Manifest
$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
File: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft (raw, json)
Hash identifier: LxjkW+RtiJnWdmfueQ6P0j3JfHdFRz9L9WVIDmX4VjQ=
Subject key identifier: 8A:A7:5E:53:96:5E:86:EA:9F:47:32:AD:3D:E8:7F:4F:5B:67:EC:A0
Authority key identifier: 3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
Certificate issuer: /CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Certificate serial: 157036BC5EE1A86AF896779EFE2064B192A5B3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
Manifest number: 13
Signing time: Tue 21 Jul 2026 17:23:55 +0000
Manifest this update: Tue 21 Jul 2026 17:18:55 +0000
Manifest next update: Wed 22 Jul 2026 19:36:55 +0000
Files and hashes: 1: AS214420.asa (hash: C65jtOjBlpPjRzqYy4fJANSK9FHM6Yz6hs95qtJ1op4=)
2: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl (hash: HR8MPM8lTlpY8EvnvauE2EJqu0btDuppAh4LRxYVjf0=)
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:70:36:bc:5e:e1:a8:6a:f8:96:77:9e:fe:20:64:b1:92:a5:b3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Validity
Not Before: Jul 21 17:18:55 2026 GMT
Not After : Jul 22 19:36:55 2026 GMT
Subject: CN=8AA75E53965E86EA9F4732AD3DE87F4F5B67ECA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:2a:a0:3a:80:8a:ad:5d:88:b0:ff:5d:c6:
70:1f:3b:53:d9:5a:8c:6e:42:28:4c:c9:83:f5:62:
be:4b:91:ed:89:83:57:82:b2:61:1e:7e:71:af:25:
7f:86:c1:95:62:c1:d3:96:23:6c:2f:a0:bd:2f:66:
e4:a8:d4:95:dc:1e:28:f2:ca:83:be:95:f0:76:26:
30:f8:e4:a0:b8:2a:6e:f8:ad:4a:c7:87:11:d5:c9:
9f:a1:4a:1b:c7:b9:b5:94:b8:28:d3:9c:cf:90:5e:
58:1e:2e:92:4b:13:52:b7:b7:e9:ca:68:38:9c:55:
03:7d:ee:d7:f6:8a:27:39:46:43:8f:0e:7a:dd:2d:
c3:6d:15:05:5a:0b:af:46:21:67:02:a6:59:cd:a3:
07:ca:ed:0a:ff:7a:e9:47:94:96:af:24:d7:f1:7f:
69:45:13:3a:e5:7d:a8:7a:4a:fe:90:68:d0:e8:47:
1d:49:9b:da:30:5b:86:e3:4d:df:13:1f:db:b2:0b:
4d:1b:1e:a0:51:ee:a1:b9:74:46:7a:b3:6c:ee:d9:
40:e7:e8:f0:c1:ee:cd:54:18:49:24:14:35:f4:7f:
11:eb:ec:32:4b:f6:76:1d:3b:c0:11:2f:98:88:ee:
17:00:ac:fc:9d:79:7c:7c:ff:3f:dd:67:80:4e:35:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:5E:53:96:5E:86:EA:9F:47:32:AD:3D:E8:7F:4F:5B:67:EC:A0
X509v3 Authority Key Identifier:
keyid:3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3d:e1:61:9d:7d:75:3a:e5:bd:72:fd:fe:ec:39:41:69:b1:
9c:74:b8:11:f5:32:0c:2e:1d:2f:de:4a:e3:93:a4:ba:a3:85:
26:31:a3:60:33:c0:bc:77:29:12:a3:70:45:21:04:80:5a:cc:
57:48:20:23:08:36:7e:9f:ab:3f:49:dc:ba:3e:f6:99:52:4b:
c2:a6:c4:39:b4:f5:34:41:d8:ae:ec:12:f5:38:9b:9f:bd:a5:
cd:6b:29:46:bd:10:20:93:cf:03:6a:c0:2b:4f:42:e5:9f:40:
7d:34:5d:66:80:0a:61:0c:58:8c:10:fa:b6:34:42:f0:84:63:
18:ef:99:8c:ea:2f:73:23:b8:fd:39:bd:56:f5:fc:7b:c3:22:
be:32:90:0c:d8:2c:2e:ea:f4:e0:3f:ef:74:bd:02:18:71:a3:
81:a9:15:d6:75:5c:3d:14:45:1a:4e:10:35:38:91:07:fa:c5:
8a:0c:de:7d:4c:87:68:db:8a:e3:5e:8f:94:46:a8:80:d1:95:
58:80:4d:4f:47:fa:50:86:73:60:f2:ec:c4:4a:39:95:d6:7f:
29:60:34:08:e3:2c:65:fb:c8:f4:08:29:5a:a4:18:88:b5:53:
d8:b8:a0:fd:be:0d:23:9a:c8:6e:e5:2d:8f:e7:60:f3:8e:e5:
58:09:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:10 2026 by rpki-client