Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer (raw, json)
Hash identifier: dlBeX6xt4IIa6Yb/c83UArA4OBpSqqT/8X8nyoNvImQ=
Subject key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 64C31BC7089FB02CD2176EEEB0B2F3D2C42B6ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 09 Jul 2025 09:26:49 +0000
Certificate not after: Wed 08 Jul 2026 09:31:49 +0000
Subordinate resources: IP: 2a14:7580:ff70::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c3:1b:c7:08:9f:b0:2c:d2:17:6e:ee:b0:b2:f3:d2:c4:2b:6e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 9 09:26:49 2025 GMT
Not After : Jul 8 09:31:49 2026 GMT
Subject: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:59:2f:56:18:c0:95:98:c0:c2:1e:6e:2e:
95:89:ef:ec:80:af:14:47:40:25:e2:fb:f3:3f:3e:
ca:dd:84:84:63:2b:64:fb:51:08:bb:67:50:c0:7c:
3f:f8:b6:dc:c0:d5:41:3d:1f:de:14:fd:f3:f0:e5:
69:24:3c:03:5b:92:4d:e0:d8:1f:97:bb:0f:29:b3:
2d:29:60:40:27:82:f6:a3:08:52:5e:f5:1e:79:ca:
16:34:72:a3:51:7d:1c:d7:a5:2f:5e:59:76:a7:bd:
d4:12:65:f2:a0:b0:79:23:19:80:2d:21:10:89:ee:
13:93:0d:fd:86:91:9d:88:7f:f3:23:bd:01:0c:00:
79:dd:14:b0:66:d8:ca:f2:a6:ec:74:32:de:04:2a:
d5:04:40:96:76:54:61:f8:cf:ce:d6:e8:81:cc:f1:
f3:e6:94:d3:85:54:05:c8:05:37:85:26:c3:6a:85:
ad:0f:08:97:60:66:1c:60:84:5d:5c:f3:fa:2b:e5:
d6:f1:72:bd:f0:8b:83:a2:07:54:e6:58:6f:0c:13:
a7:f1:18:0d:40:67:3d:ea:25:9d:16:3f:d5:3f:9d:
86:28:1e:a9:56:68:86:4b:e7:28:da:0c:53:1c:10:
17:4b:66:8b:69:35:4c:0c:d0:56:67:83:df:a8:4e:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff70::/44
Signature Algorithm: sha256WithRSAEncryption
8a:c0:43:6a:98:5e:00:7d:b9:41:fc:12:87:0a:d1:43:0f:31:
c2:b8:27:9e:c4:93:24:3a:7c:44:50:45:c7:bd:64:cf:b4:c1:
7c:26:56:33:9d:34:30:8a:da:4f:4c:d1:3a:f0:44:bb:09:d2:
c1:2e:0d:4e:4a:a7:6c:ec:2f:09:1d:ca:2e:b8:fb:25:ee:8c:
24:31:f0:65:6f:98:92:07:10:44:c0:50:50:9b:b6:2f:42:df:
75:f0:a5:94:2b:77:82:cd:eb:a4:57:74:2b:98:0f:3c:07:53:
ec:8d:59:2c:0b:82:0d:ef:f1:8c:9f:45:fc:02:9d:1e:01:79:
04:a4:31:b3:2e:9a:95:cf:54:e6:47:9a:ea:ed:e9:1f:84:68:
a3:9f:58:b2:c1:6c:94:6b:83:7d:51:5d:8e:ea:eb:f5:ea:9f:
18:84:78:68:ad:fd:6c:c8:5e:7a:aa:3c:96:ab:52:00:b4:24:
69:60:76:b9:7f:77:d7:ef:9c:50:08:d2:2d:d9:e0:5d:85:a6:
d1:e9:df:6b:3e:6c:7f:b7:78:46:a9:2c:9d:32:a5:6f:39:c1:
da:86:2e:30:4e:8b:fb:e6:e7:95:fc:a0:19:e3:8a:dc:f2:57:
99:90:6a:69:9a:29:bb:19:ba:2f:f5:3c:1f:4a:84:a7:12:2c:
35:83:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:29:16 2025 by rpki-client