Krill trust anchor man page
Synopsis
krillta SUBCOMMAND [options]
Description
The krillta tool is used for managing a Krill based RPKI Trust Anchor.
Subcommands
- proxy
Manage the Trust Anchor Proxy
- init
Initialise the proxy
- id
Get the proxy ID certificate details
- repo
Manage the repository for proxy
- signer
Manage interactions with the associated signer
- init
Initialise signer association
OPTIONS
- -i <INFO>, --info=<INFO>
Path to the the Trust Anchor Signer info file (as ‘signer show’)
- update
Update signer association
OPTIONS
- -i <INFO>, --info=<INFO>
Path to the the Trust Anchor Signer info file (as ‘signer show’)
- make-request
Make a NEW request for the signer (fails if a request exists)
- show-request
Show existing request for the signer (fails if there is no request)
- process-response
Process a response from the signer. Fails it not for the open request
OPTIONS
- -r <RESPONSE>, --response=<RESPONSE>
Path to the the Trust Anchor Signer info file (as ‘signer show’)
- children
Manage children under the TA proxy
OPTIONS
- signer
Manage the Trust Anchor Signer
- init
Initialise the signer
OPTIONS
- -i <PROXY_ID>, --proxy-id=<PROXY_ID>
Path to the proxy ID JSON file
- -r <PROXY_REPOSITORY_CONTACT>, --proxy-repository-contact=<PROXY_REPOSITORY_CONTACT>
Path to the proxy repository contact JSON file
- --tal-rsync=<TAL_RSYNC>
The rsync URI used for TA certificate on TAL and AIA
- --tal-https=<TAL_HTTPS>
The HTTPS URI used for the TAL
- --private-key-pem=<PRIVATE_KEY_PEM>
Import an existing private key in PEM format
- --initial-manifest-number=<INITIAL_MANIFEST_NUMBER>
Set the initial manifest number
- reissue
Reissue the TA certificate
OPTIONS
- -i <PROXY_ID>, --proxy-id=<PROXY_ID>
Path to the proxy ID JSON file
- -r <PROXY_REPOSITORY_CONTACT>, --proxy-repository-contact=<PROXY_REPOSITORY_CONTACT>
Path to the proxy repository contact JSON file
- --tal-rsync=<TAL_RSYNC>
The rsync URI used for TA certificate on TAL and AIA
- --tal-https=<TAL_HTTPS>
The HTTPS URI used for the TAL
- show
Show the signer info
- process
Process a proxy request
OPTIONS
- last
Show last response
- exchanges
Show full history of proxy signer exchanges
OPTIONS
See also
krill(1), krill.conf(5), krillc(1), krillup(1)