Manifest
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
File: 02B5CF163150ADD82E90362AE55F3173D9749F05.mft (raw, json)
Hash identifier: fkPXO0A1sfsCNjXgoPbkadI84OrueiorJx/JGttSzQ4=
Subject key identifier: F0:36:36:4D:C1:43:7D:72:DC:6E:C5:61:B6:1F:09:36:43:F7:EF:81
Authority key identifier: 02:B5:CF:16:31:50:AD:D8:2E:90:36:2A:E5:5F:31:73:D9:74:9F:05
Certificate issuer: /CN=02b5cf163150add82e90362ae55f3173d9749f05
Certificate serial: 1AAC6D47A52F38C2912B08EE130A33FC355A8F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArXPFjFQrdgukDYq5V8xc9l0nwU.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
Manifest number: 3E
Signing time: Wed 03 Sep 2025 02:20:00 +0000
Manifest this update: Wed 03 Sep 2025 02:15:00 +0000
Manifest next update: Thu 04 Sep 2025 04:26:00 +0000
Files and hashes: 1: 323030313a3637633a323864343a3a2f34382d3438203d3e20323036373838.roa (hash: PNmjJ5Y8FuXlXHnV22nAEjIm1Iwk0dySIizMcjGUUog=)
2: AS206788.asa (hash: Mg8pKFdzIKLQ7mgD8AoSpiq3AdSwb5SJyIc2hLm6NPw=)
3: 02B5CF163150ADD82E90362AE55F3173D9749F05.crl (hash: 679qTooP4CodDiRcg0Ksh8FK5yYrUvIrhJfL51eJhaU=)
Validation: OK
Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.crl
rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArXPFjFQrdgukDYq5V8xc9l0nwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Sep 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ac:6d:47:a5:2f:38:c2:91:2b:08:ee:13:0a:33:fc:35:5a:8f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b5cf163150add82e90362ae55f3173d9749f05
Validity
Not Before: Sep 3 02:15:00 2025 GMT
Not After : Sep 4 04:26:00 2025 GMT
Subject: CN=F036364DC1437D72DC6EC561B61F093643F7EF81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:35:10:a2:cc:63:a2:52:74:6a:2b:83:39:
36:c2:a3:5e:1d:bb:f2:e7:3b:5f:cd:b7:c0:05:38:
05:81:b8:21:8c:6a:d9:af:f6:5f:7a:9e:5b:b5:cc:
82:63:60:f2:71:5e:88:2d:e9:b1:b7:40:d5:ce:0c:
04:4a:16:04:31:00:5a:86:5a:4e:7e:d3:6c:37:17:
da:4d:09:96:d6:75:2c:34:81:86:77:5a:d9:37:79:
68:14:39:50:67:33:4d:8f:61:99:62:29:09:c1:d8:
2c:29:6b:7b:19:61:6b:f5:e2:e1:33:88:3b:fd:0c:
f8:23:00:2e:47:b4:2f:63:1c:6c:f4:f7:53:17:50:
76:c2:69:0d:e4:4b:32:4b:47:8a:44:96:26:7d:9b:
e3:6d:cf:18:3a:37:2d:80:a7:02:33:7e:de:56:eb:
01:4e:a7:ce:ab:cc:36:4f:1d:e1:4a:de:27:b9:fd:
8d:37:c9:21:2c:59:9d:b7:44:f5:d0:fe:42:c8:33:
07:b8:53:50:5b:a0:26:4f:11:38:db:0f:6c:84:50:
e7:11:2e:88:f9:a3:f3:6e:cc:fa:5a:c8:f1:24:86:
70:fa:47:eb:91:55:2d:07:b8:a3:74:6d:49:de:c1:
3c:e1:99:5c:dd:c0:7a:12:8a:10:e0:d4:6b:2d:fe:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:36:36:4D:C1:43:7D:72:DC:6E:C5:61:B6:1F:09:36:43:F7:EF:81
X509v3 Authority Key Identifier:
keyid:02:B5:CF:16:31:50:AD:D8:2E:90:36:2A:E5:5F:31:73:D9:74:9F:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArXPFjFQrdgukDYq5V8xc9l0nwU.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:47:cc:48:f4:71:c0:8f:57:de:72:40:23:b5:eb:af:eb:13:
4a:10:ec:b3:11:62:85:f4:3a:18:1e:41:73:7d:2e:2c:35:46:
3a:a7:0a:88:08:80:bc:42:e1:e7:b8:4d:95:bd:ca:da:ba:2a:
6c:18:10:0a:b2:5e:f5:e4:fa:bf:88:4b:2d:9e:ba:73:c4:18:
ba:2e:95:c7:3b:98:1f:0f:fe:8c:9a:4a:08:f8:fb:67:20:e1:
e9:85:59:78:45:b4:af:26:12:f9:0d:6c:fa:94:5c:13:ed:6b:
8a:c3:42:40:9b:23:28:f5:5c:ca:de:23:cd:8f:5b:f3:fc:48:
f0:8e:3e:ec:c3:45:42:ca:2a:1e:f1:ba:7c:e6:4d:9e:62:6f:
c1:cd:f6:b9:8e:d0:6e:03:2b:07:17:4a:9d:a4:9b:54:c1:21:
1a:c3:48:b5:ab:4d:29:81:c2:25:4e:d8:df:9f:82:cb:4f:94:
b4:dd:fe:e0:ae:53:0e:62:23:23:f5:3d:7a:d6:7a:4a:00:15:
3e:24:c1:8e:16:c2:82:07:ef:5c:c8:61:82:55:72:28:4a:b4:
f8:5e:1b:57:26:0f:12:28:34:05:d0:91:b5:88:b5:ef:d7:f7:
4d:d3:e5:f9:66:38:39:4a:dc:f4:40:fb:53:f9:c0:ac:24:21:
98:51:b6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 05:55:20 2025 by rpki-client