Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer
File: 5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer (raw, json)
Hash identifier: fU9gG7Hz22oyCMfppu5j2SiiPQMwR9D4hRIo29aaqgA=
Subject key identifier: 5B:E6:F0:78:1C:3A:7A:74:F9:93:C5:3D:C0:7F:C4:24:ED:91:15:92
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 14699B2E568CA2CCDCCE9C7D2157C94FCA3425E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 06 Jun 2025 13:58:13 +0000
Certificate not after: Fri 05 Jun 2026 14:03:13 +0000
Subordinate resources: IP: 2a14:7580:300::/40
IP: 2a14:7580:fff2::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:69:9b:2e:56:8c:a2:cc:dc:ce:9c:7d:21:57:c9:4f:ca:34:25:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 6 13:58:13 2025 GMT
Not After : Jun 5 14:03:13 2026 GMT
Subject: CN=5BE6F0781C3A7A74F993C53DC07FC424ED911592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:42:6c:dc:46:fe:41:a3:be:4c:14:c1:7b:
67:22:92:78:11:27:d4:55:93:b3:28:1a:f2:42:a8:
77:94:99:f3:0a:38:5b:0c:e0:df:f5:a3:2c:d5:46:
d8:43:63:ab:d8:8f:65:99:28:da:f7:b8:e5:21:c9:
26:f1:83:05:a7:15:4f:cf:73:70:4d:98:bf:b7:8a:
3d:d5:f3:46:6c:e7:39:d7:b6:0e:48:85:3c:99:04:
6a:55:0f:22:f8:f6:97:36:5a:8d:97:d7:e4:30:76:
08:d8:65:9d:56:64:66:8b:cf:53:5c:c8:7f:33:50:
38:5f:92:be:1c:3c:37:ab:d1:f8:92:56:b9:e4:76:
97:41:19:83:85:56:ba:6d:c9:26:e2:39:23:d9:d6:
74:0c:5e:d0:11:c5:d7:b2:2b:53:e3:cf:0f:34:95:
a4:2f:a6:57:a0:4f:90:24:88:24:a7:3a:f4:d4:c5:
5f:a2:07:b3:48:ae:13:3b:4e:03:13:8c:a5:77:88:
56:8a:27:74:2b:98:f0:59:c9:6c:54:31:33:18:d1:
28:c2:55:80:88:ce:27:c0:23:25:26:97:da:36:40:
cd:7d:b4:a8:68:9c:6e:e3:f3:cd:21:f9:27:df:ff:
89:a7:71:fa:fa:32:e2:ed:5e:5a:6e:2a:7d:98:86:
35:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5B:E6:F0:78:1C:3A:7A:74:F9:93:C5:3D:C0:7F:C4:24:ED:91:15:92
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:300::/40
2a14:7580:fff2::/48
Signature Algorithm: sha256WithRSAEncryption
4e:07:70:b9:05:3c:9b:bd:f8:17:27:84:6d:a5:90:ea:60:bc:
e9:79:66:71:24:d2:12:69:6c:73:a8:42:4f:bf:12:a9:71:9d:
19:3e:78:f0:3d:c2:3f:6b:96:c2:08:89:b8:96:52:cd:e1:2f:
a5:e6:29:23:36:85:e0:d6:b3:e4:fb:92:a0:f4:86:8b:10:c9:
29:26:57:a5:eb:34:3d:9b:1f:2e:4c:cc:a7:e8:94:a7:65:3f:
5d:be:88:12:01:d4:28:e4:36:e5:69:19:bd:4a:9d:10:09:51:
b5:2f:da:8b:0d:de:56:62:bd:0e:1a:2b:84:5e:58:fd:36:fd:
e9:c3:20:31:7b:20:cf:96:e5:90:7f:a7:02:1b:39:a3:c1:61:
1d:05:d4:13:b0:41:95:ae:1b:c0:34:4d:a3:02:e5:4c:15:86:
41:5b:60:47:54:e9:e1:d2:07:2f:5e:b4:bc:17:54:ff:3a:86:
ca:29:9c:0c:07:86:be:1b:ef:42:7c:8d:06:42:e6:7b:4e:b8:
00:ba:07:cf:70:dd:3f:4c:32:be:33:67:e2:45:b2:6d:8e:f9:
4b:07:ed:3c:da:22:9a:cb:c0:81:e3:b2:14:ba:fc:3d:d7:d7:
c2:7c:f9:4a:ac:cd:e3:83:19:0c:e7:a4:89:9f:e4:ec:16:47:
45:7b:89:f0
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIUFGmbLlaMoszczpx9IVfJT8o0JegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTA2MDYxMzU4MTNaFw0yNjA2MDUxNDAzMTNaMDMxMTAvBgNV
BAMTKDVCRTZGMDc4MUMzQTdBNzRGOTkzQzUzREMwN0ZDNDI0RUQ5MTE1OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZa0Js3Eb+QaO+TBTBe2cikngR
J9RVk7MoGvJCqHeUmfMKOFsM4N/1oyzVRthDY6vYj2WZKNr3uOUhySbxgwWnFU/P
c3BNmL+3ij3V80Zs5znXtg5IhTyZBGpVDyL49pc2Wo2X1+QwdgjYZZ1WZGaLz1Nc
yH8zUDhfkr4cPDer0fiSVrnkdpdBGYOFVrptySbiOSPZ1nQMXtARxdeyK1Pjzw80
laQvplegT5AkiCSnOvTUxV+iB7NIrhM7TgMTjKV3iFaKJ3QrmPBZyWxUMTMY0SjC
VYCIzifAIyUml9o2QM19tKhonG7j880h+Sff/4mncfr6MuLtXlpuKn2YhjV/AgMB
AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRb5vB4HDp6dPmT
xT3Af8Qk7ZEVkjAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMDJhZWQwYTQtM2U3Ni00ODMwLWJiYjQtMWNiYzIwNDM1MmIzLzAv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8wMmFlZDBhNC0zZTc2LTQ4MzAtYmJiNC0xY2JjMjA0MzUyYjMv
MC81QkU2RjA3ODFDM0E3QTc0Rjk5M0M1M0RDMDdGQzQyNEVEOTExNTkyLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH
AQcBAf8EGzAZMBcEAgACMBEDBgAqFHWAAwMHACoUdYD/8jANBgkqhkiG9w0BAQsF
AAOCAQEATgdwuQU8m734FyeEbaWQ6mC86XlmcSTSEmlsc6hCT78SqXGdGT548D3C
P2uWwgiJuJZSzeEvpeYpIzaF4Naz5PuSoPSGixDJKSZXpes0PZsfLkzMp+iUp2U/
Xb6IEgHUKOQ25WkZvUqdEAlRtS/aiw3eVmK9DhorhF5Y/Tb96cMgMXsgz5blkH+n
Ahs5o8FhHQXUE7BBla4bwDRNowLlTBWGQVtgR1Tp4dIHL160vBdU/zqGyimcDAeG
vhvvQnyNBkLme064ALoHz3DdP0wyvjNn4kWybY75SwftPNoimsvAgeOyFLr8PdfX
wnz5SqzN44MZDOekiZ/k7BZHRXuJ8A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:17:04 2025 by rpki-client