Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer
File: 5B9C459FED5E28921D6D57A342A855A1BA969897.cer (raw, json)
Hash identifier: djO371qzEdu9/qhs1X9Pf+4dRYl517Op/g7fu+fe/KQ=
Subject key identifier: 5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1CB87083666C7211A51740197ACA0599EDEF362A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft
caRepository: rsync://krill.cxy.hk/repo/Xinyu/0/
Notify URL: https://krill.cxy.hk/rrdp/notification.xml
Certificate not before: Sun 31 May 2026 17:29:19 +0000
Certificate not after: Sun 30 May 2027 17:34:19 +0000
Subordinate resources: IP: 2a14:7581:3800::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:b8:70:83:66:6c:72:11:a5:17:40:19:7a:ca:05:99:ed:ef:36:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 31 17:29:19 2026 GMT
Not After : May 30 17:34:19 2027 GMT
Subject: CN=5B9C459FED5E28921D6D57A342A855A1BA969897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:b8:ec:ed:fb:45:f5:1c:c0:73:bf:b5:4a:
1d:6b:e6:42:73:ed:be:0e:0a:8b:37:b1:6d:bd:24:
43:27:51:4e:aa:50:e6:92:6b:f2:5c:8f:48:96:60:
96:a2:04:50:ef:0b:bf:05:ca:03:42:5c:4a:25:a1:
f6:a2:61:3e:33:00:ec:d2:99:c4:db:cc:dd:83:64:
09:9c:e9:5f:7d:ac:0d:17:c1:95:ac:47:40:39:50:
fc:52:b7:04:d1:ec:b1:13:5f:b3:9c:fa:da:bb:66:
3f:c1:36:73:85:2e:5b:f2:cc:62:90:7f:db:9d:69:
20:9c:45:b1:9b:81:2a:e3:d0:df:aa:78:32:ad:87:
c0:5e:b4:39:89:78:8a:89:b9:26:b9:0c:e9:ff:0c:
b8:ba:80:40:81:39:23:c9:2f:34:1b:d6:b7:01:f3:
8a:9f:4f:99:f5:f0:60:93:22:6b:05:90:3a:46:07:
96:51:79:9d:68:c8:6a:7a:d2:86:ba:98:78:d2:c0:
d2:64:43:1f:37:02:c0:a2:7a:db:55:ab:95:d9:0f:
d6:4c:8b:ee:55:32:ea:a3:43:db:0a:a8:e9:6c:9c:
9d:04:64:13:58:c9:a4:ce:18:88:8c:82:52:96:cf:
1d:ad:d4:ac:ec:6c:c1:25:f0:d4:de:cc:35:fa:31:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://krill.cxy.hk/repo/Xinyu/0/
RPKI Manifest - URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft
RPKI Notify - URI:https://krill.cxy.hk/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3800::/40
Signature Algorithm: sha256WithRSAEncryption
69:86:4f:85:54:b6:c7:0c:46:e4:e3:be:7b:94:08:8f:60:ac:
c5:5e:b5:69:a8:c9:8d:3f:0e:e7:e8:19:f0:9b:d6:b5:52:16:
86:6f:43:de:e4:03:c8:74:bb:63:fb:78:12:34:af:50:65:1f:
09:d9:5b:b1:ba:63:f0:42:d2:24:18:a6:9d:fa:5d:69:72:5f:
4c:ac:17:59:37:05:03:32:4f:5c:bf:e1:e3:2b:0f:31:a4:5f:
89:b7:d5:d2:13:52:fc:d6:a5:f1:a0:39:f7:54:f0:02:5c:a8:
a5:51:98:dc:0c:c8:ff:a6:8a:02:c5:d4:97:f3:3e:17:a1:c1:
67:c6:1f:bb:67:48:b4:53:f5:44:8f:d5:08:87:ed:16:0c:93:
f1:8e:e6:b1:b0:ac:52:cc:7c:f5:2a:20:0b:5c:b1:76:86:3e:
ac:a5:10:4c:f6:5a:83:6d:3d:27:ac:56:5f:ec:c6:29:c2:8a:
61:3c:a6:c3:22:3f:b6:83:20:c9:df:8a:4f:02:56:8b:ee:51:
d7:c7:f8:42:05:42:6c:a3:2d:94:41:66:8f:5c:90:1a:76:a3:
3b:57:18:c6:cf:15:01:fb:95:ef:14:44:46:c9:c5:05:7a:3d:
24:4a:cf:4c:5e:2a:37:f3:4b:e8:5f:97:f3:d6:91:9a:c8:c4:
3b:99:5c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:30:15 2026 by rpki-client