Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
File: BBED14E9793905EC1EA5CE10AA03C497D737B115.cer (raw, json)
Hash identifier: m+ztv5UmtHgdFMzFwqLzYGsJqAw/AeqFEUgffywu2Zc=
Subject key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 66C035CEF7575096E3C309901C0F1DACC2EB7170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 09 Jun 2025 21:00:53 +0000
Certificate not after: Mon 08 Jun 2026 21:05:53 +0000
Subordinate resources: IP: 2a11:f2c0:ffc0::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:c0:35:ce:f7:57:50:96:e3:c3:09:90:1c:0f:1d:ac:c2:eb:71:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 9 21:00:53 2025 GMT
Not After : Jun 8 21:05:53 2026 GMT
Subject: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:b3:5e:78:a7:88:78:9f:2b:f6:c5:82:b0:
b5:fd:b7:96:f7:0a:d0:46:d4:76:9b:61:12:3b:e7:
af:70:47:e5:90:80:df:6c:40:e1:b9:98:da:28:a3:
e3:68:c0:ab:b4:fb:0a:c5:2c:0e:b3:d8:af:ff:e4:
00:cd:93:fc:27:b6:8b:fd:c9:6a:53:3e:2c:01:c7:
4c:a3:08:33:f7:20:7f:46:40:73:3f:37:d8:f4:e6:
db:a4:77:29:b1:85:d3:80:23:29:4e:66:aa:73:2b:
ce:f0:8a:72:eb:01:d9:cf:01:96:fb:44:75:bd:a4:
28:4f:f7:18:16:97:ba:54:ff:44:df:2a:5d:23:fe:
5d:5e:4a:6e:00:ac:f3:f6:c0:4c:43:bb:a8:dd:81:
d0:d4:8e:7a:d7:d0:64:41:c1:c2:e9:6b:27:e7:3e:
5f:ee:9e:db:a9:98:1f:a9:8d:46:b1:c5:d9:f1:af:
ce:14:55:89:fe:05:0d:f1:d9:3e:6e:31:04:95:cd:
93:89:83:52:a4:fe:08:70:12:86:2e:5b:ec:29:53:
c8:d2:68:3d:86:5d:ba:81:76:06:a6:d9:37:a9:69:
55:6d:f0:50:ec:01:1e:ba:8f:ce:ec:16:49:01:d2:
38:cd:a7:27:9c:10:44:67:7d:bb:bd:7c:29:2f:2f:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
92:ad:a5:89:e8:68:2e:8b:43:9c:47:41:91:e9:05:dc:5c:ca:
c7:41:c7:3b:c0:80:46:27:ef:57:12:b2:39:30:d5:b9:81:6d:
57:d2:fe:47:b2:a2:17:28:3d:e0:e0:fd:9f:9e:5a:3a:72:a9:
11:cb:cc:a0:57:b0:2d:5e:e8:3e:69:0f:4e:af:36:6f:9d:a1:
97:9b:a5:22:fd:31:39:59:b0:b3:53:b3:65:86:b2:35:43:19:
72:13:3c:c0:de:22:75:85:bc:79:8a:c8:cf:ae:e0:4e:d8:3a:
d1:c4:01:ce:47:27:dc:2e:1e:ea:92:05:a1:d2:8a:6b:3e:dc:
86:67:f0:7c:57:cd:84:79:ce:c4:3c:0e:98:a2:67:60:fd:71:
0a:ab:0f:2a:8a:3e:5c:0b:ab:be:6d:67:21:c3:13:bd:76:69:
e8:c8:87:bc:bd:f4:c3:56:dc:77:eb:9f:7e:1b:5e:6a:8e:91:
37:ca:b3:9c:f0:df:27:18:d6:4f:b4:8e:54:49:d6:0c:fa:46:
a9:03:21:6c:35:7a:2a:f3:f5:9f:62:8b:48:98:61:b2:08:b2:
3e:f0:a0:bf:d1:27:84:90:e9:79:fa:4f:ed:37:29:02:40:02:
22:d0:58:c3:5b:d5:4a:ad:01:d7:14:66:0d:44:98:b8:3a:b1:
a1:db:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:14:08 2025 by rpki-client