Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer
File: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer (raw, json)
Hash identifier: Zmzv7fBFqGLxjYc480gPrSI5W4OUPciQIi5quu5IaLg=
Subject key identifier: 69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 62B43530B71C2F987FC340DB41694525708513CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 09 Jun 2025 07:59:21 +0000
Certificate not after: Mon 08 Jun 2026 08:04:21 +0000
Subordinate resources: IP: 2a11:f2c0:ffcf::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b4:35:30:b7:1c:2f:98:7f:c3:40:db:41:69:45:25:70:85:13:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 9 07:59:21 2025 GMT
Not After : Jun 8 08:04:21 2026 GMT
Subject: CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:a6:86:b6:d4:2d:c0:4e:03:e3:2d:36:73:
f9:a8:75:2f:eb:c3:1d:27:73:88:54:22:ad:3c:09:
ba:46:c4:df:bc:4a:0d:3c:9f:72:72:60:24:c5:d9:
a4:af:7d:60:d0:85:91:97:17:45:a5:19:c3:4c:2b:
ff:17:34:2a:3b:81:8f:fc:7d:ac:0b:b6:49:d3:75:
b0:32:38:b1:ff:65:cc:68:6d:71:d0:a0:c3:1d:fc:
f5:3e:e9:2c:14:f8:42:73:4e:3b:25:7f:59:2d:bd:
90:1b:e4:85:31:c5:c0:82:84:6e:b0:eb:6e:16:45:
e5:ca:b0:08:e4:7e:5b:43:f1:58:b4:32:6f:6e:72:
7e:c4:3d:68:f1:60:7e:17:29:0c:03:ba:ca:a5:06:
b6:0f:3a:75:52:02:8c:1a:47:3b:d6:27:1a:c6:ce:
51:dc:91:f2:90:d2:96:0c:de:63:55:9e:0f:2a:7e:
d8:a1:02:96:56:af:f6:b8:a3:06:87:cb:53:c0:d3:
eb:44:d9:d5:d3:8d:cb:9e:db:76:65:56:78:4f:2d:
a0:c4:1a:91:92:2e:5f:a7:2f:35:59:16:55:6b:53:
56:2d:2b:fc:f2:5e:fe:fb:74:d3:8c:3f:00:a4:de:
34:01:c2:1f:92:d4:f1:bb:a3:00:96:c6:0c:e0:cc:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcf::/48
Signature Algorithm: sha256WithRSAEncryption
84:97:2e:65:6e:ea:e4:06:b0:45:db:c7:1c:ca:23:c6:ea:4c:
e3:7e:32:70:82:e7:86:2c:5a:72:4f:ec:b2:32:02:5f:85:90:
25:d3:0b:be:0c:4c:5b:c7:4d:18:00:64:55:21:28:fc:39:da:
18:d5:38:54:4d:93:10:b4:fd:51:0b:f4:a3:18:ea:ac:96:05:
a7:0b:d2:59:fa:20:04:5e:b7:ff:47:8b:a3:cd:56:7a:96:d9:
d5:d7:93:7f:68:20:ed:47:1f:2c:4b:17:ff:fa:4a:54:30:bc:
11:26:6a:83:43:47:b8:b2:9a:cd:49:4c:b6:7f:8a:7e:8a:7f:
5e:6e:ed:ee:17:21:12:03:e4:6d:81:c2:b9:a5:ee:db:51:1a:
ea:ed:9c:72:f7:f6:7f:75:a3:b5:75:fa:c4:33:5a:e0:0a:5a:
57:5c:b6:e5:89:2e:d6:4d:74:71:a2:7c:f3:a6:a2:09:af:aa:
3e:25:8b:6d:e2:06:b0:78:5e:be:27:40:cf:3b:fd:56:53:45:
1d:14:59:ae:6a:2f:b3:51:ce:83:94:11:f9:df:07:fd:a8:1b:
f2:e3:17:89:34:29:ab:fe:41:7c:f4:1d:0c:10:86:42:9c:4e:
36:c7:1f:0a:da:de:ca:c4:c6:fe:1a:3d:9e:71:7f:9f:e0:9c:
b6:74:a0:3f
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUYrQ1MLccL5h/w0DbQWlFJXCFE88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNTA2MDkwNzU5MjFaFw0yNjA2MDgwODA0MjFaMDMxMTAvBgNV
BAMTKDY5QkREMTA5MkFDRTlBMTBFNEM5NEZBRDhCMkRBM0REQ0NGNjRBOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMqaGttQtwE4D4y02c/modS/r
wx0nc4hUIq08CbpGxN+8Sg08n3JyYCTF2aSvfWDQhZGXF0WlGcNMK/8XNCo7gY/8
fawLtknTdbAyOLH/ZcxobXHQoMMd/PU+6SwU+EJzTjslf1ktvZAb5IUxxcCChG6w
624WReXKsAjkfltD8Vi0Mm9ucn7EPWjxYH4XKQwDusqlBrYPOnVSAowaRzvWJxrG
zlHckfKQ0pYM3mNVng8qftihApZWr/a4owaHy1PA0+tE2dXTjcue23ZlVnhPLaDE
GpGSLl+nLzVZFlVrU1YtK/zyXv77dNOMPwCk3jQBwh+S1PG7owCWxgzgzF+1AgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRpvdEJKs6aEOTJ
T62LLaPdzPZKnjAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfMzM5YmI0Y2ZmM2I0NDczMjg1NGQ5YWVmZjEwNjdkOTEvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhXzMzOWJiNGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAvNjlCREQx
MDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEfLA/88wDQYJKoZIhvcNAQELBQADggEBAISXLmVu6uQGsEXb
xxzKI8bqTON+MnCC54YsWnJP7LIyAl+FkCXTC74MTFvHTRgAZFUhKPw52hjVOFRN
kxC0/VEL9KMY6qyWBacL0ln6IARet/9Hi6PNVnqW2dXXk39oIO1HHyxLF//6SlQw
vBEmaoNDR7iyms1JTLZ/in6Kf15u7e4XIRID5G2Bwrml7ttRGurtnHL39n91o7V1
+sQzWuAKWldctuWJLtZNdHGifPOmogmvqj4li23iBrB4Xr4nQM87/VZTRR0UWa5q
L7NRzoOUEfnfB/2oG/LjF4k0Kav+QXz0HQwQhkKcTjbHHwra3srExv4aPZ5xf5/g
nLZ0oD8=
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:18:01 2025 by rpki-client