Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer
File: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer (raw, json)
Hash identifier: 3vaivSKVhBLosaem2QlCMLHyP8nE7HqRRCEcYWTaKv0=
Subject key identifier: DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 7FBE177233BF8BCE0A17C2AC3FA8D8C5AA9D0171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 09 Jun 2025 00:20:39 +0000
Certificate not after: Mon 08 Jun 2026 00:25:39 +0000
Subordinate resources: IP: 2a11:f2c0:ffe0::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:be:17:72:33:bf:8b:ce:0a:17:c2:ac:3f:a8:d8:c5:aa:9d:01:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 9 00:20:39 2025 GMT
Not After : Jun 8 00:25:39 2026 GMT
Subject: CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ba:e5:04:41:de:5c:81:a9:d6:b1:cc:a2:49:
95:66:7c:92:d7:b7:09:91:96:ea:1d:7c:96:66:47:
01:1f:94:0c:b7:28:97:dc:b7:30:fc:fd:ab:8a:40:
d1:97:bc:71:e9:92:40:ae:b3:ae:07:6d:0d:f6:40:
e5:61:e4:12:65:00:fb:04:1f:8a:ad:29:34:08:93:
af:8b:ef:e6:be:d9:9f:dd:38:44:00:83:5e:9d:f9:
6e:9a:60:e3:d5:7e:a2:ff:84:db:20:14:bb:45:bf:
a9:61:8c:52:55:bd:24:a1:a4:10:23:73:f2:9c:20:
44:d4:a6:58:3c:ee:9f:96:23:1b:50:d3:90:a8:6f:
b7:14:cd:08:bc:df:df:49:f3:ed:c7:b6:7b:d6:b3:
6e:87:c5:c5:e7:1f:fc:57:38:ae:69:57:cc:c9:63:
e5:9a:76:0a:d6:b2:89:6f:16:50:93:a9:5d:c6:58:
29:c1:7d:62:ad:9e:ee:ee:07:4d:0d:a2:23:02:b1:
48:a7:a8:ba:b3:b5:ed:bf:2f:f0:b9:d7:4d:0e:d8:
7f:f6:80:a8:9f:42:d5:4c:67:35:20:13:1e:b6:e2:
eb:7c:f9:9d:2d:f3:13:0c:a9:62:76:ec:74:79:c0:
23:13:49:65:97:d2:ca:98:d0:5c:12:ac:f7:f1:15:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffe0::/44
Signature Algorithm: sha256WithRSAEncryption
0e:ed:7e:3c:12:d5:f1:d4:72:e8:82:12:92:be:f6:2a:b8:b9:
34:36:93:26:f9:06:ce:fa:16:06:63:c1:d3:e1:db:fe:dc:68:
30:e4:da:88:e9:5e:f9:99:9b:10:cd:84:f8:73:b2:c1:9f:35:
a4:15:8d:45:b0:17:11:33:b3:20:0f:fe:69:26:7e:b0:71:f0:
ee:ff:5f:67:a6:c3:38:b9:b5:af:99:4c:6a:69:f9:12:83:a2:
86:2a:ec:e3:77:f1:76:45:3f:13:f2:b2:04:3c:eb:1c:4b:c8:
09:09:93:02:57:30:8d:a1:5e:b5:c4:21:6e:c4:dd:ec:a2:18:
36:36:b1:e1:6f:c2:0a:97:bb:2a:6e:5b:fa:98:e3:c6:4a:c4:
d4:fb:c7:14:1a:4d:55:93:6e:a0:56:e9:c6:37:91:da:04:d9:
0c:b6:45:ef:1b:40:96:a8:57:9e:45:ae:d8:f8:87:58:2e:5c:
d2:27:3b:55:4b:7b:bd:b0:70:14:60:8a:7a:10:21:a3:c9:13:
5f:9a:7b:8c:1a:58:57:3a:15:f1:d2:13:0f:9f:57:c8:1e:5b:
60:57:6c:bc:84:32:5f:36:69:e6:70:b0:5f:b7:05:cf:76:9a:
24:a2:8d:6c:4e:00:a0:0e:b2:cf:4a:14:fe:25:9b:a0:58:7e:
6b:43:89:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:59:44 2025 by rpki-client