Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
File: 6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer (raw, json)
Hash identifier: 8X2W06OmzAMuqvmELr5W4mruvU+Iw30kmqlAw/goH4E=
Subject key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 49159614E69F44B03D3327B48EF55BBB24976F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 04 Jul 2025 07:46:21 +0000
Certificate not after: Fri 03 Jul 2026 07:51:21 +0000
Subordinate resources: IP: 160.202.134.0/24
IP: 2a07:54c0::/29
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:15:96:14:e6:9f:44:b0:3d:33:27:b4:8e:f5:5b:bb:24:97:6f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 4 07:46:21 2025 GMT
Not After : Jul 3 07:51:21 2026 GMT
Subject: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:87:52:ca:35:c0:d5:59:4b:89:7e:6c:84:
30:d4:51:b8:29:5b:e7:b2:51:f2:44:e5:d3:1d:d1:
06:48:84:8b:3a:77:9b:8a:5b:de:9c:68:da:0e:fc:
07:7c:cb:35:72:72:35:b3:76:0f:1c:e6:fa:16:c9:
7c:04:ff:9e:08:55:fe:01:3a:06:8d:1d:7b:66:a4:
8f:5e:05:7d:0b:ac:06:06:a4:c7:2a:9a:93:0e:b0:
72:28:a9:f5:f5:ae:e4:fa:5a:e2:41:ab:94:ea:a2:
99:88:a9:23:ec:28:1d:dd:8c:60:8c:33:b7:db:10:
8a:da:7d:5d:75:e0:53:14:5a:9e:3d:ac:bf:00:f2:
f9:97:3e:dd:9d:2e:85:d2:08:55:d4:f8:69:7f:a8:
f7:a8:6d:60:98:8f:80:31:0d:ce:b9:a2:5c:92:b2:
35:81:f3:64:92:d0:d9:a3:df:91:cf:64:9e:75:72:
14:cf:55:45:08:e1:00:68:89:93:a1:a0:c3:3f:0b:
21:cd:4a:7d:f2:a6:bd:2e:b6:05:9c:85:1c:bb:13:
48:1c:4d:81:9c:41:a0:6c:4d:67:ff:a2:a7:fe:4c:
f2:fd:1e:d9:74:ef:54:48:09:0d:ab:54:b4:b8:7d:
5e:bc:36:ab:9f:1c:59:c7:dc:78:d3:82:f9:0d:ac:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.134.0/24
IPv6:
2a07:54c0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:ba:1b:22:81:e8:cb:df:32:23:56:57:c5:51:12:2d:32:8d:
14:a0:54:41:42:cd:98:4f:ca:f2:f2:75:f6:ef:db:d2:db:b9:
39:81:e7:2c:b2:62:25:72:c2:d8:8b:f8:63:dc:6a:f6:71:a5:
ad:80:e0:11:d7:4a:6e:20:b0:59:e8:a0:51:de:c4:75:7e:d6:
a6:50:76:a7:d1:1e:c4:94:41:3e:a5:0c:35:1e:77:65:ad:af:
d3:cb:e3:66:a9:bf:e5:b7:0f:74:4c:27:f9:04:15:bc:e9:b1:
ab:98:57:77:e2:7e:e1:d7:78:f9:50:33:64:5f:9d:cc:04:b9:
33:29:18:f5:d0:e5:0e:33:85:66:dc:cf:53:9c:88:fe:0d:b2:
a4:21:a7:c1:76:8a:de:6e:d0:32:43:e3:83:b9:24:04:97:ba:
31:3a:6d:e5:f9:35:71:52:58:b0:2a:a8:48:08:2d:93:b8:fb:
00:16:64:d9:46:7e:71:a3:52:6a:ab:34:f3:08:7e:93:6c:1b:
c5:91:70:a6:20:55:63:d1:b2:e4:67:e2:73:e8:e0:e5:c4:44:
28:42:1a:53:63:e8:94:8c:6e:57:cc:28:fc:4c:bb:12:14:5e:
e0:ac:22:49:17:36:e1:35:b7:79:20:f7:f0:86:1f:5c:7b:8a:
b2:f5:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:26:46 2025 by rpki-client