
$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier: Sx1eDED+C/yu9qMuvhs3Lwl4kWbi82lDdBof3aDVlPo=
Subject key identifier: 39:40:A6:C2:5F:3A:0A:3E:C2:37:0C:63:2D:3F:33:C9:C0:AC:D8:97
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial: 2DE5B125CBED66E3A4B9C9549F4FE258804D7056
Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number: 03CC
Signing time: Sat 13 Jun 2026 20:27:16 +0000
Manifest this update: Sat 13 Jun 2026 20:22:16 +0000
Manifest next update: Sun 14 Jun 2026 21:08:16 +0000
Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: Xt/V4TY62fJHL0PHOC+NqgejkZBkp54CmvrOhqyZI2k=)
Validation: OK
Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e5:b1:25:cb:ed:66:e3:a4:b9:c9:54:9f:4f:e2:58:80:4d:70:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
Validity
Not Before: Jun 13 20:22:16 2026 GMT
Not After : Jun 14 21:08:16 2026 GMT
Subject: CN=3940A6C25F3A0A3EC2370C632D3F33C9C0ACD897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:8a:d6:01:66:54:68:57:49:95:8e:43:fe:
d8:c4:30:ec:d6:f5:27:df:c3:48:98:b4:4f:ba:b5:
c8:a1:9d:c3:0b:fc:c9:d5:61:b4:92:fb:68:c1:e4:
de:2a:06:eb:a5:96:75:dc:06:f1:db:50:17:17:8b:
8e:31:e6:d2:57:0d:1a:06:d5:ff:8a:a1:7e:9a:64:
81:5f:f9:e6:84:57:be:38:cf:4e:f6:92:14:01:41:
34:b1:54:d9:82:02:d9:aa:bc:22:88:ab:16:95:42:
ed:0e:72:09:65:3d:af:c4:68:8c:84:2e:16:6e:7e:
2a:58:03:7d:7a:29:67:20:4e:99:42:38:bf:40:0a:
bf:2c:5b:ac:08:c5:8c:56:dc:6b:cb:01:f1:fb:44:
08:e6:6d:ef:ad:60:d4:4c:7e:6f:70:d1:9e:54:fc:
74:05:58:68:2b:4e:2d:f1:b2:cb:29:71:1c:47:ae:
58:5e:35:8b:56:9b:2e:23:aa:02:42:d4:5f:e8:a4:
ae:ef:aa:72:69:c9:51:22:9c:b5:b0:1e:cf:20:9d:
2e:68:81:3b:28:ef:0a:95:bd:2e:a4:a7:85:89:1a:
9c:7c:0d:a4:b4:fc:f7:84:47:9d:16:3a:0b:4c:96:
35:fc:55:26:df:9c:bb:b1:59:74:5c:92:73:98:5b:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:40:A6:C2:5F:3A:0A:3E:C2:37:0C:63:2D:3F:33:C9:C0:AC:D8:97
X509v3 Authority Key Identifier:
keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject Information Access:
Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:58:70:1d:df:ab:3f:92:2c:70:81:34:1c:1a:d3:ae:43:e1:
21:6f:c0:2e:d1:3f:95:1e:27:68:33:cf:00:d1:e2:08:9d:06:
14:12:7a:42:c8:01:74:b3:f6:4e:5e:fd:52:a2:0a:45:06:27:
ef:8f:69:e4:a8:c8:fe:ae:2d:bc:d6:41:b9:67:b1:8d:9f:4c:
86:bc:06:e4:85:55:bb:c8:e0:9d:c7:ac:d1:e2:c6:54:20:11:
f3:aa:41:76:4b:4d:04:36:3e:ee:70:7d:f2:6e:92:7b:5c:98:
6a:d2:8d:54:26:ec:a6:f9:5e:e7:fd:ca:30:43:09:1d:ab:3b:
86:43:84:b8:84:e8:e5:07:40:d8:4e:56:a1:3a:34:4a:d6:f3:
d6:03:11:7a:1e:bf:77:84:c8:4c:c6:32:bc:41:99:bc:65:c6:
42:88:5d:4f:17:4f:4b:c4:14:d9:1a:07:ac:c7:5b:5f:cc:21:
4a:46:a1:c8:34:52:18:41:1b:84:35:22:18:a0:7c:12:2c:d4:
95:6e:c1:5f:fb:60:3f:bf:43:e6:1d:64:95:cc:a3:24:ec:91:
4a:b0:a6:31:de:71:c8:2d:4b:24:49:38:f3:e7:a7:18:12:f1:
a6:cc:3e:01:21:39:f8:4d:55:29:0e:fd:f2:ba:96:a0:15:42:
87:75:19:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:52 2026 by rpki-client