Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer
File: 970AD94C83244100A97F9186D53DADAB07995EE9.cer (raw, json)
Hash identifier: RWBnNEK86OTd+EsaiL4tRRo/ytLMfihyN/KLzSQWa5Y=
Subject key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 1E36EF6A1177091444EB6499070B6864A76A09BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 09 Jun 2025 12:26:17 +0000
Certificate not after: Mon 08 Jun 2026 12:31:17 +0000
Subordinate resources: IP: 2a11:f2c0:aca0::/44
IP: 2a11:f2c0:fff6::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:36:ef:6a:11:77:09:14:44:eb:64:99:07:0b:68:64:a7:6a:09:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 9 12:26:17 2025 GMT
Not After : Jun 8 12:31:17 2026 GMT
Subject: CN=970AD94C83244100A97F9186D53DADAB07995EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:60:28:eb:ad:72:2f:2d:60:f6:5d:15:78:
7c:58:9d:05:16:f6:80:55:36:5c:4b:62:08:9f:8f:
36:5c:b8:97:ae:2e:3f:35:37:6f:9e:16:b8:4f:fa:
90:20:1c:0b:d7:91:01:21:c4:b0:ad:92:8a:12:0e:
3a:61:22:66:6f:1a:c8:0d:60:1a:93:88:83:7c:51:
fc:56:f4:d2:d3:36:38:b7:4b:44:0a:68:37:28:d8:
a7:b2:93:2d:dc:aa:6d:af:91:a7:b8:43:b0:43:53:
a5:ad:f8:36:37:2c:5a:0f:31:0c:e8:c6:3d:3c:7b:
78:c7:33:25:19:6e:7e:21:59:fc:30:5e:4d:fa:36:
ca:fb:ff:a8:c0:74:e3:5d:d4:52:01:4a:da:59:be:
dc:ef:78:c8:55:ac:b1:bc:51:ef:22:f0:ec:3d:13:
e3:45:60:50:d3:00:02:e1:c3:03:2a:a1:a9:93:d3:
ff:2d:bf:f9:86:03:a9:44:96:02:1d:06:38:4b:1f:
ec:aa:e0:6f:0f:56:07:bd:d8:ab:64:e0:7b:dc:92:
39:1f:54:f3:ed:76:4d:4e:dc:bf:bb:63:83:d6:f8:
5c:c8:3b:a3:8b:be:74:6a:55:ac:dc:a1:ad:44:33:
51:22:d7:98:9d:62:af:b9:38:70:1d:22:90:d8:30:
42:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:aca0::/44
2a11:f2c0:fff6::/48
Signature Algorithm: sha256WithRSAEncryption
3b:68:a0:1b:4f:32:db:4c:04:87:ff:ed:58:65:49:de:b6:58:
f1:23:e4:2d:a5:65:1f:21:6d:67:ee:6d:58:a2:b5:88:79:01:
60:c9:50:4a:eb:bc:b1:4c:20:f4:b2:b6:59:24:09:69:28:6c:
f0:ef:91:de:5f:b3:29:4b:f5:b7:2e:c2:bb:13:55:7b:c6:94:
58:9e:97:eb:2e:e3:e5:a7:87:c4:b0:86:a8:2b:57:ad:6d:10:
4d:f9:b5:7d:5d:0b:bd:9b:df:df:36:06:a3:97:16:24:ae:85:
fd:08:2c:2a:54:65:72:08:f9:14:f2:25:1b:50:d2:9a:f6:a2:
77:de:c5:bc:69:fe:17:fc:f6:c6:e2:01:c7:d0:58:9d:4a:fb:
fa:fa:67:9d:38:d7:e1:46:1f:cf:38:f3:bf:20:74:f9:4c:48:
cb:ff:30:f0:d6:25:ec:7a:48:de:01:0f:b5:4a:b4:d1:d0:42:
3b:69:f2:2f:73:d7:77:19:02:aa:e9:99:eb:d7:38:20:b2:cd:
3f:c7:0c:ee:98:6c:c5:cb:06:35:0a:9f:65:01:ba:a1:8b:df:
c9:11:62:ce:aa:94:91:a4:e5:a8:ea:1c:f9:ff:56:19:44:66:
ee:8a:f5:e6:28:8e:f2:03:04:de:27:77:3b:4f:a8:09:5c:12:
f1:ad:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:13:55 2025 by rpki-client