Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.cer
File: 6B5432AF3212182697F0E937473AF3EB52E68EA2.cer (raw, json)
Hash identifier: lti7wq9hop0Cod3Smb2zqXorHhSYUyEIKNbGaF3eiWg=
Subject key identifier: 6B:54:32:AF:32:12:18:26:97:F0:E9:37:47:3A:F3:EB:52:E6:8E:A2
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 37C744E060749843BA3379F9A7CDF23F2BAAAB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 09 Mar 2025 08:12:10 +0000
Certificate not after: Sun 08 Mar 2026 08:17:10 +0000
Subordinate resources: IP: 2a14:7580:c00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c7:44:e0:60:74:98:43:ba:33:79:f9:a7:cd:f2:3f:2b:aa:ab:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 9 08:12:10 2025 GMT
Not After : Mar 8 08:17:10 2026 GMT
Subject: CN=6B5432AF3212182697F0E937473AF3EB52E68EA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:c9:70:8b:4c:77:46:8c:7d:b5:47:e0:0a:
83:42:80:fc:b3:ee:44:78:7a:f4:2f:c5:2f:1d:08:
1c:36:9b:c4:02:68:1d:c1:d3:bb:e1:e0:32:8b:d1:
6b:64:fc:d5:7c:33:aa:0c:cf:d2:52:8d:75:5f:e6:
33:90:ee:13:c0:5e:7e:9a:99:b9:82:61:79:93:a1:
5d:24:91:b2:d4:38:46:97:f5:d1:ee:83:de:88:04:
f4:76:f5:82:eb:bf:eb:37:88:1d:be:3a:e7:64:ad:
ba:d2:3c:22:74:ed:b8:34:74:8b:58:5e:84:2a:88:
4f:15:fc:66:5b:2a:05:ef:84:ec:44:46:78:10:7d:
3f:e9:e5:16:3f:6c:13:d2:b1:88:0f:4e:7a:40:2b:
aa:b3:63:81:93:74:25:24:e3:f6:1c:cf:20:24:b3:
4d:b7:3a:83:e0:f2:51:4d:e8:be:9d:38:31:73:bc:
1e:c9:a8:d9:60:f8:1e:fe:d2:65:02:07:1c:37:b6:
a1:9d:56:23:ad:34:d4:ee:44:15:6c:01:37:19:15:
d2:b3:49:65:34:3f:cf:fe:df:c6:8d:22:83:40:f1:
57:d6:f8:ca:e2:5d:a4:4e:34:32:b6:01:92:b1:f8:
e7:1c:be:0e:cb:0f:20:d8:03:59:36:87:8d:02:b9:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6B:54:32:AF:32:12:18:26:97:F0:E9:37:47:3A:F3:EB:52:E6:8E:A2
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:c00::/40
Signature Algorithm: sha256WithRSAEncryption
79:d2:a8:d2:d0:17:e7:1f:4d:79:15:2a:10:40:f3:fa:df:82:
f8:18:a6:43:e7:9f:a1:0b:65:c3:7b:e8:da:9d:38:2c:fb:b3:
22:fa:a2:d5:f0:01:35:8e:76:eb:41:d0:1a:94:bc:a0:7b:c9:
c5:6d:1c:ab:07:84:be:59:58:ed:4f:9d:e6:bf:f9:f0:01:ec:
dd:33:f7:58:41:4a:07:52:fd:8a:7a:d4:28:cc:4b:66:e7:71:
78:2b:4c:ad:3f:02:38:4d:29:c6:8f:fa:f3:cb:42:2c:2f:09:
c1:93:35:4d:e2:0c:0f:5d:97:78:a3:80:1f:e7:9f:67:30:1c:
15:d2:91:8f:2f:59:a9:45:54:fd:1e:10:1f:d9:a4:89:82:e9:
b2:84:49:ae:78:bb:ee:33:c2:87:3d:88:ad:68:28:e5:1c:1b:
bc:bf:d5:2e:93:15:23:07:e6:13:d0:7f:16:f7:58:2b:9a:f2:
a0:7d:34:8e:99:e6:96:b0:b7:69:fb:27:fa:19:a3:36:7c:0e:
74:05:c2:62:77:82:70:69:d3:43:4f:84:d5:0b:3f:0c:bc:33:
2f:1d:4e:e6:d1:a4:5f:46:8d:87:0a:f8:f9:97:f9:df:6a:05:
64:48:b0:95:59:b7:22:86:16:15:a9:a3:68:80:0f:e8:e1:aa:
e2:e9:eb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:47:03 2025 by rpki-client