Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
File: BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer (raw, json)
Hash identifier: Q+3UzyPWsAWbx31PmpWBCWXpOGqL1G0Ewx+WuCxOluk=
Subject key identifier: BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 77996A195BFCE44511C2BC8E2EC65A2EAF05BCEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
caRepository: rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/
Notify URL: https://krill.dispaisy.systems/rrdp/notification.xml
Certificate not before: Tue 25 Aug 2026 14:12:18 +0000
Certificate not after: Tue 24 Aug 2027 14:17:18 +0000
Subordinate resources: IP: 2a14:7583:e100::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:99:6a:19:5b:fc:e4:45:11:c2:bc:8e:2e:c6:5a:2e:af:05:bc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 25 14:12:18 2026 GMT
Not After : Aug 24 14:17:18 2027 GMT
Subject: CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:b7:3c:89:b2:3e:7b:87:54:a6:aa:81:99:
cd:69:08:f4:1a:d2:33:60:be:e4:d3:1f:aa:fb:c5:
2c:9b:29:8f:4a:d2:71:ed:92:27:c3:e3:7f:9b:08:
4e:37:f4:56:b0:dd:5f:71:f7:5e:b5:7d:fb:b1:70:
18:11:de:01:08:2f:47:fc:18:00:c4:95:7a:20:e1:
50:f3:10:ca:f6:99:a8:42:df:8a:71:31:48:5c:b2:
4f:59:8b:a9:db:9f:11:cf:47:29:96:97:d4:e1:99:
4a:56:2d:70:9c:13:59:71:fd:f9:20:ee:be:bb:8d:
38:ae:2f:88:21:be:6a:0f:13:3f:a0:38:c4:70:94:
57:39:cb:22:9d:f9:68:24:9b:7c:74:01:bb:d6:2b:
32:4d:1f:0f:e3:c6:ae:2a:25:dd:01:5e:4a:14:14:
49:4d:48:48:07:c9:e4:f6:f8:13:73:23:77:7d:36:
ca:fd:30:eb:f9:a4:cd:45:41:8b:28:f2:27:6a:cb:
d1:a0:5b:fe:95:b0:0e:78:a3:fd:fb:53:0c:b0:91:
1a:19:be:13:ec:ec:c4:06:ac:1d:bc:0e:de:7b:0e:
75:ec:82:ac:03:20:e3:80:ae:d8:9a:cd:06:ee:e0:
7d:8a:92:e0:36:db:82:14:66:ca:0e:7a:15:ce:53:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/
RPKI Manifest - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
RPKI Notify - URI:https://krill.dispaisy.systems/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:e100::/40
Signature Algorithm: sha256WithRSAEncryption
25:2c:99:8e:ef:fc:6b:cb:f6:60:f1:07:a6:24:84:17:b3:6e:
bd:a9:87:b7:9d:60:28:cd:1f:d3:18:cc:1a:97:1e:18:6f:74:
b3:35:c6:a1:ed:ee:17:d2:bd:21:1f:86:5d:c2:07:4c:8d:cb:
2e:bb:be:6b:4b:4a:c6:85:4c:c8:04:38:e7:27:b5:81:24:67:
78:4f:87:fa:54:4e:3d:46:99:25:75:38:1a:52:2c:f3:87:05:
6c:38:19:4f:52:e3:71:93:d8:79:be:2a:90:a7:16:34:d5:db:
7f:72:49:67:2c:6f:d8:a0:9b:a4:f6:dd:0e:bc:05:de:57:b7:
04:6f:38:e7:d0:26:3d:14:33:64:32:4e:de:53:c3:66:1c:7f:
bb:11:8d:01:5e:45:b3:c4:77:75:d2:c1:2d:30:2d:0a:1a:5b:
48:78:95:d8:ad:76:b6:48:5b:f8:26:2b:8d:49:9d:e6:dc:ef:
79:02:28:5c:1e:00:14:74:84:83:0b:dc:fb:55:ef:1e:d0:23:
c1:58:7f:4b:f5:16:af:a2:7c:ec:f1:b4:2c:9c:dc:ce:5b:12:
a2:84:ea:ac:0d:1e:2c:89:20:f9:36:5d:62:7f:2b:b9:bc:22:
ef:ab:3a:c3:62:8d:68:52:fd:ff:aa:6f:e1:36:fe:69:66:99:
bb:12:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:25:39 2026 by rpki-client