Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
File: CCD5D3BE49456F7D48B7321029C886F318C23B36.cer (raw, json)
Hash identifier: nxND25oP6IsVOccIDEXlse3Jjq+3faVoaYOMDCEB7BM=
Subject key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2AF01C4CA7D444C7D7F790C02B545B32F8303885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 11 May 2025 17:50:18 +0000
Certificate not after: Sun 10 May 2026 17:55:18 +0000
Subordinate resources: IP: 2a05:dfc2::/31
IP: 2a05:dfc7::/32
IP: 2a06:1281::/32
IP: 2a06:1284::/32
IP: 2a09:54c6::/31
IP: 2a0a:6044::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Jun 2025 14:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f0:1c:4c:a7:d4:44:c7:d7:f7:90:c0:2b:54:5b:32:f8:30:38:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: May 11 17:50:18 2025 GMT
Not After : May 10 17:55:18 2026 GMT
Subject: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:ae:18:3d:c2:b5:6b:ee:a9:6b:c1:32:54:
2f:95:62:ae:84:d2:c4:9c:a4:ba:be:3d:e9:33:05:
6a:a1:b6:f7:a4:03:16:f9:41:0f:97:b0:4b:11:ef:
82:92:71:cd:d2:06:d5:b8:64:62:55:f4:5d:5e:d9:
4d:6f:90:a1:9f:7a:c2:21:10:78:b6:11:85:00:b0:
be:ae:5e:d6:8f:f5:16:05:ab:63:0b:3f:6a:94:2c:
c1:46:98:63:41:fb:82:d2:38:91:41:7f:b6:a5:63:
8f:ef:ae:df:80:8b:be:98:a9:ac:d1:c7:21:ef:d5:
2f:ba:72:7f:2c:80:ad:67:d3:44:ca:37:dc:fb:6f:
2b:48:09:74:b1:c1:54:f6:54:ac:8f:99:03:32:2f:
e2:53:57:c7:b7:42:a6:26:c1:dc:59:84:a5:a9:ab:
ed:42:c4:cd:34:8e:54:51:ba:bc:9f:b0:20:2f:ca:
e6:04:02:bb:ac:0c:e1:89:c7:de:d8:ae:9a:aa:6c:
d6:d4:2a:6f:57:a8:b6:f9:2a:ef:f4:f5:5a:2e:2f:
59:b2:89:78:8a:48:7b:74:6c:b2:94:74:52:d3:bf:
e2:66:65:5a:42:f5:18:47:8a:35:18:3f:39:ca:db:
6c:d3:f6:66:1f:4b:61:a6:f3:1e:9d:88:10:a3:7d:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2::/31
2a05:dfc7::/32
2a06:1281::/32
2a06:1284::/32
2a09:54c6::/31
2a0a:6044::/32
Signature Algorithm: sha256WithRSAEncryption
84:6e:dc:43:a8:f4:68:33:6b:3f:f8:78:84:25:cf:33:c9:a4:
d1:71:d4:f8:aa:0e:2e:41:c9:75:1d:d1:4c:d3:cd:29:0f:33:
3f:82:17:a5:7c:50:f8:0a:ea:b2:fd:92:1b:53:0d:ad:09:4d:
78:93:85:45:71:69:e9:3b:ac:9f:a4:d3:ad:c1:21:da:3f:92:
d3:7d:6f:cb:6f:a6:54:49:3c:d8:ed:7d:69:51:27:bd:52:b6:
8e:58:e5:d8:39:42:5d:a4:cd:44:95:d1:d7:0c:1f:e5:9d:62:
15:0a:7e:e7:02:f7:08:ee:c2:77:c2:01:2b:84:41:66:4f:70:
88:1d:85:95:e5:1d:25:fc:ea:bf:21:ed:53:22:3b:be:e7:f0:
d2:6c:ba:52:db:33:fb:85:26:3f:19:a4:b5:03:ac:df:fb:0b:
15:1e:6e:d6:42:ee:e7:3c:ae:38:51:57:53:24:51:60:19:3e:
63:fc:66:86:13:69:0c:8d:86:ec:d0:c3:89:91:f3:97:08:af:
1f:72:b7:18:a0:42:20:2a:49:8f:fe:ff:fa:ee:da:3f:ed:64:
1d:e2:37:2c:d6:00:37:47:9c:d3:a5:33:de:be:7e:b0:c9:66:
50:03:c9:02:07:0b:2c:98:d6:2c:0b:2c:26:a9:bd:98:88:bb:
43:8b:22:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 19:34:45 2025 by rpki-client