Manifest
$ rpki-client -vvvf rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
File: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft (raw, json)
Hash identifier: J1i/bfzYHcAMWhA3VWfcFRUEwvoSoqJbX6ykF9x/r84=
Subject key identifier: 6B:BB:05:4B:7F:BA:19:1D:72:9A:9C:B7:74:BA:89:61:4A:FF:50:7C
Authority key identifier: 3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
Certificate issuer: /CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Certificate serial: 9CEC85146CEF25664450F27D830F88E1BAC46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
Manifest number: 58
Signing time: Fri 04 Sep 2026 15:27:39 +0000
Manifest this update: Fri 04 Sep 2026 15:22:39 +0000
Manifest next update: Sat 05 Sep 2026 17:05:39 +0000
Files and hashes: 1: 3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl (hash: ttVcnHfhROdJ3ytyKws99ni43/2q7i3uP4fQb7hzynY=)
2: AS214420.asa (hash: C65jtOjBlpPjRzqYy4fJANSK9FHM6Yz6hs95qtJ1op4=)
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
9c:ec:85:14:6c:ef:25:66:44:50:f2:7d:83:0f:88:e1:ba:c4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Validity
Not Before: Sep 4 15:22:39 2026 GMT
Not After : Sep 5 17:05:39 2026 GMT
Subject: CN=6BBB054B7FBA191D729A9CB774BA89614AFF507C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:ab:06:a1:ed:ed:99:0a:c8:6b:58:52:01:
60:19:3b:ab:a7:c5:49:2b:ea:20:d5:af:72:e4:a8:
cd:90:f9:b1:94:41:65:ff:90:1a:ef:ed:e7:b4:9c:
93:40:14:5e:ff:b4:71:22:7e:1a:4c:e0:f7:e5:ee:
ba:10:9f:f2:b6:aa:bd:cb:2a:4c:11:a4:6f:99:3a:
a4:69:ae:eb:8e:bc:fa:05:51:25:b5:2c:84:aa:04:
d5:cc:4f:17:bc:c2:14:b7:20:19:57:96:5c:5c:32:
0b:f7:e7:9b:20:fd:fc:bf:07:31:f8:dc:14:33:e5:
dc:39:ea:1c:6f:df:52:92:ac:1f:70:8f:60:f7:74:
b2:a8:d8:64:5f:20:30:95:bb:da:5b:f0:78:ab:c5:
d2:a9:93:bc:6b:c7:a6:15:74:78:ee:00:6c:8d:98:
70:be:c8:28:50:a1:60:7e:25:28:f0:c7:d9:e0:0b:
71:ba:95:98:e8:d2:9d:d2:48:eb:44:4e:86:54:36:
24:8f:5a:36:24:13:83:ac:ac:9a:32:14:6a:73:0e:
91:71:1a:12:74:82:b2:f0:e2:1f:43:4d:4e:93:a7:
c7:7e:52:09:2e:57:92:0c:d6:01:4e:70:cf:3d:6e:
21:5e:76:a9:94:81:ac:b2:29:59:d0:9c:6c:64:72:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BB:05:4B:7F:BA:19:1D:72:9A:9C:B7:74:BA:89:61:4A:FF:50:7C
X509v3 Authority Key Identifier:
keyid:3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:1e:4a:a1:e8:9a:fa:b9:03:67:a9:a3:8f:10:c9:1e:dc:19:
62:40:ad:9d:f3:46:ab:6b:45:02:9a:74:93:cf:9b:46:42:e7:
d3:10:57:07:21:b5:91:71:d1:59:cc:4e:3e:f8:56:d0:c5:99:
88:a6:e3:fc:2b:d4:87:59:36:83:ed:ed:54:1b:0c:16:ec:71:
50:8c:e6:60:85:80:20:fe:08:77:f4:bc:f3:26:7e:a4:a5:14:
01:22:a6:d5:a0:a8:58:6b:b9:3b:3f:f1:6a:0a:d7:c4:4b:08:
79:84:3b:23:11:2d:f6:6e:d9:48:ed:ab:7b:02:60:e7:95:0f:
ea:49:7e:d2:2d:85:88:e7:2d:c5:21:ef:ec:25:88:b3:03:bb:
d7:3b:92:2c:47:cc:c7:ca:74:ef:70:35:03:ce:ad:7e:22:c2:
9e:b4:ac:e5:ce:ae:e4:7a:1b:bd:97:7e:ad:d2:a1:9b:90:60:
07:d8:ca:7a:84:b3:26:7e:e5:eb:01:94:9d:63:65:93:46:02:
d5:56:0b:ec:54:af:1f:03:08:c0:ce:51:1c:16:ab:e5:5a:f7:
1d:5d:75:03:fc:bf:c7:15:c8:a5:15:99:7c:f1:0b:70:51:64:
14:ed:82:5e:a5:48:7f:27:13:26:8c:bb:ea:f5:32:ea:8c:b1:
ad:f9:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:23:09 2026 by rpki-client