Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer
File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer (raw, json)
Hash identifier: NscCIMsZ2yU9wFViqqUFMP9l2GG+IJImIYDZVt1y4cg=
Subject key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 3D37276D4CB5DB98450DD7ABAE35729B43BDE360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 09 Jun 2025 10:14:01 +0000
Certificate not after: Mon 08 Jun 2026 10:19:01 +0000
Subordinate resources: IP: 2a11:f2c0:ffd0::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:37:27:6d:4c:b5:db:98:45:0d:d7:ab:ae:35:72:9b:43:bd:e3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 9 10:14:01 2025 GMT
Not After : Jun 8 10:19:01 2026 GMT
Subject: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:81:19:86:dd:fc:e2:9b:7f:d5:0c:63:45:
69:69:8f:71:12:a2:28:2c:ba:7d:4e:69:33:81:65:
e6:e5:c9:bb:59:cc:47:8f:c7:1f:b3:38:b2:1d:40:
b4:7c:d7:7c:4e:0a:f6:0e:09:5a:44:48:0b:59:2b:
99:7d:ab:c0:e9:7d:c2:84:7b:c0:5e:db:bd:05:92:
c5:61:2a:dc:24:2f:b0:02:a7:c4:01:fe:a4:52:c1:
07:ad:ef:e2:8b:e8:21:e9:71:bb:c3:6e:91:2d:78:
ca:0a:8b:c5:1d:15:8b:4c:e9:72:1d:41:90:d8:28:
9c:b5:5d:db:db:f1:da:8b:3e:3b:43:f9:40:dd:e1:
f7:22:ad:b0:c7:b1:20:8b:f4:4e:ee:65:64:a0:6f:
9d:c7:c0:38:db:f9:86:a8:86:39:90:a0:20:0f:20:
75:7c:09:3b:eb:4a:26:81:64:c2:f3:d3:2b:7b:83:
c8:c6:72:a2:ab:dd:92:9a:30:95:c6:ca:db:35:ad:
33:b8:99:84:9d:ff:a5:f4:8d:13:d6:5e:e0:5b:f2:
ab:33:09:2f:58:ab:89:a6:77:47:fd:48:c2:71:50:
58:ab:48:1a:db:b0:8c:86:79:87:16:56:80:3b:ce:
f6:43:e8:92:58:f2:40:cd:59:89:7d:b1:2f:f9:f9:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffd0::/44
Signature Algorithm: sha256WithRSAEncryption
43:14:88:5e:b1:fc:f6:23:34:28:76:f4:bf:e9:e5:42:cf:12:
ce:5e:0c:f7:30:7d:59:7a:c4:00:6d:a6:b4:53:fc:80:93:99:
ad:dd:33:e1:7b:7e:56:6e:73:23:3a:c7:84:e2:f1:36:97:19:
09:bf:8a:a1:79:69:26:69:62:6e:6d:57:aa:f4:11:1e:bb:f5:
16:49:a8:e4:08:aa:ea:3d:5b:f4:bd:b8:c1:56:91:69:06:c8:
e4:75:b4:9d:8e:dc:ac:a2:75:1b:e4:4b:b4:ae:61:38:17:cb:
a6:26:35:3b:e4:61:0b:68:98:d5:7e:69:b3:04:12:30:70:21:
90:ae:bd:7e:24:48:7a:2e:81:57:98:ee:50:d1:f9:6f:13:b2:
80:7d:4d:c4:2f:0b:15:b5:97:9e:1c:98:8c:0f:c8:c3:47:4c:
f7:61:cd:20:3b:ea:b8:a7:70:cd:b3:30:25:ff:6c:99:a0:79:
0f:c9:10:e0:17:80:d6:aa:11:54:b2:24:5c:05:6a:1e:2c:b2:
82:c5:7d:e9:09:72:75:c0:c4:2e:7b:91:a9:e4:d7:8e:5c:85:
db:06:f4:4a:a1:55:e3:ab:f8:39:3c:6f:c9:52:64:50:a4:76:
94:7a:5a:b2:1d:7e:b2:9b:b9:96:e7:52:0d:e0:50:38:c0:e8:
28:95:54:83
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUPTcnbUy125hFDderrjVym0O942AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNTA2MDkxMDE0MDFaFw0yNjA2MDgxMDE5MDFaMDMxMTAvBgNV
BAMTKDNCODZBNEE0NTM4MEM2RDQ1NUNERTU4MERFRDFCQzU2MTJEMEE1NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2f4EZht384pt/1QxjRWlpj3ES
oigsun1OaTOBZeblybtZzEePxx+zOLIdQLR813xOCvYOCVpESAtZK5l9q8DpfcKE
e8Be270FksVhKtwkL7ACp8QB/qRSwQet7+KL6CHpcbvDbpEteMoKi8UdFYtM6XId
QZDYKJy1Xdvb8dqLPjtD+UDd4fcirbDHsSCL9E7uZWSgb53HwDjb+YaohjmQoCAP
IHV8CTvrSiaBZMLz0yt7g8jGcqKr3ZKaMJXGyts1rTO4mYSd/6X0jRPWXuBb8qsz
CS9Yq4mmd0f9SMJxUFirSBrbsIyGeYcWVoA7zvZD6JJY8kDNWYl9sS/5+X/rAgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ7hqSkU4DG1FXN
5YDe0bxWEtCleDAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfMjU0MDVjNzZjN2EwNDNjODlhY2UxNjdlOWQyY2Y3OWMvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0
QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwQqEfLA/9AwDQYJKoZIhvcNAQELBQADggEBAEMUiF6x/PYjNCh2
9L/p5ULPEs5eDPcwfVl6xABtprRT/ICTma3dM+F7flZucyM6x4Ti8TaXGQm/iqF5
aSZpYm5tV6r0ER679RZJqOQIquo9W/S9uMFWkWkGyOR1tJ2O3KyidRvkS7SuYTgX
y6YmNTvkYQtomNV+abMEEjBwIZCuvX4kSHougVeY7lDR+W8TsoB9TcQvCxW1l54c
mIwPyMNHTPdhzSA76rincM2zMCX/bJmgeQ/JEOAXgNaqEVSyJFwFah4ssoLFfekJ
cnXAxC57kank145chdsG9EqhVeOr+Dk8b8lSZFCkdpR6WrIdfrKbuZbnUg3gUDjA
6CiVVIM=
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:07 2025 by rpki-client