Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
File: 6482EA67DB858D1440DD67B955223E4341BA4E97.cer (raw, json)
Hash identifier: lKlfGm9oX8e/vMr1ifVDL2vFahUuPFOtcD1F8uJvy/E=
Subject key identifier: 64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 777E30B3C74A7A77C854ED225567B9A0E3ED33C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 09 Jun 2025 19:34:53 +0000
Certificate not after: Mon 08 Jun 2026 19:39:53 +0000
Subordinate resources: IP: 2a11:f2c0:fff9::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:7e:30:b3:c7:4a:7a:77:c8:54:ed:22:55:67:b9:a0:e3:ed:33:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 9 19:34:53 2025 GMT
Not After : Jun 8 19:39:53 2026 GMT
Subject: CN=6482EA67DB858D1440DD67B955223E4341BA4E97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:2d:05:c4:ff:f9:32:53:00:04:a6:55:e8:
45:1a:e8:05:a8:76:2f:72:a6:fa:2a:bc:92:dd:16:
04:8a:31:34:df:42:20:75:0e:6e:2e:71:21:a8:a6:
41:35:58:01:de:67:77:2e:8b:02:9d:aa:25:95:05:
47:ca:31:5b:94:be:80:b6:e9:f1:82:44:e5:48:ae:
f3:cc:61:05:05:db:ca:2c:15:42:79:9b:b0:15:20:
45:8f:7a:e3:85:c3:81:fd:d6:55:33:76:f8:73:b2:
17:82:03:e2:7d:29:7a:26:8e:83:75:11:23:bc:ca:
fd:99:76:d4:70:a0:e3:be:af:c4:fe:ff:65:50:7e:
15:f3:0b:00:d3:46:8c:bb:92:bc:d9:e8:48:b2:1f:
12:cf:98:6d:3e:15:6b:6e:d7:28:bb:2f:c0:14:66:
42:88:6f:81:17:5e:0d:4c:82:a9:ca:e1:d1:fb:97:
24:a9:74:7e:6e:f9:17:d5:95:e6:9b:e8:4f:6a:26:
e9:ab:c2:3c:0f:90:76:bc:a5:e6:07:1b:59:0b:9b:
58:43:c7:c1:0b:73:53:08:a4:e6:bc:76:19:ab:b3:
80:f9:1c:1d:d1:cb:c5:7f:28:5b:0d:73:17:c1:72:
00:e8:d6:4e:3c:17:17:48:1b:cb:8a:2b:7c:be:d9:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fff9::/48
Signature Algorithm: sha256WithRSAEncryption
ba:9f:17:1b:32:3a:6f:b8:19:3c:f2:0b:56:e8:03:22:94:81:
9a:f4:e5:de:ba:6f:61:1b:22:ed:94:c1:b8:a3:3b:81:2e:3b:
14:4b:5b:ad:e5:0c:81:67:5f:18:1e:68:eb:64:c5:ec:c2:aa:
48:99:fe:ae:6a:ef:59:a0:50:38:74:0c:5f:26:cc:38:66:d7:
18:83:59:08:e7:27:9e:18:0b:5f:89:2f:3e:b7:50:63:d5:e0:
e6:3b:62:7a:23:6a:a8:04:3c:c8:92:6a:4d:12:77:45:86:09:
45:55:3b:95:af:22:94:a7:a2:49:e7:a0:f3:cc:ee:c0:31:09:
d2:ac:3b:72:8f:ed:aa:1d:db:cd:fc:43:82:f0:0a:12:ad:52:
60:27:00:48:f5:10:36:57:c2:e9:cb:d6:d5:c6:8e:4d:f1:28:
09:cf:fd:a7:22:90:e3:88:a6:59:4e:ed:b6:ca:75:8d:d7:be:
dd:59:40:44:fa:86:01:23:2d:99:da:a0:18:8a:a8:5c:c5:66:
d7:f6:72:a6:e7:09:3b:f6:44:d3:8a:f5:63:8b:94:3e:92:3a:
cc:e8:a1:00:e4:a4:bd:32:cf:a8:91:ab:a3:fb:15:25:3e:dc:
de:a3:b4:ff:4c:70:4a:90:d7:f8:1c:8c:84:d5:d6:c3:82:84:
2a:d0:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:07:43 2025 by rpki-client