Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer
File: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer (raw, json)
Hash identifier: uTSRzgXd63qhFgQAKNFq89LHqld/9lkWkSPRluxPdPY=
Subject key identifier: FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1C486D1E8548662422F5E5BE97BA709B3DFDA784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 18 Jul 2025 23:30:08 +0000
Certificate not after: Fri 17 Jul 2026 23:35:08 +0000
Subordinate resources: IP: 2a14:7584:4000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 15:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:48:6d:1e:85:48:66:24:22:f5:e5:be:97:ba:70:9b:3d:fd:a7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 18 23:30:08 2025 GMT
Not After : Jul 17 23:35:08 2026 GMT
Subject: CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:11:a8:34:a7:d4:8b:4f:89:e9:d7:c1:4f:a7:
1c:75:a9:a1:24:07:15:3a:4c:b3:cb:01:17:65:ce:
e0:c9:f3:e7:1c:5b:56:bd:21:11:0a:95:52:5a:76:
6e:9d:2d:8f:e5:1d:3b:91:8e:0a:6f:0d:73:4a:34:
9b:7b:fd:1d:e8:99:ef:66:03:2c:88:3b:68:ad:a5:
6d:74:d4:95:96:29:dd:77:8b:d4:64:1a:49:72:3e:
67:be:cf:50:85:0c:47:f1:9c:b3:c0:fb:32:a8:19:
e5:45:78:98:eb:b4:8d:f1:2f:72:eb:95:e1:d5:45:
e3:3c:3a:96:ac:05:f7:93:de:bb:84:93:15:98:c5:
97:f8:40:6d:76:c9:01:47:25:c0:78:9e:57:3e:4a:
bc:6d:a1:d0:25:68:7d:6e:f1:2d:08:fd:bc:91:ac:
0b:39:22:2b:7b:ca:5c:9f:2a:84:70:10:e5:ce:1c:
a8:55:6c:63:21:b3:9e:d7:0f:f3:92:71:80:55:32:
69:3b:e6:92:0c:86:aa:df:4d:86:a4:6c:ff:9c:73:
e6:bc:f0:e6:8c:60:f7:cb:04:cf:80:02:91:92:ec:
6c:2b:06:a7:93:32:2d:0f:1b:36:9d:b7:8e:d1:76:
67:d1:53:e1:65:51:9f:98:8f:95:2d:eb:4b:11:9b:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:4000::/36
Signature Algorithm: sha256WithRSAEncryption
03:8a:9a:d6:a8:3d:0b:77:9d:03:3e:37:d4:8f:93:9f:6c:fb:
fc:21:d7:64:43:6b:fd:69:7c:f7:43:a3:a5:61:cb:8c:79:18:
a2:93:78:92:c6:1a:cf:b1:0f:b2:af:11:57:f4:81:89:61:b2:
9c:0c:bd:64:96:30:5c:f1:1a:8d:3c:17:ed:05:ea:1e:b6:18:
a6:96:ee:98:db:01:34:bc:a8:42:9d:aa:f5:c6:f2:42:ad:3b:
40:d0:84:5a:4a:a2:6a:5a:30:be:7b:f6:e8:fc:6b:da:bc:e8:
9e:0a:c1:81:b4:16:43:bd:ac:51:b3:f0:2a:aa:b3:d9:f7:71:
11:1e:db:30:f3:d6:b8:cc:e4:64:60:d8:ba:67:70:d2:ff:e2:
c7:7f:57:46:15:02:5b:99:65:ba:57:8b:24:4d:ce:11:57:7e:
9b:f4:e0:17:54:bf:9e:b7:0f:86:06:62:5e:60:ed:df:b8:b4:
ff:d9:b3:cb:8c:b3:04:5e:70:32:99:0f:cf:0d:4a:bb:41:8b:
bb:84:54:96:18:0f:ed:4d:ed:40:95:3c:ba:06:20:0c:7f:a2:
0e:ce:c4:42:0e:c6:30:9d:dc:48:53:97:b5:7e:45:47:d7:59:
34:1b:11:53:99:96:20:16:a2:ec:19:65:d3:6f:73:23:78:8a:
02:04:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:28:24 2025 by rpki-client