$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json) Hash identifier: vQZzg/lmxrgB06B7wg7lINpfpAZQRaxZyEIAR3RpQHY= Subject key identifier: C8:7C:7D:19:24:BA:BA:FA:0E:C3:6A:09:CE:9B:C4:98:BB:5B:F1:7A Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389 Certificate serial: 4AA50EECBE5B9E984CB66BF420E67396DA533D48 Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft Manifest number: 0259 Signing time: Mon 08 Sep 2025 09:23:57 +0000 Manifest this update: Mon 08 Sep 2025 09:18:57 +0000 Manifest next update: Tue 09 Sep 2025 09:23:57 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: a+5lLTWes33DZmottqM1kEN4X3HrASqkxTpHiU+j4mE=) Validation: OK Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 09:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a5:0e:ec:be:5b:9e:98:4c:b6:6b:f4:20:e6:73:96:da:53:3d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389 Validity Not Before: Sep 8 09:18:57 2025 GMT Not After : Sep 9 09:23:57 2025 GMT Subject: CN=C87C7D1924BABAFA0EC36A09CE9BC498BB5BF17A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:91:19:19:83:65:50:aa:42:39:b3:c3:7d: 9f:8e:2a:f3:0a:a4:8f:3e:11:b5:91:5a:5d:fa:a5: df:d6:d2:5c:86:9c:93:92:8c:64:c1:5d:b1:38:a2: b2:4b:c9:bc:1d:08:52:4d:76:fd:84:06:55:da:ef: 95:03:78:c5:78:26:56:89:a6:da:7d:61:b9:40:81: b5:6b:52:f9:d4:85:73:2b:ef:51:d4:99:98:03:ec: 2e:41:61:42:27:19:09:b5:dd:7b:3b:58:ba:25:e7: a9:0a:8a:9e:2b:0c:ac:20:8f:f0:e9:05:8d:81:cd: 55:57:5b:23:6d:bd:d8:c9:2d:e1:89:7b:41:60:6c: 40:47:9f:89:9a:eb:f1:8d:7b:05:b4:dc:ee:ba:2e: 25:f8:7d:7a:ab:ac:f9:01:3d:90:c6:90:07:73:e1: 60:35:2c:58:a2:94:b5:c4:e8:c8:d3:c1:3e:50:67: 6f:00:9a:80:b7:0d:82:4c:b1:f5:ac:dc:ab:44:52: 10:ad:b8:f7:2d:e9:a9:65:f3:5a:40:1c:3e:69:77: 01:53:a4:12:d7:70:26:2f:75:d6:8b:4d:7f:9f:46: c9:17:2d:f4:37:37:d4:13:81:dc:a9:33:be:14:6d: 47:2a:9e:f6:b9:27:5c:48:75:da:9e:94:4f:d1:35: 39:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7C:7D:19:24:BA:BA:FA:0E:C3:6A:09:CE:9B:C4:98:BB:5B:F1:7A X509v3 Authority Key Identifier: keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject Information Access: Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2e:f6:96:3b:dd:29:a7:d2:40:2f:eb:30:f6:76:3a:27:6d: 40:78:0f:1f:60:88:88:b4:8b:2a:ff:92:04:e0:84:ed:db:f9: 44:8f:3e:8d:d7:91:a5:a5:73:b7:5e:0b:a9:4d:a8:34:b0:8b: 83:19:58:00:99:5c:34:91:00:b0:56:e6:f4:26:12:5c:f1:11: 43:4a:db:6f:0e:07:3c:10:62:d0:9e:5c:64:ed:6e:67:44:4d: f0:01:f1:9d:a8:cc:70:2a:ed:22:79:55:e7:15:0e:44:fc:17: 93:b3:b9:aa:fe:d9:eb:af:29:87:48:c7:47:1b:81:ed:eb:fa: a4:8d:55:a8:ed:11:91:eb:67:45:5f:95:08:78:ab:8d:83:01: 72:6c:3f:71:11:00:34:f4:8a:73:53:15:ce:07:da:96:6c:f2: e9:11:b4:31:c5:e6:52:6c:eb:cd:d9:2c:91:04:ad:08:ea:7c: f8:00:ad:ae:9f:ce:80:0e:36:7f:52:35:e6:92:b4:6d:c3:15: ba:cb:0b:f9:24:68:1c:44:e6:30:8c:96:23:fc:8c:bc:fd:b8: 37:ef:bc:1b:0f:7d:1a:79:22:07:72:67:0a:2f:f7:08:4d:cd: c4:b4:84:4d:1d:e3:76:10:b7:a8:32:14:43:4a:64:83:d1:83: 70:a5:12:70 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUSqUO7L5bnphMtmv0IOZzltpTPUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2MjNBQTZDMzBGQThFMDU4MjQzNzA4RjU2NzJENzk2 MEU1MjM4OTAeFw0yNTA5MDgwOTE4NTdaFw0yNTA5MDkwOTIzNTdaMDMxMTAvBgNV BAMTKEM4N0M3RDE5MjRCQUJBRkEwRUMzNkEwOUNFOUJDNDk4QkI1QkYxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+JJEZGYNlUKpCObPDfZ+OKvMK pI8+EbWRWl36pd/W0lyGnJOSjGTBXbE4orJLybwdCFJNdv2EBlXa75UDeMV4JlaJ ptp9YblAgbVrUvnUhXMr71HUmZgD7C5BYUInGQm13Xs7WLol56kKip4rDKwgj/Dp BY2BzVVXWyNtvdjJLeGJe0FgbEBHn4ma6/GNewW03O66LiX4fXqrrPkBPZDGkAdz 4WA1LFiilLXE6MjTwT5QZ28AmoC3DYJMsfWs3KtEUhCtuPct6all81pAHD5pdwFT pBLXcCYvddaLTX+fRskXLfQ3N9QTgdypM74UbUcqnva5J1xIddqelE/RNTkdAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUyHx9GSS6uvoOw2oJzpvEmLtb8XowHwYDVR0j BBgwFoAUyGI6psMPqOBYJDcI9WcteWDlI4kwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcm92LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMu bmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8zL0M4NjIzQUE2QzMwRkE4RTA1ODI0 MzcwOEY1NjcyRDc5NjBFNTIzODkuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEF BQcwAoZecnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5l dGxhYnMvMS9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5 LmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jvdi1t ZWFzdXJlbWVudHMubmxuZXRsYWJzLm5ldC9yZXBvL3Jvdi1tZWFzdXJlbWVudHMv My9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5Lm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAWi72ljvdKafSQC/rMPZ2OidtQHgPH2CIiLSLKv+SBOCE7dv5RI8+jdeR paVzt14LqU2oNLCLgxlYAJlcNJEAsFbm9CYSXPERQ0rbbw4HPBBi0J5cZO1uZ0RN 8AHxnajMcCrtInlV5xUORPwXk7O5qv7Z668ph0jHRxuB7ev6pI1VqO0RketnRV+V CHirjYMBcmw/cREANPSKc1MVzgfalmzy6RG0McXmUmzrzdkskQStCOp8+ACtrp/O gA42f1I15pK0bcMVussL+SRoHETmMIyWI/yMvP24N++8Gw99GnkiB3JnCi/3CE3N xLSETR3jdhC3qDIUQ0pkg9GDcKUScA== -----END CERTIFICATE-----Generated at Tue Sep 9 01:08:33 2025 by rpki-client