Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer (raw, json)
Hash identifier: KRFgW1AYthJ3edQgNlcbLP5o2HqKKJo4P2uqQI4niVw=
Subject key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 05941B769FD1B0E4CDDAFDEB1351C54EC4E36AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 29 Jun 2025 13:08:35 +0000
Certificate not after: Sun 28 Jun 2026 13:13:35 +0000
Subordinate resources: IP: 2a14:7580:9000::/36
IP: 2a14:7581:f40::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:94:1b:76:9f:d1:b0:e4:cd:da:fd:eb:13:51:c5:4e:c4:e3:6a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 29 13:08:35 2025 GMT
Not After : Jun 28 13:13:35 2026 GMT
Subject: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:5e:f6:a5:af:28:66:6f:83:ca:18:12:d3:
a5:e7:e2:d3:ef:c0:f2:64:7a:18:a6:10:79:ad:1f:
47:e7:6f:70:44:5b:e1:55:c7:9c:24:58:a3:a8:44:
d1:b2:88:11:94:5f:5f:54:83:7d:bd:20:91:d3:34:
16:27:c0:5b:ac:0b:47:d6:f6:4b:b5:9c:7b:9f:51:
d7:05:ca:fa:f0:15:4b:d6:66:98:68:db:c8:b1:5a:
9f:84:d5:80:c1:70:09:06:a2:98:d8:3f:b6:d3:2e:
df:06:33:3d:b0:78:f1:59:af:fd:1d:1c:08:59:52:
6b:04:cc:19:b1:a8:49:d8:c9:99:78:3b:3e:8d:70:
a3:71:64:03:51:fc:40:29:ff:96:14:5a:10:05:2e:
bb:30:c6:f8:c4:15:5c:20:a0:54:f3:00:22:6a:1a:
ea:31:f9:78:ca:31:cc:0d:a8:b4:20:cc:a8:90:5e:
a2:b3:d1:75:15:21:1b:f2:38:ad:81:c1:df:49:0b:
e9:eb:b5:e5:4c:bf:53:0b:91:42:00:c2:09:af:b7:
a3:e1:b7:f6:9f:89:7c:1d:fd:4a:86:47:38:58:06:
43:36:a5:1f:43:41:9f:35:94:f0:a9:68:a7:c3:8b:
f1:d2:b9:ae:af:4c:4e:43:96:da:0f:a1:63:76:d1:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:9000::/36
2a14:7581:f40::/44
Signature Algorithm: sha256WithRSAEncryption
63:73:3e:c5:65:44:10:ae:f0:46:f2:bb:50:85:ca:85:81:fa:
87:56:5c:cb:62:01:fb:31:ee:9b:dd:23:38:a0:04:bf:ae:84:
00:7f:7a:9e:81:9a:0c:c6:bb:78:d7:32:c9:35:ae:d6:f0:38:
93:7b:65:17:c4:45:32:c5:ac:2d:ac:80:d2:ab:58:59:d1:93:
84:2c:fe:c1:6f:b7:7b:f0:e4:16:e2:e6:a0:21:9d:32:9d:33:
69:60:0b:a6:3a:4d:3d:9f:f0:78:5d:5b:c2:98:87:e9:43:e7:
fa:5d:8f:23:8e:d6:0d:4a:79:1a:6c:e7:73:6d:ba:b1:0b:eb:
3b:c3:be:48:fb:b9:31:a3:2f:11:28:a9:7a:6b:bc:56:a4:f4:
7f:79:46:71:44:99:f1:4d:f4:4b:5f:c8:8a:57:e2:9e:e5:54:
b6:01:f6:8e:86:b2:c8:58:7a:3b:f0:8a:1f:8d:71:84:da:29:
65:ab:be:8d:95:39:ce:3a:16:66:be:ef:2f:58:3c:60:4b:ff:
73:8b:ec:e2:60:70:38:f4:b9:cc:44:0b:83:b2:fe:c4:63:92:
e3:93:4b:a8:b2:3b:fe:74:95:72:cf:df:13:da:c0:dc:c3:81:
ac:9b:9d:48:27:c2:7a:4a:67:7e:15:15:33:77:54:4b:7f:bc:
b8:cd:cc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:57:34 2025 by rpki-client