Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer
File: 8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer (raw, json)
Hash identifier: 1YIpf3Hv4siSSFjJEspPRKegETc4g5tQOVhComJOYbE=
Subject key identifier: 8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 41D0CD5291FC4B915BEE64BA654529D5B0BB06DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Sep 2025 07:51:32 +0000
Certificate not after: Mon 31 Aug 2026 07:56:32 +0000
Subordinate resources: IP: 2a14:7581:3100::/40
IP: 2a14:7583:f500::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 13:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d0:cd:52:91:fc:4b:91:5b:ee:64:ba:65:45:29:d5:b0:bb:06:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 1 07:51:32 2025 GMT
Not After : Aug 31 07:56:32 2026 GMT
Subject: CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:cd:e5:61:ec:4e:07:a2:03:3e:96:bb:48:
08:d1:a7:8a:73:e2:23:80:02:59:9f:f4:64:9d:9b:
7f:da:92:1e:24:83:70:87:6d:b9:75:b3:29:42:62:
a5:a4:36:ee:94:de:a1:b6:3e:ab:0d:35:db:f2:3f:
9a:d5:0f:f6:85:88:4b:d0:65:e6:8d:5d:3b:4c:fd:
cb:27:78:59:e5:db:38:5e:8d:94:a8:c5:93:de:67:
74:6f:77:65:60:b7:e0:7d:d5:e5:6a:20:5e:32:17:
be:1b:de:fe:0d:55:ae:17:88:08:04:81:d4:39:81:
28:e6:52:26:b4:8c:97:8a:3b:f6:0e:77:37:1c:04:
6a:0a:64:e2:68:9d:07:51:0a:ab:30:4c:d3:0a:b4:
67:ff:f2:cd:b8:8f:2a:25:60:dc:f5:8f:d9:6e:0a:
9c:a6:09:04:ec:92:22:29:c9:c8:b4:89:37:ae:05:
df:77:b1:aa:a6:f7:97:ef:d5:b2:94:5b:cc:71:bd:
62:71:3d:da:1c:0e:8a:43:8b:7c:ef:e4:a1:2f:23:
3e:9a:d7:bb:5f:8a:be:a5:21:c7:8c:3e:b0:ba:52:
a5:f5:4d:07:5e:2e:13:2a:9c:82:1d:ef:c0:ad:39:
b0:b1:68:3c:36:f3:6f:9e:b8:d4:c4:11:db:97:57:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3100::/40
2a14:7583:f500::/40
Signature Algorithm: sha256WithRSAEncryption
05:88:1c:d9:67:b5:2b:b6:90:01:df:7f:c1:f0:01:83:35:3a:
b1:55:42:a3:69:4b:53:ce:47:5c:c3:c3:3a:d0:c4:85:4b:2f:
08:b8:e4:42:7c:f1:f9:d4:e6:d5:b8:9b:7d:f2:d1:4b:21:c3:
be:9d:b3:40:74:73:cc:b8:42:45:df:b7:aa:43:0b:8a:7a:9d:
b3:2c:5d:37:32:fd:db:d4:08:98:f9:3a:8a:a2:d7:6a:b4:91:
b6:3e:af:4d:a2:ef:95:e7:f5:dc:93:6e:e2:47:e0:cf:fa:e8:
50:09:22:4d:fc:96:80:24:6f:01:b2:89:09:ae:fa:10:86:96:
eb:40:8e:12:4a:85:99:67:67:d4:de:05:7d:48:70:9c:f7:06:
68:d3:34:b5:12:73:08:22:6e:31:31:ce:00:99:6a:b7:97:b5:
1c:11:d6:1c:28:28:5e:7d:cc:68:c7:d8:4f:52:32:36:06:bf:
20:3e:9c:aa:76:77:4d:00:ef:81:da:74:b5:5c:0b:68:cc:5d:
c1:a6:40:73:f3:67:39:69:db:7e:48:4f:ac:00:90:13:43:4d:
ff:db:b6:3f:e7:30:73:a0:9d:dd:18:11:aa:8e:0e:60:7b:44:
cc:32:9a:3c:fe:6d:90:79:27:4a:b9:e7:1c:ad:c9:b8:f5:8a:
00:34:3f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 02:27:07 2025 by rpki-client