Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
File: 51917E722DB03952D9056BED2F6BD4BF98B78976.cer (raw, json)
Hash identifier: qkt+VZntRaYAj5AEumaHAU/bZWcmQkrVpuQHb3pnvI4=
Subject key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2CEFE970A4AA7D3F0ADEA74D1B4506B9526BD6C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 27 May 2025 01:01:04 +0000
Certificate not after: Tue 26 May 2026 01:06:04 +0000
Subordinate resources: IP: 2a14:7580:500::/40
IP: 2a14:7580:ff50::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ef:e9:70:a4:aa:7d:3f:0a:de:a7:4d:1b:45:06:b9:52:6b:d6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 27 01:01:04 2025 GMT
Not After : May 26 01:06:04 2026 GMT
Subject: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:f1:c4:b2:15:4c:11:fb:09:e9:10:a6:0b:
f9:24:d8:99:bd:a3:86:8d:80:22:33:0e:98:0a:6f:
bb:8e:51:ab:3d:8c:6e:f8:da:f0:6c:eb:16:50:d1:
aa:23:9c:d1:a5:7b:35:3a:86:a2:6e:82:db:92:ff:
ea:ba:51:fa:72:0f:81:37:1b:00:3f:43:90:45:38:
d9:f5:29:53:91:84:23:f4:fe:b7:35:1f:d0:59:c7:
2e:7c:68:ad:1c:e0:ea:7e:a2:85:54:d8:f4:c9:cd:
bb:9d:d1:33:14:4a:4c:6b:a9:32:07:38:bc:5e:4b:
18:4a:25:13:ca:99:3e:5c:7d:4f:18:df:9c:32:ea:
69:07:23:27:5f:ff:0f:3f:ad:ce:3e:9c:16:ed:9c:
d6:7e:86:75:0b:e7:a1:35:0b:c6:9c:8a:5a:3e:4e:
35:06:1d:b1:dd:a4:49:f1:3d:72:5d:c2:d4:0d:64:
9a:b5:9b:51:83:36:e0:ea:1c:b9:e7:ed:4b:74:17:
00:cd:10:41:b6:33:57:c3:bd:b1:5b:d5:19:75:37:
9a:be:26:f5:96:d6:c8:54:1d:2a:c6:ce:5d:83:3d:
11:f8:d1:8d:0e:44:1b:4f:16:03:14:6a:76:1e:85:
8f:90:53:31:c0:f9:98:ff:4c:86:13:93:50:a4:e3:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:500::/40
2a14:7580:ff50::/44
Signature Algorithm: sha256WithRSAEncryption
8e:5b:7f:06:6b:e3:b1:57:6f:e1:04:5f:2d:41:39:c3:ad:70:
85:d1:19:96:70:ce:ab:03:ab:5b:1a:65:bf:46:28:d1:29:f1:
9e:15:9e:2f:42:e7:de:14:12:45:04:9a:bf:fd:a6:47:17:1c:
17:41:ea:f3:d0:64:b7:71:c7:d9:2a:a8:83:9f:f1:84:a6:d0:
3b:09:e9:60:a4:2f:ac:89:06:e3:7e:36:db:9d:eb:30:23:65:
75:98:cf:23:67:68:e5:c2:b5:eb:5c:26:93:95:04:11:6f:11:
10:29:7c:74:c7:19:78:0d:79:02:2c:92:dd:25:84:ec:d6:dc:
e1:ba:06:61:92:ea:3b:f2:ed:10:d4:63:6a:72:e3:2c:f2:bd:
93:5d:0b:01:bf:ac:14:e5:1f:9f:de:1f:0a:4a:1f:1e:14:f6:
b5:77:8f:c8:37:ec:3d:7c:fb:d8:df:cc:32:9d:07:b6:cd:85:
8d:06:68:d1:6a:e5:34:ab:8c:86:e3:b9:1c:13:b9:90:07:b5:
f0:a4:11:8a:bb:87:89:c6:b7:c3:cc:15:a4:d5:33:d4:77:ec:
cb:7c:b6:cc:40:49:46:15:74:c2:a7:ec:c4:58:fc:38:0b:27:
ef:6c:9e:39:67:20:2d:63:ce:26:b7:09:a8:79:41:7a:be:ea:
61:0b:87:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:11:36 2025 by rpki-client