Manifest
$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
File: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft (raw, json)
Hash identifier: uThPksODx3LSdD531WRpjpCsfEl3+GdUC3xWmZFsiSg=
Subject key identifier: C9:58:E3:6E:37:C9:A7:FD:21:EC:35:55:45:CA:13:1E:4E:A1:3C:1B
Authority key identifier: 3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
Certificate issuer: /CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Certificate serial: 2AE20BF0247FCE45A31FDCA7665A26A6863794AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
Manifest number: 1C
Signing time: Thu 23 Jul 2026 15:14:58 +0000
Manifest this update: Thu 23 Jul 2026 15:09:58 +0000
Manifest next update: Fri 24 Jul 2026 17:55:58 +0000
Files and hashes: 1: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl (hash: arhawVvOJCO92G4T6Zpmn37sdyv7Viq8+qVXty+nKJg=)
2: AS214420.asa (hash: C65jtOjBlpPjRzqYy4fJANSK9FHM6Yz6hs95qtJ1op4=)
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e2:0b:f0:24:7f:ce:45:a3:1f:dc:a7:66:5a:26:a6:86:37:94:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Validity
Not Before: Jul 23 15:09:58 2026 GMT
Not After : Jul 24 17:55:58 2026 GMT
Subject: CN=C958E36E37C9A7FD21EC355545CA131E4EA13C1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:6d:1f:fe:53:95:32:83:1b:72:e1:09:64:
b6:e2:9c:74:c4:09:74:93:14:e0:ed:34:1a:5b:2e:
91:3f:c0:61:ea:b9:c6:3b:c4:7b:d0:83:6a:4d:94:
be:07:e3:9d:52:10:eb:bb:96:2d:fb:53:55:1d:f2:
4f:66:5a:33:05:94:94:c9:d1:2b:b1:2c:e6:cf:7c:
dd:87:03:ef:11:38:91:9d:d8:0f:ca:1f:11:f8:7f:
cc:e7:ed:77:b4:df:7b:0d:35:64:5b:44:c2:d5:38:
ee:5a:67:3b:d4:7c:7f:70:b4:60:58:19:26:ea:82:
ee:8a:3f:d8:8c:92:8d:86:19:08:2d:8e:3a:00:56:
33:a6:f8:37:1f:30:03:aa:f3:d9:43:5b:d0:26:96:
c5:b5:91:40:eb:48:ce:7f:03:56:99:96:5f:95:8a:
49:a6:4e:02:b4:b7:ab:60:b6:6c:09:d3:98:3f:db:
85:b3:61:05:a2:d9:b3:f4:11:0a:af:af:d1:64:85:
d7:66:3e:f4:fc:c1:ac:fc:ac:30:1e:28:99:c7:9c:
67:a4:5f:8f:58:19:db:a5:47:50:81:a7:d7:b1:ca:
17:6b:bd:f7:a3:81:df:28:6c:ae:2c:3c:74:aa:b8:
54:3a:71:50:19:2d:4f:8f:91:35:b2:eb:4a:dc:be:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:58:E3:6E:37:C9:A7:FD:21:EC:35:55:45:CA:13:1E:4E:A1:3C:1B
X509v3 Authority Key Identifier:
keyid:3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:72:e3:55:b7:68:24:cb:b2:ca:57:6a:f9:c3:1a:69:46:f6:
b0:65:05:78:9d:a6:03:85:63:95:49:ae:f3:ae:10:9c:7e:91:
0d:af:e7:a3:11:c2:ed:75:23:c0:04:fa:53:fb:a0:6b:6a:e7:
d2:f8:ec:86:68:d3:4e:d0:e3:e0:2a:2e:fc:f6:18:f7:f2:24:
1a:42:7c:64:a1:a7:87:34:ce:d2:10:c4:fb:e3:ee:a9:66:5d:
a4:12:6e:ad:7b:bb:86:b7:43:96:96:30:88:7e:2a:b9:dd:ac:
9c:0b:51:77:b9:01:0c:99:16:fa:4f:68:72:3b:67:ae:e8:88:
55:a8:83:e0:1d:f9:84:7b:05:a4:bd:08:82:78:1a:c9:b2:03:
5e:7d:d4:05:ae:e1:c0:68:9f:8c:a3:11:d0:fb:0b:87:e3:c5:
e1:c1:cc:73:9a:dd:1e:2b:ad:fc:c7:3a:e5:7a:5a:43:ce:bd:
ab:d5:e8:0c:98:76:83:c7:17:69:72:5a:c5:63:c4:74:c7:34:
11:ba:fe:8f:a2:57:b2:d1:86:ec:35:9c:b3:c0:68:2d:86:32:
18:92:4a:c6:a1:ce:12:0b:7f:b1:10:21:8f:5f:11:8d:d4:b7:
4b:1e:da:38:44:c4:01:3e:a6:8b:3c:98:55:d1:bd:d1:aa:e7:
2f:ea:ba:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:16 2026 by rpki-client