Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer
File: 21291D2963EE74682B10BECBA6060EF246C76881.cer (raw, json)
Hash identifier: RxSP/HcE6V7YQex9j+RuwUwS76vMGgP231p2Zk9YhNc=
Subject key identifier: 21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 04101597FCAC7192349C144AFD9C5F340EA5892A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 02 Sep 2025 00:18:21 +0000
Certificate not after: Tue 01 Sep 2026 00:23:21 +0000
Subordinate resources: IP: 2a14:7580:ff90::/44
IP: 2a14:7583:2000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 13:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:10:15:97:fc:ac:71:92:34:9c:14:4a:fd:9c:5f:34:0e:a5:89:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 2 00:18:21 2025 GMT
Not After : Sep 1 00:23:21 2026 GMT
Subject: CN=21291D2963EE74682B10BECBA6060EF246C76881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:31:7c:c9:5d:79:52:b7:27:37:6c:73:cd:
54:1a:28:6d:91:40:c4:b1:8a:75:50:c4:4d:e5:cc:
9c:51:7e:3a:63:d0:80:b1:3d:07:e7:bb:06:3d:1a:
be:bf:21:6a:02:f8:4e:14:1e:9d:46:d1:e5:f2:d7:
a8:b7:b1:eb:d2:8a:f8:16:d8:d4:89:46:9b:21:cc:
bc:87:83:d6:3b:a3:b1:ef:ca:2d:11:77:c4:10:e5:
65:ae:36:c0:b9:78:42:da:8c:8a:06:59:1e:ed:14:
0d:83:01:c0:71:ce:39:bf:87:10:4b:6a:79:76:86:
b8:ac:3e:6c:35:15:2f:37:e3:6a:5d:79:72:d8:a9:
aa:62:1f:e2:81:c5:f1:31:fd:db:7b:93:74:90:9c:
e0:6b:a3:13:64:6d:cb:06:81:21:87:62:c1:08:d3:
d6:88:cc:18:7f:99:05:a5:96:ca:0b:14:bb:9b:bf:
30:1d:c1:06:10:f3:a6:b2:29:b1:de:e7:12:18:57:
aa:7e:ca:a8:f3:37:6b:b3:3e:fe:54:fe:0c:53:56:
bc:6d:58:90:a9:0d:bb:25:f5:33:2d:0c:51:d8:6c:
5a:0c:8f:dc:71:f3:c9:c5:74:1c:ed:43:cc:48:cd:
63:e0:a0:5b:39:33:2d:7d:a2:03:ca:43:f0:d1:c8:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff90::/44
2a14:7583:2000::/36
Signature Algorithm: sha256WithRSAEncryption
64:9e:97:79:07:79:3c:ec:ea:2f:3c:f9:cb:40:7d:47:23:b7:
19:8f:ff:a1:09:cc:89:63:e5:55:f1:4a:29:17:1a:d8:e7:5c:
e3:12:db:3d:24:58:90:78:53:b2:2a:5e:cf:36:ee:e7:01:4e:
09:38:fc:bb:34:50:f4:87:4d:17:c6:f7:ea:3e:e7:a3:3c:95:
0d:4c:b3:75:d6:7b:b7:f2:88:d8:e6:18:5b:b6:96:63:3f:12:
96:5b:89:e2:75:42:89:d9:8d:35:e1:18:ca:20:61:95:9c:b2:
dd:d2:73:37:27:a3:e6:4f:01:c8:4b:bb:1f:d6:03:e3:c6:b5:
a7:69:0c:bd:94:0d:44:9d:8a:55:9e:29:96:3e:df:f1:aa:95:
08:65:6e:cb:55:2c:f7:29:ce:5b:87:ac:a0:c2:be:2c:a4:f7:
6d:51:e3:c0:4e:48:26:e2:97:20:53:c4:7a:87:ad:a5:ef:b5:
7d:47:b9:15:d5:ad:18:39:4d:8a:59:f6:57:9c:64:92:df:cc:
cf:97:90:7f:4f:fb:c8:fd:0c:e9:da:4e:ae:ec:73:97:f5:94:
a6:d9:fd:6e:90:3f:69:1e:30:1c:d8:c9:8a:d6:5c:22:f0:84:
8f:b4:6e:4e:a6:10:dc:fa:b6:6a:b9:f6:34:36:ed:87:c0:44:
9b:09:e1:46
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIUBBAVl/yscZI0nBRK/ZxfNA6liSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTA5MDIwMDE4MjFaFw0yNjA5MDEwMDIzMjFaMDMxMTAvBgNV
BAMTKDIxMjkxRDI5NjNFRTc0NjgyQjEwQkVDQkE2MDYwRUYyNDZDNzY4ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqzF8yV15UrcnN2xzzVQaKG2R
QMSxinVQxE3lzJxRfjpj0ICxPQfnuwY9Gr6/IWoC+E4UHp1G0eXy16i3sevSivgW
2NSJRpshzLyHg9Y7o7Hvyi0Rd8QQ5WWuNsC5eELajIoGWR7tFA2DAcBxzjm/hxBL
anl2hrisPmw1FS8342pdeXLYqapiH+KBxfEx/dt7k3SQnOBroxNkbcsGgSGHYsEI
09aIzBh/mQWllsoLFLubvzAdwQYQ86ayKbHe5xIYV6p+yqjzN2uzPv5U/gxTVrxt
WJCpDbsl9TMtDFHYbFoMj9xx88nFdBztQ8xIzWPgoFs5My19ogPKQ/DRyIjrAgMB
AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhKR0pY+50aCsQ
vsumBg7yRsdogTAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzgv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIv
OC8yMTI5MUQyOTYzRUU3NDY4MkIxMEJFQ0JBNjA2MEVGMjQ2Qzc2ODgxLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH
AQcBAf8EGzAZMBcEAgACMBEDBwQqFHWA/5ADBgQqFHWDIDANBgkqhkiG9w0BAQsF
AAOCAQEAZJ6XeQd5POzqLzz5y0B9RyO3GY//oQnMiWPlVfFKKRca2Odc4xLbPSRY
kHhTsipezzbu5wFOCTj8uzRQ9IdNF8b36j7nozyVDUyzddZ7t/KI2OYYW7aWYz8S
lluJ4nVCidmNNeEYyiBhlZyy3dJzNyej5k8ByEu7H9YD48a1p2kMvZQNRJ2KVZ4p
lj7f8aqVCGVuy1Us9ynOW4esoMK+LKT3bVHjwE5IJuKXIFPEeoetpe+1fUe5FdWt
GDlNiln2V5xkkt/Mz5eQf0/7yP0M6dpOruxzl/WUptn9bpA/aR4wHNjJitZcIvCE
j7RuTqYQ3Pq2arn2NDbth8BEmwnhRg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 02:23:41 2025 by rpki-client