Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer
File: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer (raw, json)
Hash identifier: EluTWf0GQ95lG3mbjIrTeS+cckdmvkzXIoud3lIjd+s=
Subject key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 6EC35F62AE9D3FB1EE78810EF77944286AADF118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 09 Jun 2025 19:59:39 +0000
Certificate not after: Mon 08 Jun 2026 20:04:39 +0000
Subordinate resources: IP: 2a11:f2c0:ffcd::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c3:5f:62:ae:9d:3f:b1:ee:78:81:0e:f7:79:44:28:6a:ad:f1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 9 19:59:39 2025 GMT
Not After : Jun 8 20:04:39 2026 GMT
Subject: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:bc:48:86:ea:57:a3:1f:54:46:13:70:99:
fc:de:86:55:f0:de:59:15:ce:ee:07:0f:01:50:bd:
fd:e2:ea:96:c7:b3:25:1c:23:21:8e:18:32:a3:dd:
1b:37:32:9b:8c:ca:9f:be:2a:cf:52:12:be:0a:66:
8d:33:a8:ba:2d:31:ac:a2:db:9d:2b:b0:db:4a:aa:
7c:87:4b:19:06:7f:20:98:98:0b:09:dd:f6:51:a6:
0c:ea:a8:9b:ad:3a:82:25:eb:0c:03:b3:88:d1:d1:
20:0c:d1:19:88:5a:67:cb:6c:82:72:9b:34:92:87:
59:d5:11:72:7b:c7:4d:21:1a:14:4e:6d:b2:92:a2:
b2:0b:2c:35:81:09:a9:da:ad:76:cc:0b:4f:4b:a5:
56:40:d1:86:fd:8d:d1:74:b8:ca:a6:d9:15:ea:c5:
82:b7:cd:82:8e:97:94:e4:67:36:77:4e:15:1c:cd:
94:f9:74:43:3b:0c:c1:34:4b:8d:33:18:a2:b7:23:
96:6b:99:f6:b8:b7:17:76:f7:d1:a8:7b:54:ec:8c:
7d:c2:59:51:09:d8:90:04:41:e3:69:09:3e:33:77:
12:c7:0b:bb:7f:45:63:ce:2b:3e:87:e2:f0:5c:0b:
b8:87:4e:e3:19:cc:17:cf:80:1c:27:27:68:7f:9d:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcd::/48
Signature Algorithm: sha256WithRSAEncryption
4a:db:51:fd:25:09:c9:ee:1c:f1:c2:5b:cb:f1:29:b3:9b:e2:
33:3d:14:f0:2a:89:4f:75:9c:49:c2:d4:0a:57:9d:9e:30:73:
7b:7a:75:5b:8a:b8:16:da:5e:17:d3:f0:81:45:b5:99:ed:60:
df:41:b9:56:ec:6d:c3:70:88:b3:5b:82:27:27:e2:d1:8e:c4:
7b:81:1e:a8:64:a6:2c:89:dc:1c:28:a4:a4:9b:cb:40:85:2d:
56:fb:f8:db:44:7b:b6:7d:cb:ea:eb:b7:bf:af:9c:ad:90:fb:
74:c6:46:c1:69:9b:ae:ca:ad:0f:9e:f7:5c:a8:0d:2a:99:0c:
63:61:3a:7b:75:91:ed:09:5d:38:71:96:b4:7b:4c:ef:aa:2f:
77:8b:07:8d:d4:e3:e5:e4:e2:64:8e:e5:10:94:f0:e0:90:ba:
5e:c4:4b:07:c6:80:d3:06:a4:96:e6:76:18:72:d8:f5:00:e7:
90:a6:ab:79:e3:14:b8:9c:d8:b6:89:e1:32:9a:d4:a0:42:b8:
ea:f6:4b:d8:22:0a:0d:3c:42:55:32:d5:dd:96:cb:62:65:82:
81:1a:5b:98:d3:98:9f:e5:c6:8f:64:1e:58:c9:6f:c8:98:5e:
b5:c7:21:05:eb:18:5d:95:a9:51:63:13:bc:65:a1:2d:8b:4d:
5b:bf:73:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:47 2025 by rpki-client