Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer
File: 31586760843F668A816117EA02F6F30FE8F9C359.cer (raw, json)
Hash identifier: sdjQP12grMA84wrOD8soDanrM9KsCHOhQQgZ6YwFl/w=
Subject key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 1CD6A1E4F1C0AF4F1BDC0183B4F7852AF6DFA6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 09 Jun 2025 04:30:53 +0000
Certificate not after: Mon 08 Jun 2026 04:35:53 +0000
Subordinate resources: IP: 2a11:f2c0:ff80::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d6:a1:e4:f1:c0:af:4f:1b:dc:01:83:b4:f7:85:2a:f6:df:a6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 9 04:30:53 2025 GMT
Not After : Jun 8 04:35:53 2026 GMT
Subject: CN=31586760843F668A816117EA02F6F30FE8F9C359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:2a:2a:2f:2c:14:6b:6b:87:2c:06:4d:c9:
20:ef:00:22:86:2d:3f:53:b2:d2:36:4a:88:09:d2:
d6:28:17:df:4c:85:a3:88:bf:21:b9:ae:07:45:6c:
25:1e:24:71:95:7c:72:7f:aa:a7:3e:c5:ce:7c:15:
06:bb:92:13:23:6b:b0:35:7f:38:fe:86:2f:50:ff:
46:7d:c6:2e:a3:67:f4:5e:04:f7:59:cf:57:17:2e:
00:b7:d5:04:43:95:9e:ff:c9:a2:60:f8:e4:ee:48:
1d:cc:fc:cf:51:2e:f4:7c:73:6b:d1:e0:db:c8:00:
b7:8f:bf:55:82:de:fe:8f:27:10:72:40:49:d5:21:
06:cb:f7:1d:19:ca:d8:3c:df:6c:f5:4d:83:cf:01:
91:9a:62:41:d2:2f:0d:a4:c6:37:5c:29:a1:8d:7d:
c1:9e:df:1d:0f:34:fb:a4:c2:dd:6c:33:f2:3e:17:
37:8d:fa:9d:aa:f8:cd:b7:2c:89:dd:ed:33:a4:c6:
99:d6:fa:cb:3e:da:60:c2:57:e8:4f:a8:17:e4:38:
30:19:39:27:f7:2b:e7:47:cf:66:2c:e3:bc:28:ab:
3d:85:46:54:64:28:d4:0b:86:64:d9:37:ca:53:4a:
fa:10:46:e5:81:b4:31:3a:d3:77:f9:18:63:0b:b3:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ff80::/48
Signature Algorithm: sha256WithRSAEncryption
a1:f3:76:f2:36:49:a3:03:be:59:4a:c7:c2:14:92:9a:67:18:
0f:ef:b0:9e:90:59:f5:72:9b:e6:d8:e9:0e:a5:10:b4:a4:8d:
93:82:6c:82:0a:35:b7:f6:20:ce:42:2f:4f:dd:a0:92:0a:67:
b8:8f:c3:3a:1a:de:08:7c:9a:37:d1:f5:bc:4f:fc:1e:02:49:
8c:8a:b1:62:0a:2f:56:52:5e:89:ec:d4:2a:db:3e:79:a9:0d:
ad:7a:6d:a4:c2:ab:72:b8:25:17:cd:c2:7b:02:7e:63:27:45:
85:93:19:3a:22:a3:ef:3c:95:a2:8d:11:dd:28:81:51:b0:3f:
f9:f3:78:15:6b:7f:9f:96:59:37:72:be:e0:95:46:64:59:9c:
26:a1:21:a2:90:89:1e:49:2a:d9:84:3d:63:b9:d8:89:8e:d6:
ff:9c:9c:c5:c4:69:98:03:c9:95:da:bb:83:68:18:90:47:d3:
34:5a:e5:a8:34:e8:7a:00:eb:df:ae:72:1c:ce:b7:f7:b2:40:
0b:45:5b:20:e1:8a:5f:f4:de:99:97:57:35:2d:cb:4f:0d:44:
76:b6:0a:6c:16:8e:1d:4c:f7:fb:bb:dc:50:eb:53:c1:7c:5d:
00:cb:90:57:ad:d5:c4:f5:4a:02:03:c1:41:ef:b1:8a:86:be:
5d:79:48:de
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUHNah5PHAr08b3AGDtPeFKvbfprYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNTA2MDkwNDMwNTNaFw0yNjA2MDgwNDM1NTNaMDMxMTAvBgNV
BAMTKDMxNTg2NzYwODQzRjY2OEE4MTYxMTdFQTAyRjZGMzBGRThGOUMzNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaESoqLywUa2uHLAZNySDvACKG
LT9TstI2SogJ0tYoF99MhaOIvyG5rgdFbCUeJHGVfHJ/qqc+xc58FQa7khMja7A1
fzj+hi9Q/0Z9xi6jZ/ReBPdZz1cXLgC31QRDlZ7/yaJg+OTuSB3M/M9RLvR8c2vR
4NvIALePv1WC3v6PJxByQEnVIQbL9x0Zytg832z1TYPPAZGaYkHSLw2kxjdcKaGN
fcGe3x0PNPukwt1sM/I+FzeN+p2q+M23LInd7TOkxpnW+ss+2mDCV+hPqBfkODAZ
OSf3K+dHz2Ys47woqz2FRlRkKNQLhmTZN8pTSvoQRuWBtDE603f5GGMLs7R/AgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxWGdghD9mioFh
F+oC9vMP6PnDWTAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfNjdjNWQ0YWQ0MzNlNGNmYzkwODZlYTFmMzNmMmQyNzYvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3
NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEfLA/4AwDQYJKoZIhvcNAQELBQADggEBAKHzdvI2SaMDvllK
x8IUkppnGA/vsJ6QWfVym+bY6Q6lELSkjZOCbIIKNbf2IM5CL0/doJIKZ7iPwzoa
3gh8mjfR9bxP/B4CSYyKsWIKL1ZSXons1CrbPnmpDa16baTCq3K4JRfNwnsCfmMn
RYWTGToio+88laKNEd0ogVGwP/nzeBVrf5+WWTdyvuCVRmRZnCahIaKQiR5JKtmE
PWO52ImO1v+cnMXEaZgDyZXau4NoGJBH0zRa5ag06HoA69+uchzOt/eyQAtFWyDh
il/03pmXVzUty08NRHa2CmwWjh1M9/u73FDrU8F8XQDLkFet1cT1SgIDwUHvsYqG
vl15SN4=
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:17:22 2025 by rpki-client