
$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier: nFm/o0yXKi9bIylmPTr4wXF3WjEivtoHSos37ev02lk=
Subject key identifier: 8E:56:C2:32:42:CD:81:F4:E0:96:5C:C5:94:19:32:79:C3:77:03:03
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial: 4ADA2ED0B59C87355DE673F28A9C496E16DC47BD
Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number: 03A5
Signing time: Fri 15 May 2026 12:51:59 +0000
Manifest this update: Fri 15 May 2026 12:46:59 +0000
Manifest next update: Sat 16 May 2026 13:18:59 +0000
Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: OL9fBFYmNsZb7nVoJvGQqZa+5hKOtFCPqGJsBlrEQE4=)
Validation: OK
Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 13:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:da:2e:d0:b5:9c:87:35:5d:e6:73:f2:8a:9c:49:6e:16:dc:47:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
Validity
Not Before: May 15 12:46:59 2026 GMT
Not After : May 16 13:18:59 2026 GMT
Subject: CN=8E56C23242CD81F4E0965CC594193279C3770303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:4d:6e:ff:f6:84:ef:a4:0d:3c:79:29:50:
6f:50:bd:d2:8c:90:7f:a6:0a:39:b2:7c:63:59:2f:
a0:39:e1:21:4f:06:6e:f2:25:d9:61:9a:fc:3d:46:
71:f3:73:4b:fa:db:58:a3:7a:e3:f9:f2:cc:21:92:
ef:32:e1:8f:f9:4c:be:c1:9a:50:13:ac:23:91:32:
86:36:1a:84:07:8b:ed:bf:1f:63:9b:58:c4:27:70:
50:cc:79:b3:c6:93:b1:5f:9f:b8:5d:eb:19:1c:a3:
a9:9d:e3:e4:b5:0f:95:41:ac:12:13:6b:d0:5d:db:
c3:e2:ff:01:38:06:f1:a4:06:89:9d:fc:16:2d:98:
29:9c:5f:55:18:61:7b:1c:43:16:a0:77:12:45:45:
a7:e7:9a:e4:6b:41:23:b7:aa:f4:21:67:5e:05:69:
91:2e:99:cd:49:11:10:d6:14:fd:88:cf:00:18:49:
87:49:77:ca:2c:cf:de:37:f3:9d:b4:a6:af:67:aa:
65:04:91:16:64:83:d3:5b:e0:c8:f6:ab:06:4a:fa:
55:19:1b:7d:12:14:1e:86:35:00:b3:62:74:06:ae:
2f:92:25:40:a1:c2:7e:1d:12:6d:4f:c6:f7:b0:f1:
e1:fd:c4:06:c0:10:c5:1d:5d:06:39:5d:e6:32:1d:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:56:C2:32:42:CD:81:F4:E0:96:5C:C5:94:19:32:79:C3:77:03:03
X509v3 Authority Key Identifier:
keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject Information Access:
Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:da:65:71:c1:53:35:b4:5e:c5:50:31:2b:da:6d:c6:5c:94:
83:89:31:f2:da:36:e3:41:fc:0d:c5:39:ca:ff:5c:7f:8c:89:
0f:15:51:25:e0:a3:d9:f0:f3:fa:4e:4d:18:7c:51:70:6e:6b:
11:6f:a2:bf:af:13:cf:94:31:1d:07:9b:85:39:f9:87:29:4c:
c8:70:21:1f:64:b4:c1:88:f7:ee:76:69:af:3d:00:f0:7f:69:
fc:a3:91:49:be:a3:2e:2b:f2:2c:b0:b1:4a:fc:68:d9:79:a8:
a5:fb:95:d4:12:97:5e:59:7e:5f:66:73:61:22:7d:53:ae:fe:
97:cd:0e:53:bc:da:f6:dc:f5:3c:08:31:c9:1c:76:38:fd:e5:
1c:4c:c0:91:7f:2b:39:b3:e3:63:1d:38:90:d0:08:1c:8b:cf:
bf:42:02:dd:96:d9:dd:92:ba:68:ff:42:6c:93:61:ab:13:e6:
15:36:32:f8:43:1d:41:77:59:92:c3:61:1d:eb:c9:c0:dd:20:
73:16:45:3f:4d:e6:cb:33:f8:e8:0e:36:9d:9b:f6:67:c2:79:
75:f0:f7:79:dd:8a:d2:d7:5f:00:9a:75:c9:ae:76:19:49:ae:
85:e8:2e:61:39:f9:09:ac:3d:71:fa:1f:41:29:3e:74:2f:2a:
df:2d:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 22:48:59 2026 by rpki-client