Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer
File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer (raw, json)
Hash identifier: jH9R6EtyMHUcM8XcpEu+SmgJb0fp9TQ+h2bdy0JKm8s=
Subject key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 1A94D80FFEAC8F288F206D9867A2C4D5FC75502B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 09 Jun 2025 12:23:19 +0000
Certificate not after: Mon 08 Jun 2026 12:28:19 +0000
Subordinate resources: IP: 2a11:f2c0:b100::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:94:d8:0f:fe:ac:8f:28:8f:20:6d:98:67:a2:c4:d5:fc:75:50:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 9 12:23:19 2025 GMT
Not After : Jun 8 12:28:19 2026 GMT
Subject: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:db:c5:1f:75:75:06:d2:82:e6:66:15:e3:
7e:3f:cf:c5:86:58:cf:8b:82:2b:02:2a:3c:f9:54:
35:eb:ef:40:89:e9:cb:ce:c0:0a:66:05:2f:ee:34:
9a:df:7c:6e:cd:f7:29:ad:20:28:17:59:65:3a:af:
84:40:6b:21:02:dc:3d:3e:9e:f5:61:86:f4:5d:74:
c6:b8:c9:d6:72:e3:c4:96:75:0e:67:7e:8c:b8:5f:
5f:db:3c:51:06:8e:97:90:b1:2e:37:ea:c8:1a:89:
71:78:ef:4f:c3:b4:5a:5d:20:70:2e:28:55:0e:fd:
db:12:be:ea:dd:75:ca:bd:e3:c5:ed:67:b2:3b:98:
51:9c:3a:c0:b6:5c:df:75:bb:da:a0:f6:cb:87:4e:
ff:a4:b0:bb:39:17:b1:e1:a2:66:c5:7c:fd:87:75:
b4:6e:dd:87:e1:62:c3:3d:a1:77:f1:18:0f:e2:84:
52:9f:67:8e:55:8d:7b:32:44:68:8d:49:ed:71:06:
2f:c5:ea:05:8a:4f:63:f7:f8:8e:62:74:a3:e0:01:
10:92:d0:d6:53:b7:8d:20:c9:69:b6:4c:17:f1:70:
fd:25:5a:4e:60:f2:4c:e1:48:e8:8f:6a:7a:0e:1c:
0d:ba:08:bf:e2:46:e2:92:11:1f:06:ca:ba:1f:3e:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:b100::/40
Signature Algorithm: sha256WithRSAEncryption
7a:8c:de:34:c2:f2:61:2b:86:0f:fe:06:e1:03:f2:c4:2b:eb:
fc:dd:61:b0:1c:57:6f:c7:51:bd:61:d1:dd:7e:aa:c4:55:1f:
9a:45:0e:6e:c7:75:99:da:47:34:f6:e3:42:eb:a4:f6:32:58:
1a:3a:a0:45:c1:b2:37:25:f0:47:00:d0:e2:a8:ed:60:a6:99:
d2:1d:bf:fd:07:7f:d4:6f:4d:c0:ee:53:93:7f:2b:b4:67:99:
b9:46:81:eb:4e:53:de:09:61:5f:04:7a:de:b9:09:d9:b9:48:
e4:91:1f:60:6f:0b:2d:dc:af:f2:3e:f9:eb:3f:ab:b0:76:92:
9c:7d:2e:c0:b9:c8:9a:da:5d:df:7b:48:0d:bb:0f:3f:6a:f8:
e4:a4:1e:23:1a:4e:12:6f:61:ff:79:09:63:b3:0b:46:b5:33:
19:9e:71:02:81:fd:0d:3d:cc:48:9d:14:54:c9:2c:f6:d6:39:
c4:7c:90:f6:e8:46:cf:4f:6d:a1:38:57:b9:e3:38:5a:00:4a:
eb:d1:ee:70:64:2f:f2:40:06:38:a5:52:d9:52:ae:85:cd:34:
03:bb:29:74:76:03:14:61:73:ca:0b:5a:9f:5a:81:08:6a:58:
c2:89:1f:70:a2:8b:07:7c:d5:be:20:f7:20:0c:ef:73:08:da:
c9:ac:e3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:10:03 2025 by rpki-client