Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.cer (raw, json)
Hash identifier: y70eC87AprWqvNc7LtRK1f6j38G7Q4DMOBX7Pd0+CUw=
Subject key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 540E2248E8D00F9E69931A84C351FD08325FDA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 26 Jul 2025 19:56:05 +0000
Certificate not after: Sat 25 Jul 2026 20:01:05 +0000
Subordinate resources: IP: 2a0f:85c1:351::/48
IP: 2a0f:85c1:357::/48
IP: 2a0f:85c1:363::/48
IP: 2a0f:85c1:600::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:0e:22:48:e8:d0:0f:9e:69:93:1a:84:c3:51:fd:08:32:5f:da:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 26 19:56:05 2025 GMT
Not After : Jul 25 20:01:05 2026 GMT
Subject: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:91:87:ed:aa:54:fd:56:d0:e6:22:93:12:
0a:0c:3e:91:81:80:a3:0d:4a:75:d5:54:62:9d:66:
e2:7e:67:18:92:bc:dc:ea:7e:da:1d:5f:6d:32:b4:
95:ce:ae:9a:bf:89:c6:57:a3:df:7f:5b:92:e3:72:
29:c2:77:8c:78:c2:79:9e:0b:b8:18:d6:de:32:cf:
1f:d8:37:d2:87:50:2c:db:e3:b5:75:7f:30:33:44:
03:48:45:99:14:11:f0:b8:53:7e:f5:92:16:32:cb:
1f:34:a5:8c:2f:3b:a3:5e:8e:f6:12:d7:15:23:a5:
50:d7:7f:26:08:80:09:4c:55:e3:e0:04:77:9e:25:
a6:8b:58:90:e5:39:ef:97:d3:fc:d7:3e:75:73:f2:
1d:92:d1:bc:e1:8a:c7:f1:ca:6a:68:e9:db:fb:ba:
f2:6e:02:a8:30:a7:e6:4b:f2:8c:6c:23:72:0a:da:
90:04:23:b2:66:9c:b3:04:e9:a1:30:95:b7:3e:53:
d6:fb:92:98:f4:ec:29:fa:b8:37:b1:6a:bb:f8:db:
3e:d9:69:dc:63:4c:92:5f:96:d8:11:92:8b:5d:c8:
9a:6c:38:1c:bc:e6:15:79:92:94:77:58:57:eb:bd:
86:aa:fb:61:73:13:f7:f0:d4:4f:fa:8f:20:90:b0:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:351::/48
2a0f:85c1:357::/48
2a0f:85c1:363::/48
2a0f:85c1:600::/40
Signature Algorithm: sha256WithRSAEncryption
a0:26:33:0a:4f:19:70:c5:a0:de:f6:0f:10:a8:4b:6e:97:09:
66:4f:e0:b8:fa:37:2d:cf:d2:0f:94:eb:d5:36:8e:00:b1:65:
6d:ee:df:75:23:5a:4e:8a:f6:8b:e0:a3:3e:41:c1:a5:42:e9:
93:c7:34:80:d1:1f:d8:7f:3e:3f:50:01:86:cb:13:d3:a8:0e:
1e:eb:b2:21:ac:c6:18:35:25:0f:34:44:64:af:52:47:4a:c8:
c4:99:07:60:90:0b:ee:05:9d:f1:72:6e:57:67:cb:fd:a2:b5:
cf:27:91:1a:62:d1:78:62:df:79:2a:a4:5b:eb:a3:a0:8c:e6:
52:d2:40:ed:90:df:80:1a:f7:73:d1:e5:8b:91:29:e5:fa:65:
29:87:d1:d7:4e:9c:d7:f3:2d:62:61:32:4d:fb:e2:48:8b:57:
2c:3b:8f:01:35:53:d3:6b:12:09:1c:47:fd:6b:ec:03:d0:c1:
b2:2f:24:d8:d1:bd:0d:83:9f:e6:21:23:22:4b:72:6b:8e:f4:
8c:ff:61:bc:19:18:94:41:4a:93:2f:4d:fd:d7:e7:60:1d:72:
02:e9:70:c4:b9:0e:54:38:fd:cc:6a:73:91:d5:23:62:c0:09:
64:d9:c1:d5:f3:a9:69:59:91:d1:3b:82:d4:81:75:ed:0b:71:
ba:57:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:34 2025 by rpki-client