Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer (raw, json)
Hash identifier: JbSmgIisSFQjuhhKta+QzqAwVsKYZiDFahzp5yrtz5I=
Subject key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 27843E9D0EA97F85CE1E994C338CA5FECBB53D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 08 Mar 2025 15:11:48 +0000
Certificate not after: Sat 07 Mar 2026 15:16:48 +0000
Subordinate resources: IP: 2a14:7580:d00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 20:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:84:3e:9d:0e:a9:7f:85:ce:1e:99:4c:33:8c:a5:fe:cb:b5:3d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 8 15:11:48 2025 GMT
Not After : Mar 7 15:16:48 2026 GMT
Subject: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:20:3e:3b:64:8b:16:1e:23:c3:fe:3b:54:
ab:36:f6:ea:b0:d1:3c:97:f0:81:b5:8d:74:e1:23:
b1:02:cb:75:ad:71:b1:53:b5:7e:68:a8:d2:b2:2d:
77:4d:bf:0f:4e:42:1e:0f:42:e6:d9:f0:6a:af:bd:
b6:3f:2f:4a:17:22:80:56:01:e9:90:5f:31:c3:29:
66:c4:a5:82:fd:29:22:4f:fd:49:77:92:d8:95:0f:
c2:08:fc:10:ff:29:db:0e:5e:4b:05:22:d3:37:9d:
79:48:43:4e:43:23:1e:d3:47:c5:1c:27:01:43:b9:
a8:82:f9:c6:29:ef:d7:05:e4:4e:e1:ee:84:6c:4d:
bc:e3:b2:bb:d5:2c:cf:6e:6f:c6:18:33:dd:61:61:
0b:e0:45:40:90:c5:9a:f5:bc:7c:6f:65:cf:93:49:
70:22:74:08:37:98:4b:18:33:a3:74:70:33:a6:de:
c5:39:bb:e5:8a:78:2d:bf:63:10:99:d2:78:cc:06:
89:a4:dd:26:c0:b5:e6:b9:9c:9a:3d:8b:37:f7:03:
5c:f0:f1:eb:03:11:a1:9f:fc:18:0a:f3:23:02:4c:
1d:2c:5f:a1:f9:66:07:9a:de:7e:3b:5f:06:32:59:
d1:d7:aa:e7:25:19:7a:5d:5b:97:f6:a6:b7:a2:9f:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:d00::/40
Signature Algorithm: sha256WithRSAEncryption
73:b7:93:0a:6f:5f:9c:7d:9e:4b:9f:23:12:73:ab:70:d8:23:
e6:27:24:01:f8:d7:97:a3:e4:6e:48:fd:1b:69:cc:4d:57:1d:
ba:96:7d:07:d1:e6:b7:c3:c3:9a:b9:c2:53:d5:e6:f8:e3:86:
1a:59:92:a8:c3:0c:de:f7:26:7c:72:37:bc:bf:f1:3a:08:7b:
34:91:33:07:50:15:7e:24:66:88:0d:78:f5:8d:a7:d3:af:34:
d8:3d:49:08:a3:64:95:48:f3:26:01:d1:89:8e:c9:42:1d:b4:
e6:82:17:32:6d:04:c2:bc:56:bb:b5:03:56:32:4f:49:12:96:
d1:e3:3c:86:14:f0:2c:fc:97:c2:0f:0f:78:52:a0:e7:7f:23:
94:98:26:b9:3e:78:0c:14:d8:f8:0b:ac:bf:6f:28:7a:ed:af:
25:18:bf:1c:4a:db:98:ed:25:be:33:71:43:65:29:de:65:ae:
59:7e:58:94:46:bf:0d:5c:01:a0:75:cd:39:3d:f2:65:a2:9e:
18:e0:9b:24:3c:be:eb:69:4b:99:1c:4e:87:22:eb:0e:83:01:
f6:e0:48:b6:72:0c:96:a1:c0:7e:7b:11:3c:39:a7:25:d1:ac:
a5:c2:0a:12:a7:82:f4:b9:a8:45:2c:1e:59:a9:74:59:53:16:
66:d8:c5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 05:44:57 2025 by rpki-client