$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft File: 88332C8750CC71629E694FDDB3615AE083589921.mft (raw, json) Hash identifier: OBDyxENvmt7I3udOw6dLo30qbWj0px4sw3FKVACGU4I= Subject key identifier: 86:08:EA:67:50:A7:82:2A:E2:93:88:90:63:92:85:DE:08:90:77:B7 Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21 Certificate issuer: /CN=88332c8750cc71629e694fddb3615ae083589921 Certificate serial: 74613E620982B7498FC2FD0252DFC7957AD53B0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft Manifest number: 33 Signing time: Sat 30 Aug 2025 20:59:44 +0000 Manifest this update: Sat 30 Aug 2025 20:54:44 +0000 Manifest next update: Sun 31 Aug 2025 23:48:44 +0000 Files and hashes: 1: 326130623a346238313a313030333a3a2f34382d3438203d3e203331383938.roa (hash: zOMFMc1IDoQLMA29y4I8ThG00Jbepu49yj8BhUFAhPo=) 2: 326130623a346238313a313030303a3a2f34382d3438203d3e20323134343032.roa (hash: kH/MtqMD4GBrxNbGxiKtOK2S9dP8RTkPgNVL8rpxdLk=) 3: 326130623a346238313a313031303a3a2f34342d3434203d3e203539343439.roa (hash: y9QEUTLOCvxE4mUeK87Kf1xEE7IN44R877ZM+6e7628=) 4: 88332C8750CC71629E694FDDB3615AE083589921.crl (hash: YYPV1G8/dQM+V8qD1+THf86W3uksP33y7w1dE9XW8nQ=) 5: 326130623a346238313a313030313a3a2f34382d3438203d3e20323130303431.roa (hash: qi7WbXf/3QSpMq9ps0r6CahGGK7jqrbESmGomORXO8M=) 6: 326130623a346238313a313030343a3a2f34382d3438203d3e20323133353938.roa (hash: ZHIA9xafUnCffPvNkSKqb73VAW2qkAjwUVw9xxt1CI8=) 7: 326130623a346238303a3a2f32392d3239203d3e20323134343032.roa (hash: KyJ4hTRB6MgjD4XdMFzPoO4qu9Nx0aBOZVfoabKnMws=) 8: AS214714.asa (hash: 1jmVDPCMxvPogTQCXNTPDULeHgXoapqzXTxBUV9inm4=) 9: AS214402.asa (hash: O/nHx+W0fVkEPT2XZqHSvyHR+3tFTecWoj98CV93DHs=) Validation: OK Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 31 Aug 2025 23:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:61:3e:62:09:82:b7:49:8f:c2:fd:02:52:df:c7:95:7a:d5:3b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88332c8750cc71629e694fddb3615ae083589921 Validity Not Before: Aug 30 20:54:44 2025 GMT Not After : Aug 31 23:48:44 2025 GMT Subject: CN=8608EA6750A7822AE2938890639285DE089077B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bd:06:51:20:59:68:2c:a6:0e:bd:0b:72:d5: 44:3a:3e:a1:4c:96:5b:d6:d2:30:1b:61:a0:8f:68: 77:fc:6f:04:6e:79:33:c8:57:9b:34:3d:16:f1:97: ac:09:7e:fb:4b:76:0d:30:3e:83:44:e1:b3:3d:89: 65:28:65:9b:26:a2:b8:bf:e0:2d:ad:15:00:ba:e8: 4b:af:f6:2a:54:f1:a7:95:2e:40:58:ce:b8:32:e2: 55:61:4e:c4:76:49:fb:1f:7f:f3:2f:a1:ed:b2:e4: 25:ae:1e:4f:b5:ab:bc:c9:d0:f1:5c:2c:43:30:5d: c0:d9:21:0c:45:41:0d:24:01:72:11:c2:73:55:aa: f0:68:27:b8:12:2f:7c:c8:13:b7:de:80:70:e8:df: b4:87:8c:ea:20:42:d2:20:ed:1f:e7:52:27:7e:76: 83:01:ce:14:98:6b:4b:27:95:61:4a:8d:5a:40:77: 29:dd:67:51:1c:42:af:44:7d:2f:86:6e:1d:71:b1: 37:c7:2f:89:07:35:4c:31:7c:1b:d7:35:5d:7e:44: 1f:8f:b3:e9:f3:17:b8:66:48:7f:9c:2a:a9:4e:01: 97:60:1c:4a:3a:59:f3:18:66:67:b1:ba:76:4b:36: b4:0e:43:68:45:a4:84:a9:f5:1d:43:97:ff:c3:2d: c1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:08:EA:67:50:A7:82:2A:E2:93:88:90:63:92:85:DE:08:90:77:B7 X509v3 Authority Key Identifier: keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer Subject Information Access: Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:af:54:3f:17:91:1c:79:67:d9:69:b1:4c:57:69:c2:4e:7f: f6:a0:41:af:a2:b8:7c:ee:f3:05:11:8e:32:fc:9b:12:fe:4c: 76:c1:78:e5:da:d1:94:1f:76:b6:5a:14:bd:2b:39:39:4f:3c: 4d:86:11:b7:c8:d2:dc:62:eb:ff:34:be:c9:50:b5:26:3d:58: a4:d3:13:6a:eb:04:bf:9c:cd:d3:f3:5c:1b:42:66:19:22:37: 2f:7a:ab:c7:44:f8:9f:fa:c9:04:fd:ae:51:e3:df:ed:e0:cc: c2:7b:b1:56:53:13:e1:66:cd:81:37:8e:93:27:11:0e:da:8d: 31:ab:40:51:de:d8:13:3b:43:02:b7:9f:61:fb:fa:78:b2:fb: cc:db:8c:73:1e:b3:46:f9:d4:c5:0f:87:e9:56:61:c3:87:93: 17:19:43:2e:5a:ff:d8:e0:0a:0c:26:df:40:0f:6a:48:1f:53: de:c3:20:eb:f2:a5:f0:23:3d:85:42:16:7e:33:75:17:03:7f: 32:10:2b:22:42:ec:d1:0a:46:1b:12:15:b6:b0:a8:94:a8:e4: 41:78:e3:e4:e9:b7:66:e3:1c:15:96:92:94:12:6e:77:32:93: 8c:4e:7d:60:0e:8e:cc:a9:31:2f:75:73:a4:3d:d6:3b:6e:af: fe:d1:a0:60 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUdGE+YgmCt0mPwv0CUt/HlXrVOw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzMzJjODc1MGNjNzE2MjllNjk0ZmRkYjM2MTVhZTA4 MzU4OTkyMTAeFw0yNTA4MzAyMDU0NDRaFw0yNTA4MzEyMzQ4NDRaMDMxMTAvBgNV BAMTKDg2MDhFQTY3NTBBNzgyMkFFMjkzODg5MDYzOTI4NURFMDg5MDc3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcvQZRIFloLKYOvQty1UQ6PqFM llvW0jAbYaCPaHf8bwRueTPIV5s0PRbxl6wJfvtLdg0wPoNE4bM9iWUoZZsmori/ 4C2tFQC66Euv9ipU8aeVLkBYzrgy4lVhTsR2Sfsff/Mvoe2y5CWuHk+1q7zJ0PFc LEMwXcDZIQxFQQ0kAXIRwnNVqvBoJ7gSL3zIE7fegHDo37SHjOogQtIg7R/nUid+ doMBzhSYa0snlWFKjVpAdyndZ1EcQq9EfS+Gbh1xsTfHL4kHNUwxfBvXNV1+RB+P s+nzF7hmSH+cKqlOAZdgHEo6WfMYZmexunZLNrQOQ2hFpISp9R1Dl//DLcFnAgMB AAGjggH3MIIB8zAdBgNVHQ4EFgQUhgjqZ1Cngirik4iQY5KF3giQd7cwHwYDVR0j BBgwFoAUiDMsh1DMcWKeaU/ds2Fa4INYmSEwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud HwRmMGQwYqBgoF6GXHJzeW5jOi8va3JpbGwuc2lnbmFseC5jbG91ZC9yZXBvL3Np Z25hbHgtcnBraS82Lzg4MzMyQzg3NTBDQzcxNjI5RTY5NEZEREIzNjE1QUUwODM1 ODk5MjEuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9pRE1zaDFETWNXS2VhVV9k czJGYTRJTlltU0UuY2VyMHgGCCsGAQUFBwELBGwwajBoBggrBgEFBQcwC4ZccnN5 bmM6Ly9rcmlsbC5zaWduYWx4LmNsb3VkL3JlcG8vc2lnbmFseC1ycGtpLzYvODgz MzJDODc1MENDNzE2MjlFNjk0RkREQjM2MTVBRTA4MzU4OTkyMS5tZnQwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB ADmvVD8XkRx5Z9lpsUxXacJOf/agQa+iuHzu8wURjjL8mxL+THbBeOXa0ZQfdrZa FL0rOTlPPE2GEbfI0txi6/80vslQtSY9WKTTE2rrBL+czdPzXBtCZhkiNy96q8dE +J/6yQT9rlHj3+3gzMJ7sVZTE+FmzYE3jpMnEQ7ajTGrQFHe2BM7QwK3n2H7+niy +8zbjHMes0b51MUPh+lWYcOHkxcZQy5a/9jgCgwm30APakgfU97DIOvypfAjPYVC Fn4zdRcDfzIQKyJC7NEKRhsSFbawqJSo5EF44+Tpt2bjHBWWkpQSbncyk4xOfWAO jsypMS91c6Q91jtur/7RoGA= -----END CERTIFICATE-----Generated at Sun Aug 31 16:58:14 2025 by rpki-client