Manifest
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
File: 02B5CF163150ADD82E90362AE55F3173D9749F05.mft (raw, json)
Hash identifier: ojuz13dGI9BBM2xeL9riQPaJgNg00aaKvhShbLVo1fQ=
Subject key identifier: F2:5B:9C:66:96:81:48:27:52:98:DE:EB:AA:34:BB:87:4D:08:AA:90
Authority key identifier: 02:B5:CF:16:31:50:AD:D8:2E:90:36:2A:E5:5F:31:73:D9:74:9F:05
Certificate issuer: /CN=02b5cf163150add82e90362ae55f3173d9749f05
Certificate serial: 739044E2CA477ECFA8DFCEA6B7765D442F4394E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArXPFjFQrdgukDYq5V8xc9l0nwU.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
Manifest number: A0
Signing time: Tue 11 Nov 2025 07:05:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:15:56 +0000
Files and hashes: 1: AS206788.asa (hash: Mg8pKFdzIKLQ7mgD8AoSpiq3AdSwb5SJyIc2hLm6NPw=)
2: 02B5CF163150ADD82E90362AE55F3173D9749F05.crl (hash: x3l8qc8SrNtT6DjLMgCT9dGlKnSHsP5TA/gVsl5Qgjs=)
3: 323030313a3637633a323864343a3a2f34382d3438203d3e20323036373838.roa (hash: PNmjJ5Y8FuXlXHnV22nAEjIm1Iwk0dySIizMcjGUUog=)
Validation: OK
Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.crl
rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArXPFjFQrdgukDYq5V8xc9l0nwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:90:44:e2:ca:47:7e:cf:a8:df:ce:a6:b7:76:5d:44:2f:43:94:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b5cf163150add82e90362ae55f3173d9749f05
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 08:15:56 2025 GMT
Subject: CN=F25B9C66968148275298DEEBAA34BB874D08AA90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:2a:b7:c3:5d:81:a4:ce:be:81:e3:ee:dd:
2c:00:c6:9f:48:a1:9f:cf:8e:87:4b:9f:c5:4c:29:
39:42:42:61:08:44:fe:ad:14:45:d6:3d:63:80:59:
70:f1:0c:69:d2:c7:38:29:dc:de:dd:3d:c7:91:35:
7c:45:d3:f3:80:13:66:52:bb:f3:d8:29:09:f2:a6:
a2:5a:ed:e5:48:73:f1:c8:28:d4:4f:25:7d:5c:6d:
6b:c2:3e:b3:33:04:e8:13:73:25:4d:07:af:4f:93:
aa:14:ec:a5:c3:96:c2:18:3e:c3:5d:d6:a4:96:87:
9a:37:39:8b:4f:eb:15:a9:21:2e:93:1f:80:2d:3a:
b5:c3:19:f9:b0:5b:2b:13:27:31:ae:89:35:18:58:
8e:70:23:fc:f6:1f:de:07:94:74:81:b9:67:85:ef:
7a:f0:97:38:27:1e:97:7e:0d:f0:23:6b:29:0c:7f:
81:8e:9d:dc:a9:e1:9f:97:a4:1b:5d:99:7d:2c:c0:
a3:e4:81:37:8d:56:cf:52:fd:fe:29:37:a1:c6:ce:
5f:5a:c3:e7:6d:f5:4d:d5:1e:4a:08:91:fc:d2:fb:
48:27:e4:c8:33:a9:9e:07:4b:2c:89:89:87:cc:ad:
a0:5a:b3:87:07:7b:2c:ee:1b:66:a5:77:4b:34:39:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5B:9C:66:96:81:48:27:52:98:DE:EB:AA:34:BB:87:4D:08:AA:90
X509v3 Authority Key Identifier:
keyid:02:B5:CF:16:31:50:AD:D8:2E:90:36:2A:E5:5F:31:73:D9:74:9F:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArXPFjFQrdgukDYq5V8xc9l0nwU.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8b:66:a6:39:fd:f8:99:b1:81:43:1f:62:40:73:77:06:72:
01:3b:92:f8:6a:5d:e3:19:99:0f:59:a6:2c:cd:8e:81:99:d6:
9a:9d:f2:f2:d2:c2:25:53:68:42:e8:01:f8:63:e6:89:7c:c7:
fe:4a:7b:25:2d:b1:83:a7:7f:45:2a:ab:a0:b9:e9:6e:06:6e:
d6:7b:56:4b:1e:50:a9:a0:10:99:68:6f:b5:5c:f6:e6:a6:bb:
58:34:39:e0:cd:1e:46:89:89:e1:e5:76:e3:32:46:22:28:09:
06:ef:fd:4d:d2:b1:c6:31:6f:9f:ca:6b:d9:df:47:7d:0f:e7:
4f:3c:51:16:e8:3f:97:40:8f:7c:10:30:2b:99:ca:c4:fc:79:
62:cd:5e:30:a5:5d:c0:e1:bf:e8:aa:ea:08:b8:87:ca:7a:ac:
47:d0:80:2f:6d:18:da:28:6b:c6:35:cd:50:5b:de:db:2f:9e:
c7:3e:85:0e:d7:00:81:fc:9a:02:64:6c:90:a5:02:bd:a7:9f:
b7:27:2e:48:57:c4:b7:d5:fa:10:be:34:af:fb:ba:a3:06:5a:
9c:6b:87:bf:1e:8b:57:0e:82:01:1d:8d:19:83:2a:2c:c7:3b:
ba:ad:40:5a:3a:69:0a:a4:ef:6d:48:5d:b7:89:10:2c:2e:ca:
6b:64:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:33 2025 by rpki-client