Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer
File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer (raw, json)
Hash identifier: 1nhiF+DUP666qHgL0W5CdOzUBH6sH332zL1MCTVIgUk=
Subject key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 0389E80B194F324DBC85599EA2EF3AAABE8BD8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 09 Jun 2025 18:09:21 +0000
Certificate not after: Mon 08 Jun 2026 18:14:21 +0000
Subordinate resources: IP: 2a11:f2c0:ffcb::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:89:e8:0b:19:4f:32:4d:bc:85:59:9e:a2:ef:3a:aa:be:8b:d8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 9 18:09:21 2025 GMT
Not After : Jun 8 18:14:21 2026 GMT
Subject: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:19:50:c2:60:cc:fc:ca:49:0e:3b:9c:a6:a4:
c9:1e:24:b8:20:77:31:9e:ae:b6:c8:4a:76:a0:53:
da:99:8f:86:92:75:ba:49:f2:1b:22:0a:3f:1b:d9:
70:e6:66:e1:58:18:d9:41:41:8c:1a:e3:e3:0a:b6:
ae:a1:39:91:16:03:64:c4:be:67:b6:b4:de:57:45:
51:e6:87:a5:ba:99:3d:57:0c:26:f0:81:7f:28:b1:
5e:96:95:84:06:be:9e:c9:27:36:78:52:c0:aa:c7:
d6:26:d2:2b:98:76:b7:d9:91:c6:ba:8c:a6:5a:a2:
9b:d1:81:ed:9f:2c:c5:a3:1f:28:a0:30:c9:35:b6:
58:fa:a6:d6:46:5a:06:8f:f5:7d:36:ff:de:52:91:
26:3f:11:be:67:f6:db:a5:39:83:a2:27:04:d6:98:
40:84:96:a0:fc:4d:f3:31:25:00:be:98:25:1e:f7:
f5:f7:1d:c6:ff:60:7b:ee:8e:ea:ec:e3:cf:dc:b7:
3a:76:37:c1:67:6f:2e:0a:b9:78:9f:74:df:59:dc:
56:11:2b:0c:41:5a:1f:33:0c:5d:89:6d:66:14:a3:
70:54:6f:9f:43:37:4c:bc:94:43:14:f3:c8:f0:d0:
92:23:a1:72:73:d5:14:3c:3c:3e:a6:d7:c7:e0:dd:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcb::/48
Signature Algorithm: sha256WithRSAEncryption
2e:73:72:b5:72:e8:01:ea:9a:b2:d9:78:8f:e6:e0:c1:8f:1d:
4e:bb:75:b2:80:3b:28:46:56:30:d8:3e:cd:f5:4e:2d:93:7c:
d2:10:41:96:43:ab:70:86:4e:95:e4:10:75:5e:d2:33:21:06:
36:ec:21:70:f3:b4:e5:bd:52:c1:e7:cc:51:0e:d4:0e:3d:89:
19:81:1d:c7:90:f2:31:5b:85:48:61:b6:64:5e:cb:18:ec:24:
9d:35:82:52:a9:36:f1:c0:9c:de:24:b9:1d:0a:1c:71:65:f1:
f4:fa:7f:5b:e9:c0:f8:d5:d3:8c:b6:67:39:42:d8:f2:bc:95:
e6:07:73:fa:fb:e8:0a:a3:cf:ce:df:fb:81:a7:11:59:26:70:
d1:90:0c:34:d3:0b:1c:c7:ed:8d:28:41:d4:98:e1:74:17:3f:
1c:51:80:94:39:f6:c8:54:52:85:ce:ef:7f:48:44:dc:cc:9e:
e9:54:62:ce:41:be:d3:a8:4d:2c:da:38:94:ec:0e:01:57:2b:
a0:49:5a:28:8f:c7:f4:63:27:f1:3c:1c:cd:9d:cc:b6:59:c0:
5b:74:e1:4c:c7:95:60:72:a4:54:6e:e7:ac:d4:64:c0:54:02:
5f:b6:c6:8c:6c:24:e0:89:95:fa:77:72:87:d1:d1:d7:62:60:
5d:00:8f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:22:28 2025 by rpki-client