Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer (raw, json)
Hash identifier: gW5/r+rTqmiwY5x1Qtx3z5ezWcBU9AkoYGR7QTJTGt8=
Subject key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 059187932A8FDAB68D8369D291D3E1938D037EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sun 08 Jun 2025 21:43:24 +0000
Certificate not after: Sun 07 Jun 2026 21:48:24 +0000
Subordinate resources: IP: 2a11:f2c0:fc00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:91:87:93:2a:8f:da:b6:8d:83:69:d2:91:d3:e1:93:8d:03:7e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 8 21:43:24 2025 GMT
Not After : Jun 7 21:48:24 2026 GMT
Subject: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:dc:7c:30:c7:1d:01:4f:6b:41:bb:ec:b4:24:
46:e4:ff:fb:42:b7:c5:ff:28:88:65:cc:b6:7a:21:
08:61:d4:04:b6:6b:c5:92:fe:1f:8f:ee:4b:81:15:
b5:5e:00:f5:bc:1e:06:02:23:b6:aa:27:d1:a0:cb:
20:61:08:45:44:c7:ff:70:10:0a:31:4e:44:78:49:
97:c8:02:6c:e6:0d:f1:aa:0d:74:22:0e:13:ea:d6:
23:12:1f:5c:55:91:87:5b:a2:3c:c3:c4:5c:8a:6d:
a3:e0:46:6e:e0:65:f6:ed:90:5c:f5:47:13:7d:e1:
1e:b1:c8:05:61:28:58:b8:39:fa:95:b6:13:f6:35:
10:6d:c4:93:71:65:7d:df:e3:c9:a0:b8:63:b1:b1:
1a:76:c2:6a:5a:e4:d0:ea:7c:60:34:57:33:83:27:
2c:06:1a:28:09:db:a4:c8:17:e8:26:f8:6d:44:7e:
44:77:38:af:b8:16:c6:45:81:21:87:88:13:b4:bd:
67:22:ff:58:84:6f:84:ca:58:59:ab:f8:3d:76:71:
8e:ce:30:bb:64:90:8f:e5:e0:1b:e4:6e:27:ea:01:
ca:ca:d5:da:9f:51:9c:04:c9:8e:ae:11:85:aa:f4:
aa:63:ac:2a:3a:af:50:59:3d:c5:b6:04:1e:f2:6a:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fc00::/40
Signature Algorithm: sha256WithRSAEncryption
14:5e:1e:86:d8:76:11:44:41:ee:60:d9:95:7c:60:59:ef:0a:
32:eb:03:8e:f2:aa:5b:88:e3:71:cc:db:98:5e:69:b2:13:99:
c4:42:6e:90:06:dd:4a:f9:37:fb:26:16:31:0a:aa:30:f4:d8:
0f:ab:dd:56:4f:d0:6f:9d:31:fc:23:a2:24:ed:87:f1:c0:03:
5f:5f:54:6e:17:2c:0f:4f:76:4f:67:53:c1:b1:e7:b0:22:df:
f3:a0:dc:2e:69:cc:19:c3:33:77:e2:78:6b:0e:c4:77:83:01:
95:f8:c0:cc:e2:70:0d:82:8a:cf:18:52:da:ac:99:35:d4:c3:
6a:35:0d:8d:c1:a5:86:14:14:89:64:d6:b3:ce:92:52:69:61:
fb:3c:dd:fa:97:5c:56:cb:5c:15:77:8c:3b:72:2e:52:01:ce:
6a:19:10:62:ee:81:1c:b0:30:1b:e9:84:e6:4a:43:92:71:2c:
7d:85:c8:77:24:9a:9b:ab:06:80:09:c9:ce:21:94:1c:3a:b5:
cf:13:49:ca:0f:d2:b2:52:2b:d2:4d:67:77:44:48:10:25:df:
31:9c:ee:43:64:23:9e:3f:8d:83:04:99:f0:b4:ea:5d:b2:2c:
a8:c4:08:38:53:aa:d3:92:11:51:f8:e3:b0:02:d0:24:2b:48:
b0:f1:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:25:04 2025 by rpki-client