
$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier: YoDhKEYLKQgaEeaD3xPne0G47e1CCeJQW/jWpp5BPC0=
Subject key identifier: DD:FC:59:2D:17:4F:39:23:B5:17:D3:69:EA:C5:93:4C:B8:F7:E8:47
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial: 6F96826F8570636550BC5CBC2746C535BBDA670D
Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number: 037F
Signing time: Fri 17 Apr 2026 06:11:53 +0000
Manifest this update: Fri 17 Apr 2026 06:06:53 +0000
Manifest next update: Sat 18 Apr 2026 08:06:53 +0000
Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: OFOnq+cznq6z0ege38cQQDoCXVJXrsWXXJdX+Kcow40=)
Validation: OK
Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:96:82:6f:85:70:63:65:50:bc:5c:bc:27:46:c5:35:bb:da:67:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
Validity
Not Before: Apr 17 06:06:53 2026 GMT
Not After : Apr 18 08:06:53 2026 GMT
Subject: CN=DDFC592D174F3923B517D369EAC5934CB8F7E847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:91:89:21:b4:3f:0f:c7:55:7d:0b:b4:8a:
3b:89:29:18:65:a1:2f:03:b9:8e:b0:75:70:2a:d5:
b9:28:eb:7c:01:bb:e5:2f:66:5b:9f:a2:35:01:68:
14:eb:c6:a3:96:a7:65:4a:22:26:86:f4:1f:18:c7:
d7:dc:a8:4c:94:79:9e:dd:d1:01:89:b4:8c:85:ac:
87:72:eb:ad:76:2e:81:e7:f2:4f:85:b2:f0:f8:b8:
6f:95:95:2a:2f:2d:63:f3:f5:6c:c8:be:a9:ef:5a:
58:b9:86:6d:70:08:cf:68:1a:d3:c6:37:f5:0e:6e:
22:34:3f:36:90:14:b5:9c:17:1d:ae:d3:0d:1f:31:
8c:01:d0:ee:d6:2a:60:74:fc:e8:2a:1d:b9:b9:0b:
66:48:de:2a:10:ce:eb:ee:84:cf:6f:33:66:77:47:
98:47:ad:1e:03:58:18:b0:b6:6d:9c:05:00:c4:42:
71:a4:4b:b3:1a:d3:c5:3d:f1:6d:cd:f3:7c:a6:79:
6d:9f:c8:c9:99:84:90:79:f7:fe:d2:3f:5c:a0:8b:
9c:fe:a5:70:17:fe:e7:21:f4:c5:31:4e:b9:43:7a:
26:49:8c:04:92:bf:49:c2:cf:be:a1:7a:46:1b:0a:
d2:4b:7a:e8:8d:31:8f:69:f2:81:b7:54:6c:c6:4f:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FC:59:2D:17:4F:39:23:B5:17:D3:69:EA:C5:93:4C:B8:F7:E8:47
X509v3 Authority Key Identifier:
keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject Information Access:
Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3f:a8:b3:3e:96:c9:ec:c4:30:07:58:1f:d4:73:3a:7f:3b:
95:82:eb:00:7a:06:13:9b:b8:bf:58:30:f2:00:b6:f6:33:43:
7c:a9:20:99:cd:4b:ed:97:f8:5b:cd:c8:06:aa:c8:6c:72:74:
c7:45:a9:d0:22:a9:6f:68:94:4c:24:62:ca:29:54:bd:c9:37:
83:0c:72:50:7d:c7:3a:e7:f9:37:41:fe:2f:85:03:ed:d5:82:
70:09:30:83:0e:f2:6e:58:07:fd:1c:91:0e:35:65:2c:89:78:
0e:b2:68:02:0e:ba:5b:9a:dc:52:49:34:2e:ae:d1:8e:cd:04:
63:d5:04:83:56:9a:93:12:90:5a:8b:de:e7:33:49:b2:3e:42:
4e:05:10:9c:89:eb:c4:92:90:ea:e5:8b:28:1f:dd:05:e6:4c:
7a:13:c4:4b:0a:5e:e5:50:2c:41:16:7c:20:32:87:77:ee:8f:
5c:9a:77:d9:45:3d:08:ef:80:30:c0:e9:c3:44:e5:81:1f:bb:
d3:d2:f4:1c:4f:e5:6d:a1:6e:74:2f:a7:bb:78:05:5c:e6:d2:
84:ca:aa:ce:66:b2:9d:c9:69:50:d7:36:e2:64:30:f9:c6:8f:
df:83:c0:b8:3c:98:c5:54:8e:e2:55:7f:46:00:6d:4f:44:73:
ef:cb:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:07 2026 by rpki-client