Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
File: 04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer (raw, json)
Hash identifier: WC2xT6FYiM9dJRxOd1eaHqB3GTC9TL6xOPD7Nd7Wdro=
Subject key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 2588B503AF7BBB9E37FB612F2930D76545BD9201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Manifest: rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
caRepository: rsync://rpki.cc/repo/MythicalKitten/15/
Notify URL: https://rpki.cc/rrdp/notification.xml
Certificate not before: Thu 17 Jul 2025 02:00:47 +0000
Certificate not after: Thu 16 Jul 2026 02:05:47 +0000
Subordinate resources: IP: 2a14:6f45::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:88:b5:03:af:7b:bb:9e:37:fb:61:2f:29:30:d7:65:45:bd:92:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Jul 17 02:00:47 2025 GMT
Not After : Jul 16 02:05:47 2026 GMT
Subject: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:34:34:84:22:35:a8:07:af:3d:8a:7b:d1:
1f:b5:68:0e:33:bb:35:99:c9:0f:b1:dd:a9:ab:60:
bf:d2:7d:e8:9c:4d:a4:36:fa:1c:2f:ed:57:bb:f8:
3d:a5:c4:7c:79:04:be:83:82:39:f8:9f:62:a5:49:
9a:3c:17:f7:ed:8a:9f:19:e2:47:72:dc:94:19:9e:
91:e0:f3:01:97:50:ea:eb:67:d8:9d:4d:38:ff:ec:
a1:ae:d8:eb:d3:b1:e5:cf:2c:31:a1:cd:7a:48:f7:
60:7a:7a:b7:7c:f1:33:07:66:25:6a:8a:da:5b:c8:
78:64:68:26:fe:e5:87:be:ae:ac:84:9f:0d:40:dc:
3a:46:68:e4:81:96:5d:cb:3f:ff:20:21:e6:14:cd:
32:1d:eb:c2:0b:68:cc:d6:19:73:a0:ff:4b:a5:2c:
fc:3c:a6:e7:e2:0d:11:26:9e:79:2e:8d:05:36:ce:
ed:01:56:23:9a:d4:55:2e:20:be:6a:5a:35:58:4f:
10:fa:f9:67:23:fe:72:f5:2a:93:a0:69:dd:ea:9b:
64:1c:04:3e:62:9c:7f:5a:77:2e:7d:43:fa:28:37:
90:ec:26:c7:30:d0:f4:70:7a:03:87:d6:5c:c3:27:
7b:99:fa:d1:3f:af:18:cd:d9:23:c1:b9:7e:79:1c:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/15/
RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f45::/36
Signature Algorithm: sha256WithRSAEncryption
3e:49:f9:a0:f5:c2:2f:56:26:d7:33:71:af:9d:ad:5d:e5:67:
c2:19:9a:cd:ff:4c:9f:e7:58:fb:41:d3:45:e4:3e:f7:77:af:
42:70:11:45:00:d8:58:22:8e:de:84:45:31:58:15:1e:dd:c3:
05:1a:0f:52:d7:82:ca:0a:56:04:a1:01:e0:b5:3e:56:0d:cd:
86:44:41:14:bc:8b:c9:b8:f5:c1:cc:22:dd:e6:c6:d6:c3:98:
19:da:4f:ff:c7:1a:bf:25:59:55:9d:26:ec:0b:bf:20:b3:6b:
89:87:d3:76:59:8a:21:9f:8a:f5:9b:67:ac:ba:3a:57:11:ef:
00:da:fa:b9:92:0a:ad:7a:08:34:fa:08:09:63:99:16:26:e3:
a1:b5:94:31:3c:0c:27:30:73:44:38:f9:db:6a:66:76:ca:70:
19:e5:4f:46:5d:a8:0a:9c:c7:5d:3b:ea:bc:21:95:89:50:89:
0e:2e:1a:a5:09:ae:91:80:8a:05:1b:50:e9:a3:e1:81:88:7c:
09:49:6d:f6:22:08:eb:a5:f8:99:ad:e9:0c:71:47:de:26:1b:
36:1c:05:94:08:bb:f2:4e:5f:a5:ac:88:69:5b:1a:2f:06:f3:
b5:d1:6d:38:81:3d:01:81:05:4f:28:cf:f1:c3:3e:4a:f9:21:
10:a1:51:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:16 2025 by rpki-client