Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
File: CCD5D3BE49456F7D48B7321029C886F318C23B36.cer (raw, json)
Hash identifier: nNBst6tLD+vemcZ7XtbooYVFuoBU0vsFAyZBNgS/0UY=
Subject key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3C0C38396A7721CA577F98AB4BBADC48241DC264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 22 Jun 2025 00:04:08 +0000
Certificate not after: Sun 21 Jun 2026 00:09:08 +0000
Subordinate resources: IP: 2a05:dfc2::/31
IP: 2a05:dfc7::/32
IP: 2a06:1281::/32
IP: 2a06:1284::/32
IP: 2a09:54c6::/31
IP: 2a0a:6044::/32
IP: 2a0f:6280::/29
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:0c:38:39:6a:77:21:ca:57:7f:98:ab:4b:ba:dc:48:24:1d:c2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jun 22 00:04:08 2025 GMT
Not After : Jun 21 00:09:08 2026 GMT
Subject: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:ae:18:3d:c2:b5:6b:ee:a9:6b:c1:32:54:
2f:95:62:ae:84:d2:c4:9c:a4:ba:be:3d:e9:33:05:
6a:a1:b6:f7:a4:03:16:f9:41:0f:97:b0:4b:11:ef:
82:92:71:cd:d2:06:d5:b8:64:62:55:f4:5d:5e:d9:
4d:6f:90:a1:9f:7a:c2:21:10:78:b6:11:85:00:b0:
be:ae:5e:d6:8f:f5:16:05:ab:63:0b:3f:6a:94:2c:
c1:46:98:63:41:fb:82:d2:38:91:41:7f:b6:a5:63:
8f:ef:ae:df:80:8b:be:98:a9:ac:d1:c7:21:ef:d5:
2f:ba:72:7f:2c:80:ad:67:d3:44:ca:37:dc:fb:6f:
2b:48:09:74:b1:c1:54:f6:54:ac:8f:99:03:32:2f:
e2:53:57:c7:b7:42:a6:26:c1:dc:59:84:a5:a9:ab:
ed:42:c4:cd:34:8e:54:51:ba:bc:9f:b0:20:2f:ca:
e6:04:02:bb:ac:0c:e1:89:c7:de:d8:ae:9a:aa:6c:
d6:d4:2a:6f:57:a8:b6:f9:2a:ef:f4:f5:5a:2e:2f:
59:b2:89:78:8a:48:7b:74:6c:b2:94:74:52:d3:bf:
e2:66:65:5a:42:f5:18:47:8a:35:18:3f:39:ca:db:
6c:d3:f6:66:1f:4b:61:a6:f3:1e:9d:88:10:a3:7d:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2::/31
2a05:dfc7::/32
2a06:1281::/32
2a06:1284::/32
2a09:54c6::/31
2a0a:6044::/32
2a0f:6280::/29
Signature Algorithm: sha256WithRSAEncryption
14:09:bc:d6:e8:10:b6:75:2e:6d:82:23:b7:34:40:67:d1:c0:
7e:38:c8:86:14:ca:25:68:7f:a4:a5:15:03:ba:90:43:e3:14:
63:b4:93:0f:0c:35:47:6b:31:b0:e6:f7:99:53:3a:fe:c8:e2:
9b:4a:0d:e3:d1:f6:f2:1c:9c:5d:76:12:96:28:b3:cd:ac:eb:
2c:f7:20:71:00:ba:89:6a:ec:57:2c:76:c6:25:be:9c:15:af:
fd:6e:5b:c5:9a:d2:47:3d:89:ee:d3:11:53:e6:f9:59:56:2e:
2f:8a:02:bb:80:77:e4:bd:cc:3c:1c:df:93:d1:99:05:28:23:
6a:63:ae:a4:cb:b5:ba:c1:2d:ef:1f:57:f9:89:3c:87:e5:08:
ee:08:48:b7:3d:27:f4:2c:02:bd:64:d8:56:42:16:43:8c:51:
d2:13:86:ae:e7:51:0b:1b:c5:9d:40:8c:ca:1d:3b:c2:94:40:
b2:09:95:04:81:e2:d6:ad:8c:f6:2c:0e:f4:62:70:8d:c8:2c:
ae:b0:18:ea:de:d4:22:bf:74:f0:65:eb:fb:62:7d:12:df:5f:
04:98:46:e5:77:b8:54:9f:54:df:55:d4:39:af:84:0e:e9:c3:
dd:83:ae:82:74:d6:fd:04:0a:5f:0e:5c:13:87:eb:f4:e9:70:
9a:1b:41:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:43 2025 by rpki-client