Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer (raw, json)
Hash identifier: JEul5oE42HC3WcEFpTos4Q3fDgHPUHFnfyvkDKJt+iE=
Subject key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2178DE2F170D92353BEED9651154057054CF1249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 03 Jul 2025 23:30:22 +0000
Certificate not after: Thu 02 Jul 2026 23:35:22 +0000
Subordinate resources: IP: 2a05:dfc5::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:78:de:2f:17:0d:92:35:3b:ee:d9:65:11:54:05:70:54:cf:12:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 23:30:22 2025 GMT
Not After : Jul 2 23:35:22 2026 GMT
Subject: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:87:9c:d9:52:54:98:ee:8d:da:6e:50:b7:
da:e4:3b:5d:00:6d:df:19:bb:23:2a:b2:5f:8a:30:
d6:a6:97:8c:33:17:2b:41:57:bf:92:87:fe:0d:fe:
2f:0a:fb:e4:a9:64:37:0d:06:52:ae:39:d4:06:a9:
9b:47:d6:ae:68:d1:98:f2:45:20:47:d4:f2:06:54:
c7:44:57:4d:d0:06:78:54:ed:4a:55:e1:f3:db:16:
b8:f3:b4:ee:3b:53:8c:2d:5b:d0:94:24:73:54:71:
6f:41:85:8e:09:9f:9c:49:2c:cf:88:1d:17:1a:7e:
72:78:67:fa:b4:97:6b:6b:20:90:78:d7:02:40:4b:
a3:12:00:f0:a2:a5:70:da:69:b6:63:18:f9:2a:b0:
31:19:23:cb:d2:d7:69:3b:7f:72:a8:fc:60:bb:c5:
2e:c7:73:0f:c4:e7:09:db:c9:29:41:5a:08:fc:ac:
21:51:67:fd:16:d9:14:a2:23:ed:72:69:46:c7:57:
96:f7:b7:3f:7f:53:3c:1d:65:0e:a4:23:2b:27:a9:
d3:d7:26:2d:49:ae:9c:de:4e:23:b2:23:2d:c7:fb:
cd:16:d1:03:50:d7:e1:68:80:b8:c7:01:72:54:7b:
12:2d:f9:8a:9f:db:5e:d2:8a:55:a3:29:20:47:f1:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc5::/32
Signature Algorithm: sha256WithRSAEncryption
76:a6:fb:74:46:73:64:d7:d0:1d:20:c3:b9:bc:f3:e4:9a:70:
45:e1:ff:4d:2a:b9:3b:60:49:59:3b:ea:e9:95:da:d8:d6:8b:
6d:47:73:a5:73:36:f0:ce:91:fe:e5:31:bf:99:1c:d2:aa:cb:
27:d8:68:94:f8:06:72:5f:6b:70:3f:ec:85:74:c6:ee:f1:78:
96:1f:ef:8f:a9:13:12:98:59:d1:7a:b2:99:5c:52:d7:78:30:
87:cf:c6:30:1e:07:bb:a0:85:3d:2c:b0:29:24:63:ba:04:57:
10:49:1d:f1:1f:ee:65:e0:62:a5:22:ce:dd:93:48:20:60:87:
1c:11:6e:05:bd:6a:51:ea:8e:35:1e:57:1c:80:a5:89:cf:ff:
e4:f9:a0:b0:76:1e:4c:d6:dd:5d:ad:e9:59:2d:ad:ee:d8:e3:
b7:c0:aa:1d:70:5f:6f:2f:52:04:50:8a:bf:e2:63:0a:8b:86:
85:89:e3:27:e8:38:b6:2a:5c:e0:63:b7:3e:44:95:88:99:81:
5c:7c:af:e9:ed:21:1a:d1:59:8b:41:98:68:ab:f2:3e:c9:6e:
c1:3b:7c:ca:d5:a5:56:95:99:f4:e0:31:f3:01:3e:2b:48:4a:
b0:9a:87:cc:af:fc:d1:d7:22:c2:b4:b6:1b:6c:e3:49:2b:ce:
ef:b1:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:31:22 2025 by rpki-client