Manifest
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
File: 02B5CF163150ADD82E90362AE55F3173D9749F05.mft (raw, json)
Hash identifier: KKo2AJEMCutCF/s1l3R/VnG73y17xmpP6OHPcBNcvNA=
Subject key identifier: 81:25:54:5A:D7:97:99:6A:2B:E6:81:B5:72:6E:EC:02:0A:D7:12:0F
Authority key identifier: 02:B5:CF:16:31:50:AD:D8:2E:90:36:2A:E5:5F:31:73:D9:74:9F:05
Certificate issuer: /CN=02b5cf163150add82e90362ae55f3173d9749f05
Certificate serial: 35DE9A8FC0DA54155C98C3F51ACC5AB71CC2EB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArXPFjFQrdgukDYq5V8xc9l0nwU.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
Manifest number: 29
Signing time: Sat 23 Aug 2025 03:49:21 +0000
Manifest this update: Sat 23 Aug 2025 03:44:21 +0000
Manifest next update: Sun 24 Aug 2025 05:51:21 +0000
Files and hashes: 1: 323030313a3637633a323864343a3a2f34382d3438203d3e20323036373838.roa (hash: PNmjJ5Y8FuXlXHnV22nAEjIm1Iwk0dySIizMcjGUUog=)
2: AS206788.asa (hash: Mg8pKFdzIKLQ7mgD8AoSpiq3AdSwb5SJyIc2hLm6NPw=)
3: 02B5CF163150ADD82E90362AE55F3173D9749F05.crl (hash: BAJWnKOirZVbQhjyA6RTcs5mVy4IizrRk2g6zdlwpJQ=)
Validation: OK
Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.crl
rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArXPFjFQrdgukDYq5V8xc9l0nwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:de:9a:8f:c0:da:54:15:5c:98:c3:f5:1a:cc:5a:b7:1c:c2:eb:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b5cf163150add82e90362ae55f3173d9749f05
Validity
Not Before: Aug 23 03:44:21 2025 GMT
Not After : Aug 24 05:51:21 2025 GMT
Subject: CN=8125545AD797996A2BE681B5726EEC020AD7120F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:08:0c:d8:16:da:81:b6:14:fd:02:fb:eb:
2e:9d:c4:3a:87:d3:ed:a5:7e:70:1e:af:22:8d:1f:
72:cd:38:eb:61:64:7b:a3:12:13:ff:27:96:d7:59:
63:0d:e3:e0:59:56:11:12:0f:53:e0:17:57:c6:9d:
95:08:d4:8d:e5:62:f4:13:e8:49:c1:71:3f:2a:f3:
55:51:57:08:44:47:aa:e6:b0:8f:c7:54:05:43:0f:
a9:4b:6e:3a:4c:c8:9e:38:c3:6d:a8:df:f7:69:c6:
f5:d9:be:8a:d6:a1:9c:39:d9:44:4c:0d:c8:a8:54:
62:c5:7c:54:c1:39:bb:d0:ea:44:46:56:1f:9b:b2:
86:17:cf:04:a7:d2:97:d1:33:92:2c:71:45:d1:0c:
2b:98:63:5b:16:f9:55:1b:97:20:91:1e:a8:34:e0:
22:b6:f6:5d:8d:bb:b1:d0:ec:a3:b7:5b:f1:d8:31:
35:4a:54:de:cc:2a:b5:29:66:90:85:6e:c3:8d:82:
b6:67:83:d7:8b:a8:89:62:9f:8b:cd:6c:a8:9e:18:
98:ac:b4:d5:3d:f9:26:59:8a:05:54:38:5d:ff:f7:
d9:58:e3:ec:8e:30:5a:aa:2b:02:c5:9a:44:82:0b:
53:b3:19:f4:b6:4f:88:da:d2:0c:9b:6b:0e:72:2a:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:25:54:5A:D7:97:99:6A:2B:E6:81:B5:72:6E:EC:02:0A:D7:12:0F
X509v3 Authority Key Identifier:
keyid:02:B5:CF:16:31:50:AD:D8:2E:90:36:2A:E5:5F:31:73:D9:74:9F:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArXPFjFQrdgukDYq5V8xc9l0nwU.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e7:b1:fe:98:13:50:b0:7c:67:29:a9:0a:b2:0e:62:25:47:
16:0a:16:c4:74:05:66:0e:1e:46:84:aa:af:f5:e0:18:1f:95:
eb:ad:8d:aa:d7:0d:16:4c:09:91:87:fe:1f:d0:2d:38:8f:08:
39:bf:40:fa:1f:c6:de:d0:64:3e:f7:e7:43:43:15:8b:a5:74:
6b:64:a7:ca:b0:96:ce:6d:9d:42:24:8a:b4:37:d9:92:6a:5b:
c9:15:04:18:e0:c6:24:78:ef:42:c3:da:86:bc:e5:b1:eb:aa:
2c:24:64:03:83:44:3d:ef:e8:c3:be:15:4b:b8:f7:65:b6:6d:
60:a1:9b:dc:ee:10:a8:2e:51:57:f2:b3:f4:6d:2e:c6:11:7e:
62:e7:75:9e:a3:5f:38:9f:8d:dd:ec:4e:34:25:f6:1d:82:c9:
ff:43:f7:32:6f:83:17:0a:2b:37:9b:51:e0:cc:fe:ad:5c:fa:
5e:63:25:82:7d:87:30:a9:8f:6c:98:00:55:0f:17:8f:43:8e:
39:f0:80:2f:8a:1e:11:ce:dd:3c:d2:ab:fd:6c:2c:95:40:c9:
93:e8:7a:72:45:84:2d:f7:af:10:b5:79:b1:8d:74:37:f0:02:
80:d1:b7:7e:48:cb:97:34:f4:07:f3:3c:4b:c6:3f:05:9c:b5:
23:ae:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:26:13 2025 by rpki-client