Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
File: A1EE5D09A0F5D0D87611013175C62E35777DA926.cer (raw, json)
Hash identifier: E+TGMnTmgYdTp7FHIQTEzStLrn4MJGv9bbX/Z/W7tq0=
Subject key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2A2032E4D32C5AA7AE078F3B61124613C344BCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 29 May 2025 03:55:41 +0000
Certificate not after: Thu 28 May 2026 04:00:41 +0000
Subordinate resources: IP: 2a14:7581:ff0::/48
IP: 2a14:7581:9000::/38
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:20:32:e4:d3:2c:5a:a7:ae:07:8f:3b:61:12:46:13:c3:44:bc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 29 03:55:41 2025 GMT
Not After : May 28 04:00:41 2026 GMT
Subject: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:34:a6:7d:b1:db:4c:7d:ff:0d:e4:d3:7f:
f8:db:c7:9f:75:cf:18:33:29:b5:3f:eb:bf:e5:91:
09:cb:f4:e9:5a:26:91:8f:2e:5f:c0:54:11:58:92:
a2:3b:9a:38:eb:97:a7:34:8c:5e:82:f4:c7:77:35:
b5:a4:87:59:b8:66:b7:e0:c0:cf:ac:9b:fe:42:e3:
41:11:29:5e:b2:2e:b8:f3:9c:2e:6e:e2:98:54:57:
68:40:48:0b:d7:d4:be:f4:86:ca:10:02:bf:71:7b:
92:6c:30:1b:4b:1e:22:1e:be:59:06:32:0a:80:9c:
5d:17:a8:97:61:46:9d:4b:75:56:11:87:74:e9:8a:
dc:c8:18:b1:08:c8:bb:92:8c:ed:ad:59:69:7d:fb:
f9:21:9f:b6:84:30:57:b6:4f:d7:e6:f3:66:cd:0f:
87:e7:3f:8f:7e:04:ce:c6:bc:23:19:de:57:da:0c:
f3:da:7b:ac:6e:3b:80:d4:d1:9a:60:b1:de:ae:61:
26:0e:29:57:82:f1:a0:4a:97:56:04:30:02:8a:33:
20:4c:a6:7e:c1:f6:36:00:d4:12:08:f1:62:b6:3e:
7c:58:26:2a:2a:66:76:8a:db:45:7a:f0:f6:e6:38:
b5:77:2e:ae:57:0b:8b:ed:06:25:17:b0:9a:28:0c:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ff0::/48
2a14:7581:9000::/38
Signature Algorithm: sha256WithRSAEncryption
08:25:29:b0:7d:bc:82:94:97:77:ec:aa:19:d4:73:61:38:e0:
b5:a4:ac:aa:62:be:8a:fd:ac:5e:59:34:5f:84:99:32:eb:ae:
71:61:f8:d2:5e:f5:9a:0e:58:59:c4:9f:5f:c9:ea:59:88:fd:
b9:6c:e2:73:c6:a3:b4:f7:4f:69:99:39:4d:26:44:4a:f9:ea:
f3:54:74:ce:31:7e:47:7e:41:7e:69:e9:6d:5a:e0:56:a2:a0:
0c:0f:a5:6e:f7:ee:14:d0:e9:f0:f8:2e:6b:37:0e:e4:10:17:
61:37:1b:f9:d4:2f:0a:5a:c1:29:a0:26:2b:88:ed:32:dd:7b:
9f:09:f1:63:c2:be:c4:34:bb:37:ca:78:f4:6a:c2:4b:24:c7:
44:99:84:8a:be:90:c8:75:e6:76:1f:87:11:07:36:d8:ef:34:
49:bd:00:3b:75:29:0c:2c:f3:93:2d:b3:e5:33:32:0e:8b:55:
6a:69:71:86:97:17:eb:80:52:62:85:90:8d:6f:5f:e0:53:d2:
06:02:fe:22:21:7c:31:9f:cc:95:be:aa:72:ca:1a:35:84:71:
c7:c9:d4:10:df:84:8b:06:60:0a:47:c4:91:a5:5a:a0:6b:34:
47:26:6a:e1:83:d8:09:c5:07:56:01:d3:f7:30:36:82:26:9d:
9b:89:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:43:09 2025 by rpki-client