Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer
File: 1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer (raw, json)
Hash identifier: 1VkM6incjfpzfifQP8pE0CZDRBAgudyRpdxBQrWh+1E=
Subject key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6C0E6CFE347D179799DE5E95D56DECAA74321387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 04 May 2025 11:43:43 +0000
Certificate not after: Sun 03 May 2026 11:48:43 +0000
Subordinate resources: IP: 2a14:7580:700::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:0e:6c:fe:34:7d:17:97:99:de:5e:95:d5:6d:ec:aa:74:32:13:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 4 11:43:43 2025 GMT
Not After : May 3 11:48:43 2026 GMT
Subject: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:a2:ef:df:6a:7e:49:2e:0e:3a:2d:c1:12:
2f:19:8e:5e:8c:08:44:e8:b2:aa:54:76:c6:06:09:
c4:d2:43:44:03:43:af:61:fa:6e:c2:a5:8d:80:09:
05:2b:dc:0d:55:19:92:05:47:ba:8e:46:37:34:9d:
5b:8e:02:1c:09:68:89:e3:cc:41:37:cb:97:5f:e7:
35:70:80:a4:02:f7:79:74:54:62:d3:b5:0d:1c:b4:
51:03:f6:78:e9:4c:cd:84:ef:fb:cf:3d:3e:26:37:
a0:e1:30:38:52:82:c2:6c:19:64:0f:bb:a6:23:07:
17:1e:8d:33:14:27:e3:b6:a9:1b:4b:e6:af:60:d2:
31:87:62:a1:ad:ee:0d:9d:ce:cb:c1:96:86:41:a5:
34:91:4f:c3:e1:39:c6:73:e3:0b:36:0e:6e:00:b7:
f9:f1:05:4b:5c:69:79:48:3a:37:d0:01:73:e7:90:
cb:93:1f:64:1d:5e:a1:d9:38:c7:8f:3c:44:48:a1:
70:6f:4e:dd:df:1d:20:c1:60:a8:18:e4:96:6c:5b:
60:9f:dd:01:3a:51:01:3e:66:1f:43:b0:ed:fa:e0:
1d:ed:75:12:26:ea:23:58:97:9b:c9:50:be:70:08:
10:55:51:b9:98:bb:b9:f9:4c:3b:9e:66:08:a7:97:
d9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:700::/40
Signature Algorithm: sha256WithRSAEncryption
6c:77:1d:4a:9b:87:18:35:22:cc:4f:94:bd:6f:e9:a1:c1:05:
cb:93:6a:22:2c:92:74:fb:57:a0:c3:46:56:7a:6a:2c:d0:80:
95:a7:83:d0:4f:e2:76:f4:ce:d7:72:42:c7:18:5e:c9:a9:7e:
e5:25:90:0f:72:a1:e9:90:a8:93:d5:a9:78:bf:48:97:7d:61:
40:47:46:8f:e3:02:e4:6e:6f:59:2f:a8:7e:41:f0:42:b8:05:
5a:14:a3:70:fd:9e:07:c4:50:5d:46:bd:06:9a:46:1b:f1:26:
5f:e4:df:1e:2b:b1:3a:45:96:7c:9a:57:33:57:47:8b:4b:1e:
b9:d7:e6:35:a9:a5:ad:e0:94:b5:8e:9b:fb:43:ed:09:ff:94:
de:c4:ac:f9:a1:3f:3e:fe:dd:5b:7b:f7:20:9c:b1:47:cd:d0:
0f:c4:c3:a0:78:eb:1f:97:04:bc:bd:4f:52:a6:19:81:5c:05:
62:9a:9b:40:d9:43:5f:48:ab:66:19:91:28:09:48:31:12:01:
eb:3c:55:34:5b:e0:8d:4c:95:96:1a:c8:8f:3a:4a:e8:6d:75:
c1:32:5f:cc:21:21:ea:58:04:2e:1e:13:34:8d:ed:42:d9:fc:
d6:ce:5c:bd:11:21:1b:7f:0a:a0:52:5d:51:68:84:55:0a:87:
c8:4d:a4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:44:16 2025 by rpki-client