$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json) Hash identifier: I4Wxbo7Yxui+0/cI7N99oU8vtrJPoworGJ162CnoZT4= Subject key identifier: 00:B5:54:0E:6C:4A:87:24:B4:78:35:81:8A:C9:CA:27:BA:40:F3:7B Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389 Certificate serial: 427337C11E4D670361E7C6DCF2028DF2AC294F5D Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft Manifest number: 02A5 Signing time: Tue 04 Nov 2025 22:40:01 +0000 Manifest this update: Tue 04 Nov 2025 22:35:01 +0000 Manifest next update: Thu 06 Nov 2025 01:28:01 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: 39EY0hpHJ0z79AV+RW9UdFSrPtilVqsotZNCV4xLsck=) Validation: OK Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 00:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:73:37:c1:1e:4d:67:03:61:e7:c6:dc:f2:02:8d:f2:ac:29:4f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389 Validity Not Before: Nov 4 22:35:01 2025 GMT Not After : Nov 6 01:28:01 2025 GMT Subject: CN=00B5540E6C4A8724B47835818AC9CA27BA40F37B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d9:61:29:d1:0f:96:25:11:1e:cb:99:ae:73: 4a:0e:62:99:b8:12:22:7e:39:d9:90:a4:04:c3:ac: e7:42:b4:97:3a:89:72:2b:18:28:47:a7:8d:50:bc: f4:f6:49:09:5a:2d:1c:e4:45:f4:45:99:93:ae:d4: f6:1c:e0:10:7f:c3:f3:02:e3:31:60:78:e4:67:27: 7d:81:5a:c0:27:e6:76:18:d4:23:24:19:1d:b9:4c: 38:13:a3:c0:69:b3:f1:e7:e6:6d:57:b4:01:39:2d: 0e:46:84:a7:e0:f5:7b:c5:00:19:46:ad:67:9c:d8: 5b:68:d0:15:bf:15:26:e3:ea:40:a8:cf:0b:9e:dd: 11:bd:f1:85:30:de:a4:8f:bf:9d:1a:68:74:a7:3e: e0:f4:4c:6a:ab:2c:38:c5:ce:6a:24:fa:b8:06:5f: 2a:50:11:f7:05:be:06:99:49:93:41:ad:1c:db:81: 73:14:f8:1a:23:0e:59:0b:0e:45:a2:8a:50:55:1c: e3:53:0f:4a:3c:e2:15:f5:84:13:40:9f:c7:9a:50: 05:c7:1b:cc:a2:05:c9:73:13:71:d8:60:58:56:11: eb:23:89:73:e1:bb:a4:a6:d6:2d:ec:61:ee:53:2f: 5f:51:55:a5:cf:c7:fb:da:f8:02:c5:b9:f3:05:91: 13:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B5:54:0E:6C:4A:87:24:B4:78:35:81:8A:C9:CA:27:BA:40:F3:7B X509v3 Authority Key Identifier: keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject Information Access: Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d7:c3:72:00:40:e5:a3:ff:3c:be:e5:d3:44:aa:94:73:da: 5f:90:05:54:b9:f2:61:15:5d:c3:ea:81:b0:ce:c7:9e:8f:a4: 5d:35:d7:6c:40:a7:78:14:0f:c8:bc:c6:d2:dc:90:c6:73:2e: 78:e4:e8:88:45:eb:d7:94:12:dd:2f:3b:55:56:8a:e6:09:d9: 12:e6:1e:55:e2:58:38:c9:22:21:a1:55:ac:fb:85:69:11:3e: c4:ef:3e:31:63:b6:2a:4f:3a:51:ad:4b:7f:45:f6:c2:f3:ca: a7:ab:5f:0e:b7:e3:7b:4c:9d:f3:dc:16:4b:d7:87:af:64:55: 49:a0:07:66:7a:b2:9e:14:95:07:5b:10:bb:35:28:17:33:3c: 39:f0:b4:83:cf:6f:3c:f1:e4:1d:28:80:74:3d:09:51:30:fb: 29:d8:c7:1d:6e:c1:65:c7:55:8c:b0:43:3f:c6:58:f8:67:40: de:12:14:c5:97:93:46:82:16:e6:f2:a7:19:27:e6:5a:7b:3e: b2:52:e6:71:6b:65:2c:9c:ae:0c:47:e8:d7:b5:43:71:22:c4: 88:0b:cf:a2:31:10:3b:da:02:f5:a9:a6:63:11:ca:78:1c:9b: 5c:70:ab:fe:36:30:63:53:84:6c:2c:af:a9:e7:d5:02:75:54: ff:48:1d:4c -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUQnM3wR5NZwNh58bc8gKN8qwpT10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2MjNBQTZDMzBGQThFMDU4MjQzNzA4RjU2NzJENzk2 MEU1MjM4OTAeFw0yNTExMDQyMjM1MDFaFw0yNTExMDYwMTI4MDFaMDMxMTAvBgNV BAMTKDAwQjU1NDBFNkM0QTg3MjRCNDc4MzU4MThBQzlDQTI3QkE0MEYzN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD12WEp0Q+WJREey5muc0oOYpm4 EiJ+OdmQpATDrOdCtJc6iXIrGChHp41QvPT2SQlaLRzkRfRFmZOu1PYc4BB/w/MC 4zFgeORnJ32BWsAn5nYY1CMkGR25TDgTo8Bps/Hn5m1XtAE5LQ5GhKfg9XvFABlG rWec2Fto0BW/FSbj6kCozwue3RG98YUw3qSPv50aaHSnPuD0TGqrLDjFzmok+rgG XypQEfcFvgaZSZNBrRzbgXMU+BojDlkLDkWiilBVHONTD0o84hX1hBNAn8eaUAXH G8yiBclzE3HYYFhWEesjiXPhu6Sm1i3sYe5TL19RVaXPx/va+ALFufMFkRN1AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUALVUDmxKhyS0eDWBisnKJ7pA83swHwYDVR0j BBgwFoAUyGI6psMPqOBYJDcI9WcteWDlI4kwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcm92LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMu bmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8zL0M4NjIzQUE2QzMwRkE4RTA1ODI0 MzcwOEY1NjcyRDc5NjBFNTIzODkuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEF BQcwAoZecnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5l dGxhYnMvMS9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5 LmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jvdi1t ZWFzdXJlbWVudHMubmxuZXRsYWJzLm5ldC9yZXBvL3Jvdi1tZWFzdXJlbWVudHMv My9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5Lm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAVdfDcgBA5aP/PL7l00SqlHPaX5AFVLnyYRVdw+qBsM7Hno+kXTXXbECn eBQPyLzG0tyQxnMueOToiEXr15QS3S87VVaK5gnZEuYeVeJYOMkiIaFVrPuFaRE+ xO8+MWO2Kk86Ua1Lf0X2wvPKp6tfDrfje0yd89wWS9eHr2RVSaAHZnqynhSVB1sQ uzUoFzM8OfC0g89vPPHkHSiAdD0JUTD7KdjHHW7BZcdVjLBDP8ZY+GdA3hIUxZeT RoIW5vKnGSfmWns+slLmcWtlLJyuDEfo17VDcSLEiAvPojEQO9oC9ammYxHKeByb XHCr/jYwY1OEbCyvqefVAnVU/0gdTA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:09:09 2025 by rpki-client