Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer
File: B50D92304CA867525C648A07380EA065FD352DEC.cer (raw, json)
Hash identifier: jeLezi/e/tiKuflcEffKB+Cet8nw848xqf2VW1otgMA=
Subject key identifier: B5:0D:92:30:4C:A8:67:52:5C:64:8A:07:38:0E:A0:65:FD:35:2D:EC
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 7AB838238AD91319C50E7568E2B7CCFB1557E41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 09 Jun 2025 15:54:50 +0000
Certificate not after: Mon 08 Jun 2026 15:59:50 +0000
Subordinate resources: IP: 2a11:f2c0:fff5::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b8:38:23:8a:d9:13:19:c5:0e:75:68:e2:b7:cc:fb:15:57:e4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 9 15:54:50 2025 GMT
Not After : Jun 8 15:59:50 2026 GMT
Subject: CN=B50D92304CA867525C648A07380EA065FD352DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:a4:42:4d:6a:19:6a:36:16:9d:3c:47:6e:
6d:2f:e4:a7:c4:d8:79:e1:dc:9d:23:bb:4e:ec:21:
fa:a3:50:cf:c9:77:f3:f1:5d:7f:e9:e9:1c:01:66:
e3:b7:dd:b3:b0:a4:8b:e4:c4:71:21:ef:30:c9:b5:
0d:e6:bf:64:91:d9:03:bb:ba:4e:55:6f:97:af:37:
1a:0c:7c:af:68:c5:4d:75:28:85:2f:2b:fb:d9:ea:
54:ab:9b:74:28:c7:49:10:0f:e4:d2:61:45:d6:5d:
e9:77:96:89:6c:a5:71:81:9b:43:a8:10:bf:14:4a:
fc:a5:b0:bd:4b:be:2c:b5:af:da:11:49:e4:87:97:
a7:26:87:1d:0e:e2:ee:58:21:98:71:6d:70:fc:d1:
3c:f4:c3:b3:86:f0:83:fc:94:77:d1:ec:06:b9:29:
32:0e:ca:26:c7:03:3d:a7:b4:fe:15:ef:f6:73:9c:
ec:b4:8f:a1:82:88:7e:e2:85:6d:31:6c:2f:c0:f5:
90:d5:13:6f:6a:86:bf:20:72:7a:79:e5:42:7f:95:
b3:78:3f:c2:bf:5a:ef:ff:63:e0:11:ef:1c:37:55:
b5:56:80:5f:3d:95:88:3a:bb:76:b0:d6:f1:c7:32:
bc:e9:05:d6:32:ac:27:c3:58:16:4b:ca:8c:ad:86:
6b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B5:0D:92:30:4C:A8:67:52:5C:64:8A:07:38:0E:A0:65:FD:35:2D:EC
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fff5::/48
Signature Algorithm: sha256WithRSAEncryption
b0:c1:4e:0f:59:b4:96:95:0f:89:de:64:a7:53:f2:35:34:ec:
f9:50:70:76:b4:a5:c7:e3:6e:ac:93:1e:82:16:85:c8:c7:71:
04:6e:74:fc:8a:f7:ee:ea:17:e3:cd:9a:22:7c:c3:35:7c:73:
ea:8a:96:e0:4a:3c:81:77:b3:c9:d4:0e:ca:89:4b:9d:57:53:
2c:09:d6:7c:07:e2:a5:58:ca:55:e5:90:c0:42:e8:b2:82:51:
72:8a:b7:8f:c8:0a:04:1b:ad:ac:e3:06:b5:8f:42:a8:6a:71:
52:42:60:44:cd:48:f6:6e:13:bf:b0:90:7f:ed:8c:80:37:c9:
d3:7c:30:2a:7d:66:c1:6e:d7:f6:dc:47:bb:b5:69:a0:e6:ee:
bc:c7:4e:a2:2b:34:82:d2:f2:40:86:a2:04:12:15:81:70:d1:
44:00:69:55:2d:79:ed:56:97:9d:64:6f:ad:4d:5f:ae:4c:62:
3e:9e:b1:64:d0:76:24:e1:18:40:d3:58:1c:27:ea:99:17:c6:
6e:5a:61:7c:7b:75:ed:59:f8:45:fe:3c:35:3c:94:ab:5b:2f:
4c:a1:8a:ee:eb:6c:d9:fe:3c:6d:78:9c:3f:04:1a:5b:56:9d:
4c:ed:6c:c4:bb:74:9e:02:b7:9b:0c:dd:fa:58:d7:6b:a1:a9:
ad:3e:eb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:18:09 2025 by rpki-client