Certificate
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
File: C8623AA6C30FA8E058243708F5672D7960E52389.cer (raw, json)
Hash identifier: qDS/meVpMF7qgfPtayVFbWOCnAfvA9XikJALxZNw670=
Subject key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 2327FCFDA38ADF359079F7AE1F7DF02E459A1D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Manifest: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
caRepository: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/
Notify URL: https://rov-measurements.nlnetlabs.net/rrdp/notification.xml
Certificate not before: Fri 01 Aug 2025 13:25:17 +0000
Certificate not after: Fri 31 Jul 2026 13:30:17 +0000
Subordinate resources: IP: 2a04:b905::/32
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:27:fc:fd:a3:8a:df:35:90:79:f7:ae:1f:7d:f0:2e:45:9a:1d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Aug 1 13:25:17 2025 GMT
Not After : Jul 31 13:30:17 2026 GMT
Subject: CN=C8623AA6C30FA8E058243708F5672D7960E52389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:74:f5:21:88:8c:11:78:29:03:54:fe:81:
d4:69:60:51:c5:ed:67:d5:31:b3:fa:dc:72:24:6e:
8d:4e:cf:f5:18:ab:d8:ee:0f:f2:93:cb:45:6c:3f:
81:9c:fb:71:6e:0b:71:34:2e:c3:f3:9c:af:6d:00:
bf:36:5b:f2:d3:6f:29:fc:e3:eb:c4:a3:72:62:33:
de:ce:94:a9:92:10:f3:27:7c:9b:c8:04:ed:f7:d9:
bb:3d:79:c7:ae:52:dc:0b:b2:99:81:20:06:51:ec:
4d:4a:42:e7:5e:c7:84:6e:19:90:04:43:f9:47:8f:
cf:f4:68:38:9f:d4:15:58:66:57:f3:cc:9d:ac:01:
93:5f:61:e4:b3:6e:a6:47:07:ac:e5:1e:af:d6:30:
c4:d6:03:12:ec:25:17:16:c3:8f:2b:d5:7b:e9:d6:
63:f0:8e:78:7a:29:bc:3b:99:0e:f8:1e:86:7d:4a:
cb:a9:48:08:80:d4:32:3e:bc:38:88:14:eb:b8:4a:
22:1f:2f:c5:6f:c3:de:d1:32:bb:9f:8b:56:61:e6:
85:68:23:10:33:03:bd:5a:47:83:ef:f9:10:c4:98:
83:63:3a:d2:72:a9:af:54:58:05:d9:f4:71:53:e1:
54:79:08:e1:64:8a:f3:71:77:5a:a8:8e:39:3c:ca:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
CA Repository - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/
RPKI Manifest - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
RPKI Notify - URI:https://rov-measurements.nlnetlabs.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b905::/32
Signature Algorithm: sha256WithRSAEncryption
6c:9f:9f:85:c2:08:4e:64:4e:09:05:e6:42:af:3c:68:85:0b:
1c:4e:a9:d4:e7:9e:f6:de:47:96:e8:4a:9c:a3:ae:4e:c9:7e:
fb:b5:f8:af:b7:00:84:b1:f4:3d:69:31:15:0c:f7:1e:9d:06:
64:17:01:0c:22:27:71:54:e3:50:65:fa:f9:76:14:21:fe:bc:
60:d7:65:aa:c2:8e:84:4d:70:13:00:25:28:96:b2:95:da:d8:
ae:0d:f9:00:b0:5a:74:72:e3:79:91:2b:b2:77:af:e2:a9:60:
52:72:a0:ea:52:d6:f1:d5:1e:db:9a:97:51:96:b2:4a:cb:7f:
ae:c0:38:fc:e3:19:16:a5:21:b3:3f:58:ac:94:50:c2:d9:fb:
b5:52:3b:68:48:46:3d:dd:c9:fa:1a:6d:a7:1a:99:95:7f:37:
c5:e4:6b:b8:4e:2c:b3:08:44:0d:1e:56:e6:45:5f:f4:2b:f1:
d2:17:2a:54:a0:ed:4e:43:b0:68:3b:3a:06:9d:64:68:a6:fa:
ab:14:e6:42:4d:d8:71:64:2d:8c:dd:c2:6a:fa:e4:b9:62:46:
76:d3:5a:f0:b2:ff:2a:91:00:50:34:90:0a:2d:8e:3c:10:a1:
ac:3f:e4:7e:82:a5:01:5d:1d:27:6e:d8:53:f2:36:59:73:2e:
8c:3e:a5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:14:13 2025 by rpki-client