Manifest
$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.mft
File: 1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.mft (raw, json)
Hash identifier: 2zo2Pkov7sr0y83kSuRDTSVaF0yFZPIck8MS1Nf8w4g=
Subject key identifier: 7C:04:2C:05:AD:A3:3F:E0:B5:31:51:69:9D:70:EC:2F:5E:04:E1:16
Authority key identifier: 1D:ED:24:ED:91:CC:BE:68:92:05:16:E1:B4:70:6E:5D:FF:41:D7:D2
Certificate issuer: /CN=1ded24ed91ccbe68920516e1b4706e5dff41d7d2
Certificate serial: 3249D8F76BA2E40F89B4ECD0E581402A7CF4C534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/He0k7ZHMvmiSBRbhtHBuXf9B19I.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.mft
Manifest number: 13
Signing time: Tue 28 Jul 2026 09:36:59 +0000
Manifest this update: Tue 28 Jul 2026 09:31:59 +0000
Manifest next update: Wed 29 Jul 2026 09:42:59 +0000
Files and hashes: 1: 1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.crl (hash: yU6rL0+/wMQfBb92y7Gb9ULimWAOgqYLosH9cgGWQAo=)
2: AS219189.asa (hash: wWAacWaZcsY8QZBLd0Bp3B+bJc7mB2N0J7IWkzFhuVI=)
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.mft
rsync://rpki.ripe.net/repository/DEFAULT/He0k7ZHMvmiSBRbhtHBuXf9B19I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:49:d8:f7:6b:a2:e4:0f:89:b4:ec:d0:e5:81:40:2a:7c:f4:c5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ded24ed91ccbe68920516e1b4706e5dff41d7d2
Validity
Not Before: Jul 28 09:31:59 2026 GMT
Not After : Jul 29 09:42:59 2026 GMT
Subject: CN=7C042C05ADA33FE0B53151699D70EC2F5E04E116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:a7:49:42:3d:d7:b6:03:40:1d:9c:11:b5:
05:56:78:fd:30:1a:72:72:00:b3:df:61:23:95:9a:
4b:8f:3e:c2:45:b0:19:dd:6a:eb:2d:63:83:05:db:
c6:3f:36:63:b8:f9:13:75:64:be:bc:ca:60:b5:f2:
72:e0:35:f2:69:2c:6f:5f:9c:ff:db:ff:b6:35:9f:
10:12:e3:ef:f8:9a:05:aa:28:d6:6a:a1:9e:0e:65:
c9:ec:4c:05:cc:02:f5:51:24:52:4f:5f:e1:07:98:
b5:be:70:53:d1:95:df:de:7f:13:97:d4:6e:04:25:
e6:5b:90:74:13:49:83:28:a2:70:59:4d:bf:22:9e:
36:07:b7:60:3f:2d:97:38:67:ed:55:71:93:17:20:
ef:88:9c:c0:0a:cc:b5:c2:8e:ec:6d:c6:fb:58:0a:
dd:96:77:74:2e:3c:b8:ca:71:5d:6b:27:e3:bf:a6:
97:8c:01:c5:61:f6:38:45:d4:af:4d:c3:12:e1:ec:
ff:d8:87:bf:43:c2:c1:25:fc:23:e4:ed:58:c1:98:
5a:a8:1e:20:2a:6f:9c:43:29:52:5a:d9:fa:46:06:
6d:87:78:5b:33:a6:75:96:91:d6:ae:ec:b4:e9:f7:
45:7a:27:82:a4:b3:87:cd:b1:bc:69:a6:bf:90:92:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:04:2C:05:AD:A3:3F:E0:B5:31:51:69:9D:70:EC:2F:5E:04:E1:16
X509v3 Authority Key Identifier:
keyid:1D:ED:24:ED:91:CC:BE:68:92:05:16:E1:B4:70:6E:5D:FF:41:D7:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/He0k7ZHMvmiSBRbhtHBuXf9B19I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d7:c6:1f:76:49:27:d4:aa:38:41:40:40:db:5a:05:5d:fb:
1d:7d:59:b4:59:66:7f:d1:d2:a7:7d:bc:3b:f3:81:17:f7:95:
c4:44:cc:cc:94:9a:88:0c:26:ea:68:a7:29:c4:3b:b2:18:de:
18:6c:e4:42:70:3a:86:09:05:9d:d4:77:47:18:ac:65:91:8b:
dd:c4:a9:d8:ea:a2:1c:55:9b:db:df:38:e6:fe:ad:63:ed:97:
a2:7f:e9:4a:b2:84:e0:49:cf:73:28:d4:6c:97:27:3e:23:f0:
b5:71:c3:3c:b8:dd:1f:34:af:97:da:c6:86:9c:7e:93:12:2c:
1c:02:61:ae:d4:ab:f8:ab:18:17:22:3f:7b:96:e0:92:19:35:
b0:30:da:eb:18:1f:5f:4a:17:6c:72:47:ec:dc:0f:3e:2d:b3:
73:68:51:c3:6e:fe:73:d1:7f:48:fc:16:9a:fa:cd:b6:10:53:
24:dd:d6:b1:53:cf:38:80:f2:2e:88:95:35:67:80:d8:82:0e:
34:61:fe:a1:94:06:43:a4:ff:fe:8f:95:06:75:5b:6f:fe:f1:
a4:59:10:99:22:63:2e:50:96:ab:6a:04:16:67:29:d9:a6:ae:
f2:f4:d2:2b:a0:4e:50:cc:b9:41:16:d0:ea:63:cb:1e:91:e2:
fc:a1:c2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:38:50 2026 by rpki-client