$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json) Hash identifier: UCUm7iXoipEXr1YrU08kDVgLVn+Cp5CgK4yNUQur04k= Subject key identifier: DF:F5:D0:15:54:1F:6E:52:80:EE:96:A6:2F:BD:B3:7D:9E:E4:37:34 Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389 Certificate serial: 0C7555FE7582E58569CB66D3694E9AA523F2B4B5 Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft Manifest number: 022B Signing time: Tue 05 Aug 2025 09:08:23 +0000 Manifest this update: Tue 05 Aug 2025 09:03:23 +0000 Manifest next update: Wed 06 Aug 2025 10:00:23 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: /R9zQIqqlbswypef9XPuTMhu1c3dKS8cXs5upNXTPyE=) Validation: OK Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 07:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:75:55:fe:75:82:e5:85:69:cb:66:d3:69:4e:9a:a5:23:f2:b4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389 Validity Not Before: Aug 5 09:03:23 2025 GMT Not After : Aug 6 10:00:23 2025 GMT Subject: CN=DFF5D015541F6E5280EE96A62FBDB37D9EE43734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cb:12:23:bd:d7:6d:63:bd:85:a6:39:d6:38: 8c:4b:88:c1:36:d2:3e:40:e5:36:9e:5d:ce:1e:a5: 0f:4a:96:40:1a:5a:01:be:e3:26:6c:5e:1b:15:29: 43:7a:62:bd:fc:39:a8:e4:c8:d6:19:e5:39:47:d5: 02:d3:91:c7:2d:25:38:ae:7a:71:2a:b3:3e:f2:26: 48:72:82:1e:90:0c:b1:59:78:f2:62:fe:89:0d:57: ba:c0:4a:31:8f:f0:ac:1e:04:9e:fe:c4:eb:d2:b0: c8:ea:31:ed:ac:50:90:9f:ae:9b:3f:2d:82:66:f7: 7f:67:05:34:2a:be:47:27:ce:48:8e:8a:d1:69:c7: 53:57:ef:da:92:c1:81:19:ad:8c:60:77:9b:85:02: 59:31:bf:48:0e:81:2f:5b:7c:54:71:59:ca:05:72: 79:92:2f:67:10:41:7f:88:fb:1f:18:fb:eb:b5:1e: 68:0b:3c:cf:87:ad:7b:82:dc:90:f7:8a:72:2c:0a: 46:2e:f9:41:0a:e3:76:93:97:23:c5:76:02:e1:9f: 35:2f:94:5f:d4:01:7b:82:29:97:66:76:78:f1:f9: 62:27:45:3c:ee:a6:13:47:54:83:a2:09:b4:c1:81: 4d:82:72:58:0b:0b:e7:14:a5:d1:4b:88:63:0e:5b: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F5:D0:15:54:1F:6E:52:80:EE:96:A6:2F:BD:B3:7D:9E:E4:37:34 X509v3 Authority Key Identifier: keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject Information Access: Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c2:11:45:37:d3:bf:5c:1c:1d:5d:f6:46:dc:25:df:4c:38: 79:9b:9c:a8:a8:6b:20:69:41:40:9e:c2:02:06:8a:ed:ad:6f: 47:88:c6:72:14:32:be:81:35:83:4b:2d:5e:4f:af:df:4e:3f: f1:2b:11:46:5d:6e:65:90:a2:09:3b:11:00:12:6e:84:15:c0: ae:1c:c9:1c:45:57:e0:f0:8e:6f:ae:dd:07:0c:82:1b:3d:af: c5:db:82:38:d8:c0:12:b9:7f:d0:39:a4:88:26:ea:81:6e:fe: 88:2c:6d:15:ba:e5:9b:83:05:64:84:79:d0:4e:c0:76:3d:b6: 47:18:d8:b2:49:9e:0b:e7:d2:04:a6:3f:c3:9d:49:5e:aa:f6: 01:dd:7d:28:fd:95:a2:26:bf:be:00:b0:f8:1d:69:52:28:45: c6:29:81:1d:f5:36:a7:2f:8e:9f:11:86:e7:f3:67:2e:55:30: ad:7d:fc:cf:a2:7b:d5:3c:ff:13:ae:df:56:13:36:01:19:e1: a9:a7:97:9e:af:50:09:41:d5:8b:93:60:fd:91:8f:1e:95:d2: 73:e6:06:77:af:83:32:87:e2:ba:7e:a6:c3:49:46:25:f4:09: ae:91:79:ae:03:f5:e8:13:32:38:11:54:39:cf:92:3a:0c:ec: 23:1d:f1:0e -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUDHVV/nWC5YVpy2bTaU6apSPytLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2MjNBQTZDMzBGQThFMDU4MjQzNzA4RjU2NzJENzk2 MEU1MjM4OTAeFw0yNTA4MDUwOTAzMjNaFw0yNTA4MDYxMDAwMjNaMDMxMTAvBgNV BAMTKERGRjVEMDE1NTQxRjZFNTI4MEVFOTZBNjJGQkRCMzdEOUVFNDM3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbyxIjvddtY72FpjnWOIxLiME2 0j5A5TaeXc4epQ9KlkAaWgG+4yZsXhsVKUN6Yr38OajkyNYZ5TlH1QLTkcctJTiu enEqsz7yJkhygh6QDLFZePJi/okNV7rASjGP8KweBJ7+xOvSsMjqMe2sUJCfrps/ LYJm939nBTQqvkcnzkiOitFpx1NX79qSwYEZrYxgd5uFAlkxv0gOgS9bfFRxWcoF cnmSL2cQQX+I+x8Y++u1HmgLPM+HrXuC3JD3inIsCkYu+UEK43aTlyPFdgLhnzUv lF/UAXuCKZdmdnjx+WInRTzuphNHVIOiCbTBgU2CclgLC+cUpdFLiGMOW4adAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQU3/XQFVQfblKA7pamL72zfZ7kNzQwHwYDVR0j BBgwFoAUyGI6psMPqOBYJDcI9WcteWDlI4kwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcm92LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMu bmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8zL0M4NjIzQUE2QzMwRkE4RTA1ODI0 MzcwOEY1NjcyRDc5NjBFNTIzODkuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEF BQcwAoZecnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5l dGxhYnMvMS9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5 LmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jvdi1t ZWFzdXJlbWVudHMubmxuZXRsYWJzLm5ldC9yZXBvL3Jvdi1tZWFzdXJlbWVudHMv My9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5Lm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEATMIRRTfTv1wcHV32Rtwl30w4eZucqKhrIGlBQJ7CAgaK7a1vR4jGchQy voE1g0stXk+v304/8SsRRl1uZZCiCTsRABJuhBXArhzJHEVX4PCOb67dBwyCGz2v xduCONjAErl/0DmkiCbqgW7+iCxtFbrlm4MFZIR50E7Adj22RxjYskmeC+fSBKY/ w51JXqr2Ad19KP2Voia/vgCw+B1pUihFximBHfU2py+OnxGG5/NnLlUwrX38z6J7 1Tz/E67fVhM2ARnhqaeXnq9QCUHVi5Ng/ZGPHpXSc+YGd6+DMofiun6mw0lGJfQJ rpF5rgP16BMyOBFUOc+SOgzsIx3xDg== -----END CERTIFICATE-----Generated at Tue Aug 5 16:37:19 2025 by rpki-client