Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer
File: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer (raw, json)
Hash identifier: fBqC9ryjQi6+GMXhqT8gchFPNagFwAwTKLhvHv66WwQ=
Subject key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 606CA6970D54D7D6CE2D0AB964D9CAD0805C87CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sun 08 Jun 2025 20:11:58 +0000
Certificate not after: Sun 07 Jun 2026 20:16:58 +0000
Subordinate resources: IP: 2a11:f2c0:ffc4::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:6c:a6:97:0d:54:d7:d6:ce:2d:0a:b9:64:d9:ca:d0:80:5c:87:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 8 20:11:58 2025 GMT
Not After : Jun 7 20:16:58 2026 GMT
Subject: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:1e:84:d4:70:42:d8:43:54:a0:6e:fa:4d:
01:b0:20:8f:6b:83:a9:ae:30:a6:25:cd:09:77:25:
ca:a5:9e:1c:41:e3:3d:6f:bc:9c:0f:e1:c4:f9:c2:
58:e2:4f:ad:27:f0:5d:bb:d7:a5:12:10:8b:c4:3d:
af:f3:af:e4:9f:b7:56:0c:61:c8:58:6b:52:5f:ed:
60:16:86:b2:79:15:68:a0:be:a3:bf:54:b1:c2:ab:
58:90:58:d8:1b:0d:9e:d1:52:6b:0b:de:0e:df:5f:
93:c8:39:37:60:ac:19:d4:4c:20:0e:06:f7:32:f9:
61:9b:9d:0f:ce:03:49:35:da:bb:66:4d:1f:58:6d:
7b:1a:b5:9e:4f:16:a4:f7:8a:39:13:a1:72:11:e3:
87:54:ac:f2:d3:dd:4a:13:67:a1:a7:38:dc:21:0c:
ff:32:62:07:bd:7f:79:d8:6c:09:b3:6c:e7:15:d2:
08:64:f7:65:24:d2:64:46:1a:47:b7:8c:f3:db:83:
ed:da:8b:78:e0:e2:a6:39:18:23:95:c1:33:ed:77:
54:55:06:62:8a:47:bf:24:65:9b:13:09:5f:7f:0b:
76:77:fb:65:36:85:e0:1d:f3:b0:f2:59:e0:05:dc:
7e:e1:78:0f:29:39:a7:c8:ae:8e:f0:3d:b0:8b:a7:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc4::/48
Signature Algorithm: sha256WithRSAEncryption
82:d4:10:35:07:45:cc:f6:2c:09:c1:af:e3:25:da:2e:45:bf:
39:d1:19:21:2c:f6:69:07:c5:7b:94:25:27:c1:17:6e:bc:63:
32:0d:d0:04:eb:17:99:8d:04:1f:08:42:73:f5:e1:0a:19:40:
75:5a:b4:44:6f:60:33:21:7a:e2:d6:85:e0:67:74:4a:c6:ae:
b6:3e:5a:d4:70:0b:af:71:69:c8:91:b8:2d:f2:3a:6a:b6:87:
28:7f:79:29:ff:6f:26:cc:7c:13:50:d1:df:65:0f:a7:3a:dc:
73:12:98:dc:93:da:5f:a3:dc:97:a8:02:3d:50:c5:d8:7a:9e:
2f:f8:9c:98:1a:5d:d7:e7:90:ef:db:b5:7b:e1:c9:8c:16:07:
cb:13:a0:a0:e8:84:9b:fb:0a:4e:d0:79:18:0a:b5:40:38:23:
33:14:13:c0:6a:2a:b6:e1:3a:21:65:2a:95:c3:eb:02:ae:0b:
23:8f:00:65:0b:bd:dd:18:a3:3b:59:4a:7c:6e:35:e4:67:88:
d3:d3:30:24:13:0d:0c:7f:2c:ea:47:e2:e9:e8:6f:59:3d:01:
03:bf:86:b8:29:0d:db:17:ea:01:7d:6c:e1:c1:25:5e:89:fe:
e0:51:40:7e:96:69:67:33:0e:10:e5:63:44:cf:e5:55:94:70:
3d:64:e3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:11:28 2025 by rpki-client