Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer
File: 6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer (raw, json)
Hash identifier: TBGVxpfX3vSXXwGkEykSPRSNRGLeezKxWRs0KhihZ3M=
Subject key identifier: 6D:12:0B:6D:85:1B:D3:8C:69:E5:D3:59:9F:D8:C0:FB:F7:31:42:79
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 32147B26E706FB85FCCD8666ECF03D0FCD7ABCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 24 Aug 2026 14:54:35 +0000
Certificate not after: Mon 23 Aug 2027 14:59:35 +0000
Subordinate resources: IP: 2a14:7581:fc0::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:14:7b:26:e7:06:fb:85:fc:cd:86:66:ec:f0:3d:0f:cd:7a:bc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 24 14:54:35 2026 GMT
Not After : Aug 23 14:59:35 2027 GMT
Subject: CN=6D120B6D851BD38C69E5D3599FD8C0FBF7314279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:fe:e6:39:a5:79:35:2b:ca:0e:15:7e:0e:
b3:ed:8d:a9:d2:1e:f3:fb:7d:ad:07:76:3a:e5:5a:
ec:7e:e0:8e:b7:32:74:36:c7:7f:b7:cd:d7:f8:b6:
ae:a2:03:c5:0c:13:83:00:59:25:d6:a0:51:ab:3d:
23:fd:f0:c4:1c:48:59:3f:f1:6d:d8:2c:38:32:c9:
e7:97:63:2e:9f:bc:ad:5b:f2:27:99:c1:9d:22:e2:
74:af:b7:01:06:eb:4f:af:37:4e:34:2b:82:18:6b:
4b:f0:d2:84:1f:e8:63:53:f0:3d:89:a5:9e:61:45:
5c:a3:7c:c9:69:5d:d8:3c:b0:bb:70:0b:fc:61:ce:
4f:0b:6a:06:93:23:7d:8b:aa:92:0d:88:79:dc:d7:
9e:df:01:82:38:0e:d6:15:14:45:60:5f:c4:29:04:
4e:5a:36:66:e4:97:f9:5b:d5:b7:3e:5d:55:9d:75:
47:7c:77:47:18:62:ba:4c:f5:0d:af:0c:3a:9d:ed:
e2:12:63:de:83:d0:44:dc:5f:4e:66:3f:5d:f4:6e:
df:f1:1a:93:6b:99:47:7a:b1:67:08:80:95:b8:ae:
22:ec:0f:9c:d4:35:4b:84:d4:ad:69:b6:cf:c9:09:
d7:4b:ac:7c:22:ff:02:72:0d:6d:19:7d:b4:a0:2e:
d6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6D:12:0B:6D:85:1B:D3:8C:69:E5:D3:59:9F:D8:C0:FB:F7:31:42:79
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:fc0::/44
Signature Algorithm: sha256WithRSAEncryption
2a:d5:34:bc:42:03:c4:67:d7:75:3e:c8:25:48:bc:55:a2:06:
37:6f:86:9b:80:cb:b5:37:6a:dc:d7:fc:dd:34:46:0e:a5:03:
59:35:23:cb:da:d0:a1:37:10:c5:cb:7c:71:03:93:30:e7:29:
1d:3a:49:e2:d5:2c:55:ce:da:40:27:4c:7f:67:5f:2e:a6:c3:
b6:fe:5f:47:c3:ac:e8:86:23:7b:39:54:d4:7f:f6:da:6a:47:
4f:45:96:db:0e:21:f4:25:01:13:d1:ba:55:c3:f5:57:ba:f1:
22:66:b3:2d:ff:76:ab:90:44:79:6a:87:64:c3:1b:50:fa:78:
19:21:ae:16:2e:ba:b7:01:2e:ae:c4:ec:a4:ae:06:63:39:c1:
06:a3:94:e4:17:c0:2f:ee:8a:ad:65:38:09:8a:c2:c8:22:28:
af:fd:86:c3:5e:47:ae:31:ce:42:21:85:ac:c4:21:2a:4d:dd:
76:71:70:c6:3e:9f:c7:5a:41:aa:5f:98:02:df:3c:d2:03:26:
f9:16:4d:fa:5c:7e:21:f9:28:69:6f:ae:08:98:cd:fa:09:28:
06:52:6f:20:a6:16:1a:e0:dc:ef:48:5d:37:6f:e1:e3:21:06:
5a:24:d9:05:8d:80:91:7b:6f:38:44:27:bb:6d:64:cb:4b:4d:
f0:73:ea:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:52:52 2026 by rpki-client