Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer
File: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer (raw, json)
Hash identifier: 461/32KmONlfA7ZiaR1i7RltEHhF9CnQzjNk1Az7RaY=
Subject key identifier: FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5D55C65DD0578B4146D1E3B23E01F62D9AE110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 03 Jul 2025 14:28:21 +0000
Certificate not after: Thu 02 Jul 2026 14:33:21 +0000
Subordinate resources: IP: 2a14:7580:7000::/36
IP: 2a14:7583:1000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:55:c6:5d:d0:57:8b:41:46:d1:e3:b2:3e:01:f6:2d:9a:e1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 3 14:28:21 2025 GMT
Not After : Jul 2 14:33:21 2026 GMT
Subject: CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:4f:1f:f8:70:b8:a3:86:f8:39:75:70:ac:
a1:99:46:dc:7b:e3:73:c9:c8:ed:04:be:52:46:b9:
31:d3:ab:0b:45:50:27:b0:76:98:01:00:0d:46:d3:
37:6c:f7:38:02:ee:81:d0:cb:fa:4f:a4:4b:53:aa:
6a:0e:2b:83:71:c2:b2:ca:c3:dd:bd:1e:1e:35:aa:
55:7a:50:df:56:7f:1d:19:9c:5a:fe:21:19:ee:ba:
5d:78:09:3e:fc:1c:38:cb:9a:14:12:3c:01:55:77:
a3:80:b0:b5:43:96:09:ac:44:a6:0f:84:91:a0:ec:
a8:c8:d4:6a:f1:38:c8:10:05:6d:29:b1:c6:27:ea:
21:0d:9a:6f:59:0f:55:d5:97:f0:e9:df:8a:03:df:
4d:fa:cf:02:31:c2:0a:57:53:55:da:70:56:10:e1:
6c:17:fc:d4:ec:8c:7d:69:12:5a:89:e2:8e:ba:86:
e2:15:6e:5e:2b:f6:fe:e9:33:80:02:e0:a2:dc:2f:
fa:39:df:77:cb:98:ca:c8:91:01:6d:15:20:40:81:
3c:a1:89:a4:5d:82:42:f3:b2:10:83:2a:94:9a:da:
a2:8c:56:73:32:0f:7a:86:67:11:ef:d3:fe:e8:40:
c9:02:a5:95:38:72:55:44:20:c0:b1:2a:d5:2c:1e:
1d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:7000::/36
2a14:7583:1000::/36
Signature Algorithm: sha256WithRSAEncryption
1f:5a:9a:07:7a:75:a4:ad:24:c9:db:02:95:68:05:b8:e7:b7:
38:15:59:8c:4d:fc:a5:18:4a:61:8d:87:12:66:fd:24:86:7e:
7b:67:3f:3f:db:8e:95:a8:82:00:cc:57:b2:fb:d8:19:2f:6c:
79:d5:a7:20:8c:fa:bc:ce:19:56:d1:0e:96:3e:43:57:8f:c3:
13:53:b1:ed:ca:38:7f:aa:4f:ef:56:20:45:90:e5:5f:6d:3b:
33:99:0b:e5:08:9f:79:a9:3e:a4:a0:cb:18:77:cb:4b:8b:e3:
c8:f6:c6:3f:31:24:b2:da:14:94:5e:49:8b:d2:54:aa:c0:9f:
9b:43:c5:ea:97:80:ec:43:35:6a:df:1f:ba:f5:ad:99:70:bb:
24:f5:4b:44:84:fe:83:b7:e3:49:a6:bc:1d:b6:d5:0a:77:6e:
aa:ea:2d:28:39:ff:a5:2e:81:a9:63:ba:43:73:cc:e4:10:4c:
3c:91:fd:70:36:a5:49:02:a8:9f:5e:05:ca:dc:e9:aa:11:73:
36:a0:9a:5c:7c:f4:72:3f:d9:58:26:e7:dc:8d:3c:0d:10:93:
31:dc:b1:59:8b:42:1e:f7:17:d7:e8:65:64:e8:80:28:6e:59:
57:b1:2c:48:49:ee:ab:60:e5:9d:4f:69:81:84:63:e8:9b:99:
80:7f:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:15:30 2025 by rpki-client