
Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer
File: 8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer (raw, json)
Hash identifier: kBShWEg4+Y5FRqR/A3gKMln2eGkM6n8Pmdtjz4CYguQ=
Subject key identifier: 87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 3A50D8BE1AAE450F6C2728541C9690661B7E7828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Manifest: rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.mft
caRepository: rsync://krill.signalx.cloud/repo/signalx-rpki/3/
Notify URL: https://krill.signalx.cloud/rrdp/notification.xml
Certificate not before: Sat 02 Aug 2025 01:08:00 +0000
Certificate not after: Sat 01 Aug 2026 01:13:00 +0000
Subordinate resources: IP: 2a11:29c0:3d90::/44
IP: 2a11:29c0:4c00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:50:d8:be:1a:ae:45:0f:6c:27:28:54:1c:96:90:66:1b:7e:78:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Aug 2 01:08:00 2025 GMT
Not After : Aug 1 01:13:00 2026 GMT
Subject: CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:12:db:5d:17:a6:7d:52:01:20:59:91:23:
75:e9:c8:45:43:31:5c:b4:b5:d3:94:46:f4:5d:70:
93:75:b6:5b:62:7f:46:cd:5a:9c:a9:f3:f2:f4:7d:
ce:92:42:07:e2:fb:29:fe:a0:d0:86:8f:da:dc:b0:
6b:d2:47:3d:93:6d:af:03:c1:62:a0:59:99:b7:46:
7f:44:2b:78:d7:35:02:09:2d:bd:13:5b:2d:76:46:
80:03:44:bb:9d:21:1b:48:4f:e9:a2:f6:3a:53:24:
a3:81:4c:21:40:50:8a:dd:dc:60:74:50:85:a3:c4:
62:20:8a:29:ad:10:18:46:60:a8:fd:bc:74:11:b7:
48:e8:c6:53:f8:5c:82:a5:df:c0:4f:1d:67:df:0b:
b7:ba:6a:79:a9:32:4a:ab:84:a0:ee:7d:3a:53:80:
98:09:95:ff:5d:fa:89:7b:4a:f4:da:5f:99:57:8e:
82:3f:d4:58:43:b6:d1:a0:b2:70:61:b1:41:d6:c8:
07:84:8c:87:17:52:35:98:00:c9:20:2c:de:a4:a6:
6b:f0:c6:27:a6:40:32:67:b9:ff:3f:6a:d1:e9:62:
9a:42:07:d1:a5:20:b0:b2:3a:e3:65:1b:f7:31:a6:
dc:2e:e2:5d:58:2f:df:5a:df:85:ae:cd:9e:5b:12:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
CA Repository - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/
RPKI Manifest - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.mft
RPKI Notify - URI:https://krill.signalx.cloud/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3d90::/44
2a11:29c0:4c00::/40
Signature Algorithm: sha256WithRSAEncryption
06:b4:52:d1:08:cd:2d:96:ee:aa:78:f9:a1:d4:f9:8c:78:b6:
0e:e6:4a:05:66:00:35:64:4a:5e:c9:ef:f9:43:51:c0:d1:d2:
4d:99:70:76:31:a9:da:74:cf:98:74:7b:3c:1b:86:f6:91:4d:
53:39:2e:2a:fd:69:59:b5:36:70:0e:a7:4f:aa:59:53:6c:eb:
b2:b0:10:a3:0f:62:81:8f:d6:21:16:7b:e5:25:6f:f7:22:c8:
8c:0d:93:03:a0:b9:5d:65:ac:6d:0c:91:b3:7d:42:ba:78:9d:
3a:14:c7:c6:9e:22:43:42:c8:5c:33:1b:49:a4:44:28:21:e6:
0c:75:92:a0:22:a8:d9:f9:51:05:0f:d4:db:44:46:67:66:cb:
fc:97:b6:25:1d:09:62:7f:11:5c:39:a7:50:cb:d2:ae:75:38:
ad:9e:8c:ee:10:18:1a:08:4c:bd:6c:f9:64:f3:b2:ad:83:09:
52:df:8e:b5:b1:fc:ae:af:64:84:0e:a4:28:d1:ab:02:04:15:
69:8e:b8:93:e9:d5:ad:be:62:9b:37:13:8e:2e:9a:9d:39:8a:
26:7a:3f:4e:ae:13:d4:36:f7:eb:4a:56:35:87:cb:0b:bb:bb:
9b:81:3a:55:9c:e4:58:13:f9:7e:bc:82:ae:01:86:43:06:c4:
03:a2:a3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:03:08 2025 by rpki-client