync://krill.ipgua.com/repo/pongery/0/BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdRFHEai2aV4xMAV1ryUJcZXf-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:cb:cf:47:e8:fb:0d:fc:df:a1:71:0b:2e:21:b8:be:bd:b8:fe:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd4451c46a2d9a578c4c015d6bc9425c6577fe2
Validity
Not Before: Mar 29 07:30:51 2026 GMT
Not After : Mar 30 08:30:51 2026 GMT
Subject: CN=0D4C1E98C170336D42DDADF5B59D597178495E7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:a6:d0:4b:f7:57:6c:03:fb:a8:67:7c:f6:
0f:a9:48:05:73:79:93:6d:78:d5:ef:26:02:1f:12:
bf:77:4c:06:26:0e:c5:ec:70:a2:79:ac:25:f8:43:
13:39:c4:f1:52:05:d5:15:9e:0d:ce:8b:a1:37:09:
59:60:9c:77:c8:ab:ac:d3:f2:43:c4:dd:eb:78:2b:
c5:53:3c:8f:4d:79:a0:9f:00:15:54:fb:6d:b5:f8:
0c:18:9f:bb:f1:5c:c6:6f:46:74:f6:11:56:dc:6c:
06:ed:12:d4:15:68:80:42:04:d8:2a:36:f0:73:31:
22:f9:39:33:88:62:e2:4c:b5:7d:3c:0d:a1:dc:64:
d6:4e:c8:33:a5:74:b6:4a:4f:b5:61:ba:cd:c9:38:
77:d4:2f:03:51:86:2f:a1:c5:e4:cc:47:eb:5a:5c:
15:c5:9b:8b:8c:fc:cc:d1:f1:a5:00:92:c1:a5:20:
de:01:3a:59:f8:a7:f8:bf:7d:f2:89:b0:ad:6e:7f:
57:0c:ac:40:9c:66:9f:2c:f8:b4:20:7b:5d:b4:61:
c6:90:f5:fc:6e:fc:63:b2:4f:a0:37:53:1d:a4:3e:
af:7a:b6:f8:55:78:f9:e6:fe:4b:d1:53:d4:28:40:
ee:3c:76:47:f2:a3:9d:96:30:da:6b:38:be:47:79:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4C:1E:98:C1:70:33:6D:42:DD:AD:F5:B5:9D:59:71:78:49:5E:7C
X509v3 Authority Key Identifier:
keyid:BD:D4:45:1C:46:A2:D9:A5:78:C4:C0:15:D6:BC:94:25:C6:57:7F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.ipgua.com/repo/pongery/0/BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdRFHEai2aV4xMAV1ryUJcZXf-I.cer
Subject Information Access:
Signed Object - URI:rsync://krill.ipgua.com/repo/pongery/0/BDD4451C46A2D9A578C4C015D6BC9425C6577FE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d9:74:ed:0e:81:1e:04:b4:37:5b:74:d6:a8:cb:4e:09:6b:
2a:d7:a0:98:6d:ce:cc:4c:9b:68:7d:85:0f:d2:4e:a3:98:28:
16:00:79:c6:5c:c1:4a:b0:3e:2d:d6:1c:52:27:a0:6d:3a:aa:
c3:bf:96:74:94:21:9e:29:76:de:a3:07:b0:e5:20:a2:fc:c1:
72:ee:4c:cc:0d:10:f5:f1:a7:76:98:ed:1d:c4:cb:f7:13:0f:
85:1a:16:a5:57:4b:7d:22:d5:c9:e1:47:63:7e:1f:f7:c8:d0:
62:b8:d3:3d:8a:b3:a0:62:de:1b:ac:9f:5a:14:18:da:7d:7f:
e5:1b:ef:7b:5a:24:65:4a:3c:0d:8c:0a:70:68:e0:4c:e4:1b:
5b:99:e5:5d:68:c7:c4:3b:ea:3c:ff:7b:1c:9c:8b:0e:7d:af:
5d:a5:15:3f:60:f5:a7:06:e5:a5:59:84:4d:1d:83:44:88:53:
d0:ef:f8:be:94:5f:85:53:5e:dd:51:50:72:7e:94:55:d4:19:
91:9c:6f:57:3c:17:da:4c:7e:80:5d:ab:c5:1a:1e:80:3e:e2:
e1:07:ac:d2:c4:1b:5f:41:bf:83:8c:96:ff:ee:40:3e:4c:06:
d2:b4:d5:38:85:90:f5:e1:10:1e:a7:a2:e6:7a:2d:55:ee:b8:
a1:e4:0c:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:45 2026 by rpki-client