$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json) Hash identifier: dv1FZzA6NLpdv8M+nJHKZJnqyoiZq+kDQ56ZK32p5/w= Subject key identifier: CA:7F:41:A6:52:FB:E7:8F:B2:9B:CC:78:2A:64:A2:46:7D:8D:AC:F2 Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389 Certificate serial: 31564D69DD63976C4A0B00E909BE6DCBB559235A Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft Manifest number: 01E6 Signing time: Sat 14 Jun 2025 13:52:31 +0000 Manifest this update: Sat 14 Jun 2025 13:47:31 +0000 Manifest next update: Sun 15 Jun 2025 14:14:31 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: m89ZFrtERSsDZG1wpOL9gfPUYa5pxTR7b8W0Hi9AIZ0=) Validation: OK Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 14:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:56:4d:69:dd:63:97:6c:4a:0b:00:e9:09:be:6d:cb:b5:59:23:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389 Validity Not Before: Jun 14 13:47:31 2025 GMT Not After : Jun 15 14:14:31 2025 GMT Subject: CN=CA7F41A652FBE78FB29BCC782A64A2467D8DACF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ff:4c:6d:16:7a:29:df:8f:89:da:e4:13:a9: 0a:48:e6:41:71:43:f4:6e:e9:ca:38:9e:dd:d1:ac: b7:df:df:76:3c:8b:b6:0e:29:25:e4:aa:1c:8c:f9: 0b:39:bf:31:16:46:6f:91:e7:a0:cb:33:69:ad:87: 88:b0:77:49:c0:4a:81:bb:b6:69:14:bc:f1:a9:ff: b2:d2:bd:c4:9f:67:86:99:99:f0:b8:29:81:af:e9: 14:b1:c1:fb:6b:f0:76:82:d5:4c:15:c2:0b:5d:ad: bb:d1:93:18:58:0a:5a:f0:80:8c:32:e7:0f:1b:f3: 22:c1:6a:30:8e:2d:73:78:b9:79:b8:a5:c0:17:99: 71:e1:db:09:34:df:f5:2f:af:7d:18:d7:52:b9:57: 8a:27:3f:3c:9c:08:eb:c3:60:9e:67:4b:ac:a2:b0: 20:6a:bf:68:8c:c7:e7:5a:97:ca:bf:ef:b7:d5:2c: f0:2d:53:ca:86:96:1a:93:ed:f6:a3:74:d8:60:c9: 7f:2e:c1:94:60:85:e3:e6:83:58:45:a9:ac:57:f4: 36:95:b7:38:e0:77:d3:8a:ce:84:d1:90:f8:df:77: 74:aa:4e:b1:78:e7:bd:f0:6a:75:08:b2:e9:fa:47: 0f:ae:94:ca:12:5a:b5:a7:c5:25:bc:5b:a5:c3:4a: ba:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7F:41:A6:52:FB:E7:8F:B2:9B:CC:78:2A:64:A2:46:7D:8D:AC:F2 X509v3 Authority Key Identifier: keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject Information Access: Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c5:43:b7:75:b0:67:40:b8:71:ae:ff:4d:5b:49:be:c8:20: 1b:44:ce:56:15:51:2e:ca:77:38:b9:df:08:37:2a:b3:19:2f: 46:92:28:1c:a0:e5:99:b5:42:da:6b:0b:9b:a0:f7:54:6f:c1: 2f:58:21:59:c8:b1:03:3d:2f:f3:84:7e:f5:21:68:fd:6d:44: e0:15:d8:64:f3:5c:13:ee:8b:55:e4:52:d3:71:30:3e:77:ab: b7:1e:35:1a:20:89:95:6e:fe:5b:81:46:5b:48:17:ac:6c:ca: 9a:80:59:ce:7c:ac:7a:a9:dc:b6:c5:11:0d:a5:e1:5f:37:9a: de:14:1b:52:81:d8:eb:cf:57:67:1b:ba:4e:e9:98:79:b7:2d: 26:bf:7c:86:78:6b:14:df:26:55:25:29:85:99:35:3d:ef:7c: 1b:3d:49:51:3f:25:8e:ca:46:97:30:24:8c:73:33:f7:2d:29: a1:24:6a:52:1b:8e:5e:49:a4:f8:b0:d0:18:e1:dd:b3:ec:df: e2:b0:ae:1c:64:9b:95:51:6c:7f:60:ac:3d:e3:24:9c:d6:8f: db:01:2a:15:8e:c5:39:af:6f:d0:ff:4b:01:e0:00:a9:f4:d5: f4:07:5b:d5:77:53:0d:42:fb:61:0a:16:e8:44:3a:8c:37:f0: b9:32:2a:38 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUMVZNad1jl2xKCwDpCb5ty7VZI1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2MjNBQTZDMzBGQThFMDU4MjQzNzA4RjU2NzJENzk2 MEU1MjM4OTAeFw0yNTA2MTQxMzQ3MzFaFw0yNTA2MTUxNDE0MzFaMDMxMTAvBgNV BAMTKENBN0Y0MUE2NTJGQkU3OEZCMjlCQ0M3ODJBNjRBMjQ2N0Q4REFDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT/0xtFnop34+J2uQTqQpI5kFx Q/Ru6co4nt3RrLff33Y8i7YOKSXkqhyM+Qs5vzEWRm+R56DLM2mth4iwd0nASoG7 tmkUvPGp/7LSvcSfZ4aZmfC4KYGv6RSxwftr8HaC1UwVwgtdrbvRkxhYClrwgIwy 5w8b8yLBajCOLXN4uXm4pcAXmXHh2wk03/Uvr30Y11K5V4onPzycCOvDYJ5nS6yi sCBqv2iMx+dal8q/77fVLPAtU8qGlhqT7fajdNhgyX8uwZRghePmg1hFqaxX9DaV tzjgd9OKzoTRkPjfd3SqTrF4573wanUIsun6Rw+ulMoSWrWnxSW8W6XDSrr3AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUyn9BplL754+ym8x4KmSiRn2NrPIwHwYDVR0j BBgwFoAUyGI6psMPqOBYJDcI9WcteWDlI4kwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcm92LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMu bmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8zL0M4NjIzQUE2QzMwRkE4RTA1ODI0 MzcwOEY1NjcyRDc5NjBFNTIzODkuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEF BQcwAoZecnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5l dGxhYnMvMS9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5 LmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jvdi1t ZWFzdXJlbWVudHMubmxuZXRsYWJzLm5ldC9yZXBvL3Jvdi1tZWFzdXJlbWVudHMv My9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5Lm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAcMVDt3WwZ0C4ca7/TVtJvsggG0TOVhVRLsp3OLnfCDcqsxkvRpIoHKDl mbVC2msLm6D3VG/BL1ghWcixAz0v84R+9SFo/W1E4BXYZPNcE+6LVeRS03EwPner tx41GiCJlW7+W4FGW0gXrGzKmoBZznyseqnctsURDaXhXzea3hQbUoHY689XZxu6 TumYebctJr98hnhrFN8mVSUphZk1Pe98Gz1JUT8ljspGlzAkjHMz9y0poSRqUhuO Xkmk+LDQGOHds+zf4rCuHGSblVFsf2CsPeMknNaP2wEqFY7FOa9v0P9LAeAAqfTV 9Adb1XdTDUL7YQoW6EQ6jDfwuTIqOA== -----END CERTIFICATE-----Generated at Sun Jun 15 07:38:45 2025 by rpki-client