Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (raw, json)
Hash identifier: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=
Subject key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 05E8E83D31B27B6305D407588B89C383B07C49E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 09 May 2025 16:21:46 +0000
Certificate not after: Fri 08 May 2026 16:26:46 +0000
Subordinate resources: IP: 2a14:1ec0::/31
IP: 2a14:1ec7:c000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e8:e8:3d:31:b2:7b:63:05:d4:07:58:8b:89:c3:83:b0:7c:49:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: May 9 16:21:46 2025 GMT
Not After : May 8 16:26:46 2026 GMT
Subject: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:46:cc:ab:ac:d8:e2:7a:cd:2d:15:da:58:
3c:17:21:3e:52:a0:34:73:5f:c6:a9:ca:c9:8a:14:
0b:24:e1:62:bb:3f:ae:14:63:e3:76:e5:4c:79:74:
d2:24:e7:ba:5c:19:e0:7f:78:fe:87:e7:67:98:12:
39:c3:e0:9c:da:60:60:0c:ca:e5:87:6c:02:5d:3c:
49:c1:c2:57:cc:3c:4e:b4:7a:a2:c9:4d:f4:4d:c1:
6c:21:a0:b4:d9:74:91:ed:f0:46:bf:b0:80:36:c9:
f6:62:d5:20:e8:28:2d:49:d3:f5:db:03:f0:9e:27:
c8:d4:bf:f9:b5:24:63:6b:d0:35:15:34:c1:f8:54:
bb:ef:de:f2:25:66:b1:de:fd:8e:9f:a4:89:18:fd:
47:99:1b:9f:69:4c:70:9e:cd:79:be:f4:21:72:7e:
38:bc:33:6b:f5:85:fe:bc:1d:89:5a:da:ef:20:4e:
d1:f5:44:74:ec:4c:d2:c8:10:5b:f7:0c:65:e1:0b:
ee:9b:68:13:8d:4d:38:74:5b:28:e6:fd:ee:f8:fb:
7e:01:5a:08:77:3e:4b:67:57:ef:89:bf:18:b0:76:
da:b0:3b:79:67:aa:02:ad:b6:e1:f1:2a:a7:9a:a1:
86:dc:80:77:e6:ff:b6:3c:f6:5a:3c:a6:9a:8c:e5:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec0::/31
2a14:1ec7:c000::/36
Signature Algorithm: sha256WithRSAEncryption
08:dd:35:b7:94:3a:1f:22:7b:a4:73:b5:b0:34:f5:73:0a:91:
81:7c:22:29:c5:f6:d3:de:32:b6:f0:3e:a4:ab:da:24:69:f3:
cc:88:3c:24:28:08:a1:b7:c4:c1:eb:7b:1e:61:ca:fd:9b:18:
4a:0f:b7:05:47:53:f5:39:70:8e:03:48:4c:0a:23:c1:48:09:
18:96:7c:f0:01:f9:8d:1a:cd:06:3d:1a:b2:3f:96:47:48:b0:
49:b1:98:31:1c:a9:23:66:7c:ae:b9:6e:77:1f:6e:f4:e7:7f:
14:2e:ca:fc:15:82:77:5e:07:c5:b5:7f:2a:cf:f8:c6:f3:46:
ac:b6:0f:51:71:ad:67:33:76:59:ac:5c:5d:1e:58:f6:ed:90:
b7:2d:36:a2:ac:f1:a6:42:3b:5a:c5:43:32:db:8a:2d:41:3a:
7a:d5:28:7b:29:b5:15:38:6a:36:e4:dc:5d:a9:bc:99:da:90:
21:ca:7e:37:34:5b:9c:2d:bf:06:8f:71:e8:3d:89:7e:9e:f7:
72:fc:06:e8:52:59:27:39:9a:89:d7:a5:a1:b9:af:72:38:19:
5b:d6:45:eb:f9:d1:59:8b:fd:ec:1a:3e:90:9a:dc:70:bb:5b:
08:e3:1b:1d:8c:e9:90:f7:d9:43:bb:6a:00:3b:51:9c:16:97:
7c:0b:26:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:12:00 2025 by rpki-client