Manifest
$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.mft
File: 1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.mft (raw, json)
Hash identifier: j0TrK5FXg3rcTtOKAZZTomdC5Y6v+TakMJFgCJYDdeo=
Subject key identifier: 3F:CA:F2:90:FA:63:B6:80:80:62:69:89:03:88:19:72:7A:82:8C:49
Authority key identifier: 1D:ED:24:ED:91:CC:BE:68:92:05:16:E1:B4:70:6E:5D:FF:41:D7:D2
Certificate issuer: /CN=1ded24ed91ccbe68920516e1b4706e5dff41d7d2
Certificate serial: 56EAD4D9615657775D2E0EA3F561FC816D088E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/He0k7ZHMvmiSBRbhtHBuXf9B19I.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.mft
Manifest number: 0A
Signing time: Tue 21 Jul 2026 19:20:29 +0000
Manifest this update: Tue 21 Jul 2026 19:15:29 +0000
Manifest next update: Wed 22 Jul 2026 21:00:29 +0000
Files and hashes: 1: AS219189.asa (hash: wWAacWaZcsY8QZBLd0Bp3B+bJc7mB2N0J7IWkzFhuVI=)
2: 1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.crl (hash: Xob84V7pS/ZBcxdLcR6soDpF144MrZ/NiEoiS7tRThI=)
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.mft
rsync://rpki.ripe.net/repository/DEFAULT/He0k7ZHMvmiSBRbhtHBuXf9B19I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ea:d4:d9:61:56:57:77:5d:2e:0e:a3:f5:61:fc:81:6d:08:8e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ded24ed91ccbe68920516e1b4706e5dff41d7d2
Validity
Not Before: Jul 21 19:15:29 2026 GMT
Not After : Jul 22 21:00:29 2026 GMT
Subject: CN=3FCAF290FA63B68080626989038819727A828C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:26:1e:c1:9d:75:8d:96:a0:92:10:89:38:
4a:30:a8:73:f7:9f:10:ec:bd:ec:cc:e6:11:07:a2:
ba:95:3b:bf:04:b7:46:cf:6d:7a:19:34:01:c4:56:
69:ae:f0:69:da:a3:7b:be:70:f6:0d:eb:c1:54:a1:
05:83:cb:76:e1:3e:6b:7d:c7:02:93:be:32:87:0e:
b9:69:29:af:95:f0:c8:66:3b:ed:1b:ae:95:46:7f:
69:30:83:03:ba:45:d2:a3:02:c4:42:e5:4f:cf:9a:
aa:88:9c:db:91:f3:5b:b5:97:e0:f0:b3:e1:11:7a:
84:fb:62:00:9c:c8:ab:f6:bb:dd:bd:87:dc:05:e7:
99:cd:3b:41:41:0c:75:24:28:56:22:47:07:f8:0a:
bb:da:83:13:16:db:85:f3:27:03:57:29:7a:da:ff:
ee:fb:ee:f9:a6:f7:9b:03:dc:04:8d:10:da:f0:6d:
57:a2:5b:ba:a6:12:37:57:18:14:29:3a:4e:6d:39:
b2:e3:7c:56:02:e4:cb:ba:ce:09:79:8a:2c:42:88:
b3:7c:d0:0d:72:a7:9f:8c:0e:d3:8b:e0:f8:2a:77:
74:1c:28:d8:86:23:94:44:46:3d:dd:53:c8:44:2c:
c1:39:e7:37:02:48:ca:cb:4b:ed:31:07:5f:a5:32:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CA:F2:90:FA:63:B6:80:80:62:69:89:03:88:19:72:7A:82:8C:49
X509v3 Authority Key Identifier:
keyid:1D:ED:24:ED:91:CC:BE:68:92:05:16:E1:B4:70:6E:5D:FF:41:D7:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/He0k7ZHMvmiSBRbhtHBuXf9B19I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cd:f2:15:1a:37:5a:17:79:50:8e:f2:8f:0a:1a:70:79:fb:
41:73:43:43:9f:f8:b2:6b:81:8e:e3:e3:88:d5:75:2c:7f:0b:
6c:6e:b4:4a:62:0f:0e:e2:3c:26:24:08:2a:4e:ca:e2:87:9d:
bc:b9:bd:18:1d:b9:27:19:5b:0d:48:dc:a3:d6:80:e6:26:4b:
07:6b:88:cf:b0:c9:f2:30:9c:0b:78:64:43:7b:a9:05:7e:b3:
15:c1:07:1d:81:6b:9d:32:19:0f:b7:bc:be:15:46:09:4e:bd:
38:6e:6f:ea:69:c3:85:7f:63:c2:b8:c4:7c:b9:bc:19:f2:f1:
0c:f8:f4:53:06:b8:0d:ee:5e:00:38:23:67:6e:6f:12:73:9b:
56:2e:d0:7a:73:1b:22:88:0b:ea:51:0e:44:a0:db:b2:2e:95:
a9:30:2e:1a:88:55:d5:2c:b2:8d:98:4a:8e:75:de:91:9d:63:
0c:42:21:92:39:62:52:d6:44:6c:f5:42:46:2a:8b:9b:b7:0b:
9b:96:97:7c:36:75:b5:c6:c8:93:fb:6e:c7:62:78:3b:83:22:
af:67:88:12:e3:bd:a4:16:91:e6:33:09:3a:7e:94:2f:c5:ac:
00:29:aa:b5:53:df:f7:f5:2a:b5:bc:51:fe:0b:8b:1f:ba:c0:
f5:7f:78:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:21 2026 by rpki-client