Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer (raw, json)
Hash identifier: YfuAZzV8oEPXXxSFlny8R5/ZswZG1+43+oOg1XZmB+Q=
Subject key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 205BF59DF2FDBD37B7C6F3EC4784358F40957657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 28 May 2025 12:47:30 +0000
Certificate not after: Wed 27 May 2026 12:52:30 +0000
Subordinate resources: IP: 2a14:7581:d000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:5b:f5:9d:f2:fd:bd:37:b7:c6:f3:ec:47:84:35:8f:40:95:76:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 28 12:47:30 2025 GMT
Not After : May 27 12:52:30 2026 GMT
Subject: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:fd:3a:e1:ad:ca:37:5b:0b:f5:bf:3c:6a:
67:70:87:cc:48:35:f3:fd:08:19:7c:63:b2:56:cd:
a3:30:10:1c:be:ba:c6:1e:56:65:b6:f3:23:8b:10:
95:cd:7e:2c:1d:93:c7:98:9f:1c:1c:6c:78:16:9a:
3a:d0:59:78:43:dd:69:48:46:7c:28:6f:ed:e0:43:
7f:df:62:6d:8c:4a:b6:01:15:5e:07:7a:8b:a9:c5:
cf:03:1a:d3:b9:38:5b:62:6c:2e:a4:51:81:69:a5:
2f:e5:da:7b:3b:05:4c:68:87:f9:5a:80:c1:66:e7:
f4:a1:54:d8:4c:31:3b:ff:31:59:54:9a:11:31:89:
bd:16:60:bc:4c:5a:53:8c:87:80:aa:03:a6:4b:f8:
bc:95:0e:7e:79:c3:7f:d6:32:d5:8c:f3:c8:c7:b1:
2f:f3:77:d8:39:33:18:c7:52:de:af:0f:8a:bb:a1:
83:4b:ed:6b:75:20:56:37:b4:77:27:32:c6:65:38:
8b:dd:09:81:f7:65:c3:15:8a:32:06:e5:8f:b6:d2:
cd:4d:15:ce:33:cb:3b:8b:1a:eb:75:bc:ac:ab:da:
9d:64:19:e5:d7:c1:a3:c2:56:5c:50:8c:02:e0:55:
35:fb:8b:bd:35:4a:92:4b:e5:26:28:93:a9:cf:93:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:d000::/36
Signature Algorithm: sha256WithRSAEncryption
3a:d1:ae:c4:4a:49:95:57:9d:7a:fe:e2:0e:9c:16:0d:a6:b8:
42:c3:9e:c0:4e:30:28:c7:d9:93:05:65:f5:51:c4:95:ce:61:
c7:50:99:19:a4:1b:89:aa:20:bf:7e:01:77:51:7d:d1:27:60:
32:d7:26:f0:42:86:14:35:52:9c:2f:c9:8b:2d:33:70:4c:59:
24:99:dc:1e:7f:b0:1c:d6:2d:0a:fb:d1:1f:91:61:35:c6:bd:
63:a4:ba:27:24:b3:7a:a7:00:38:de:09:ed:1d:61:e5:ff:28:
3f:4f:14:3f:22:b0:4c:af:44:e7:21:36:b2:60:50:36:b4:f4:
3a:63:d1:0d:88:b0:c5:54:e7:8f:5d:03:4c:9e:07:77:65:8e:
9d:c5:12:e8:63:4c:1f:05:25:6b:2e:f0:4f:bb:7d:99:85:e9:
39:be:60:48:0c:a0:2f:fc:9a:2d:77:0d:98:a3:c0:be:7a:fd:
51:10:9b:c7:b0:58:11:e7:3b:5e:d3:72:99:d5:cf:19:17:cd:
b3:52:d1:27:ea:47:03:82:5b:e8:c7:00:51:5a:57:c6:31:81:
64:82:c7:4a:37:1b:35:5a:25:36:d2:e3:40:83:d3:a5:f1:54:
1b:7d:a5:18:8c:83:00:e2:84:34:81:38:fe:1e:c1:46:3d:f0:
96:cd:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:34:49 2025 by rpki-client