Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F861C17CCC63A8FE4F54B725229D4182E376702E.cer
File: F861C17CCC63A8FE4F54B725229D4182E376702E.cer (raw, json)
Hash identifier: jyE2mkJqXgvv05AVpt/d6yNHx5Y6+/ErUA4UlUa6i6Y=
Subject key identifier: F8:61:C1:7C:CC:63:A8:FE:4F:54:B7:25:22:9D:41:82:E3:76:70:2E
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5EA43ECDCEE356D6BB4DCFB29E449B02D122CADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 26 Mar 2025 05:11:58 +0000
Certificate not after: Wed 25 Mar 2026 05:16:58 +0000
Subordinate resources: IP: 2a14:7580:7000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a4:3e:cd:ce:e3:56:d6:bb:4d:cf:b2:9e:44:9b:02:d1:22:ca:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 26 05:11:58 2025 GMT
Not After : Mar 25 05:16:58 2026 GMT
Subject: CN=F861C17CCC63A8FE4F54B725229D4182E376702E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:d8:e8:9a:5c:36:d1:6d:e3:47:65:e0:b9:
2e:26:03:71:e2:53:09:49:54:79:73:d8:ee:97:06:
25:5b:7a:83:50:97:50:06:10:d8:ab:6b:c3:94:27:
11:b3:da:f8:a2:ce:97:b8:1e:24:6d:6e:74:d5:a1:
60:83:1d:ab:37:8e:9b:41:f0:e8:16:46:e8:ff:d4:
f2:8f:9d:6a:58:cc:a4:98:bc:8a:18:f0:cf:38:a2:
8b:9d:60:21:32:51:c8:71:67:82:fe:f7:d9:dc:1f:
e9:a1:2a:ec:6a:fd:d1:44:1b:89:03:2d:04:df:f6:
10:76:19:32:3c:09:b0:f4:ea:a6:54:59:d0:18:72:
62:53:94:60:9d:60:8a:f0:9a:8a:4c:90:c4:91:08:
bf:c1:4d:33:16:f5:4e:57:06:47:da:d0:5d:02:f7:
e0:96:dd:27:95:0e:55:c4:0b:83:7d:9d:a3:86:84:
8b:42:f8:cb:da:1e:e7:d8:a8:8c:ac:38:a4:86:1e:
e2:0a:4e:e1:e7:a4:70:db:e4:1f:44:5c:4c:40:5a:
cb:4b:04:42:34:e5:02:f5:f8:02:cf:2e:eb:71:de:
f4:ee:20:1f:d2:c6:6d:bf:48:5f:58:a8:4f:c1:da:
51:f8:68:df:7c:ee:bd:bf:15:33:51:0b:6a:4d:ff:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F8:61:C1:7C:CC:63:A8:FE:4F:54:B7:25:22:9D:41:82:E3:76:70:2E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:7000::/36
Signature Algorithm: sha256WithRSAEncryption
83:9f:e2:ed:c9:b3:96:24:33:1f:a3:1b:e2:f6:47:3f:87:d1:
c2:d5:b9:3a:c5:80:55:ea:40:84:a4:a6:81:58:8c:7a:5a:83:
19:ad:32:d1:83:c0:9a:20:39:ba:b2:29:28:19:79:d2:46:f9:
5b:cb:07:95:f2:b8:61:02:ad:be:a6:21:c1:f4:56:b9:f8:ca:
de:ee:8d:30:9e:ff:b2:01:0e:0b:e2:f6:38:e6:82:36:05:5c:
9c:ba:81:cc:89:e1:fe:f9:22:b3:f1:1e:a9:47:80:d4:61:eb:
22:b7:69:23:2e:74:27:09:67:aa:e4:63:c5:e5:60:c9:b6:e9:
ed:97:09:71:35:c6:70:1f:27:9b:19:a0:d3:9c:ee:97:80:0d:
18:4a:59:bc:9e:21:98:f7:fe:32:3c:ed:21:37:d7:da:d3:98:
db:7f:f3:6b:32:c3:c2:cb:50:d5:c3:30:13:ab:72:12:76:81:
24:24:23:3b:dc:34:1c:e6:ce:9f:77:b0:3f:4a:aa:84:ee:a8:
f9:7a:b8:b9:3f:21:9a:f6:e1:c1:6a:6e:4b:54:f1:14:37:f7:
57:5e:d8:ff:3f:72:80:de:bb:0f:e3:91:9d:f2:46:2f:43:24:
07:ff:3f:33:52:4a:a9:36:cb:20:16:a7:28:86:1c:e2:d0:d3:
74:4a:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:11 2025 by rpki-client