Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer
File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer (raw, json)
Hash identifier: 1K6+WC8AAVnXWkjwr7Zb6HJB3kfLlpOkH+StjGOqxaA=
Subject key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6D28F3102DF3055B05AEF8F19AD9E7601C96E85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 15 Oct 2025 16:16:28 +0000
Certificate not after: Wed 14 Oct 2026 16:21:28 +0000
Subordinate resources: IP: 2a14:7581:700::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:28:f3:10:2d:f3:05:5b:05:ae:f8:f1:9a:d9:e7:60:1c:96:e8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 15 16:16:28 2025 GMT
Not After : Oct 14 16:21:28 2026 GMT
Subject: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:57:f6:96:27:f1:8d:64:03:e5:1e:3c:9c:
4a:36:ed:73:f8:00:b9:57:cc:69:b3:c7:04:9a:de:
2b:8e:4b:40:7c:d6:6d:99:8e:dc:1a:fc:c7:2e:c5:
b5:9c:cf:69:1e:37:48:30:e4:c6:89:00:89:20:8f:
4d:59:11:dc:6a:91:88:1d:87:65:b5:34:44:1f:09:
90:84:82:9c:f7:22:04:ad:64:19:19:ae:b7:e0:45:
c6:c3:ef:56:14:39:88:4c:59:f9:bc:73:02:32:b9:
bf:0d:9a:06:c5:4a:2c:93:a5:74:2b:29:7c:fc:7b:
39:d5:e5:36:3e:e7:70:2d:0a:e2:43:f0:ca:5b:32:
5f:0e:47:09:27:32:fc:5e:b1:c5:f2:cf:14:3d:3f:
6f:aa:18:fd:bd:6b:60:1c:91:14:d7:5e:2d:1f:63:
09:43:a8:2f:f7:42:90:5d:d7:c7:6e:8a:f8:d7:d0:
0b:15:5e:e1:7e:0b:f0:c0:97:ba:2b:ec:67:bd:be:
88:07:46:c3:cf:07:62:ea:d9:6c:31:92:98:6f:66:
db:27:0f:a8:9e:05:b0:94:ed:33:06:e8:db:16:87:
9f:00:db:af:2c:29:a8:28:cd:99:f7:60:31:cf:83:
a1:1a:03:8f:d6:53:0b:f0:09:53:c9:25:42:d2:d7:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:700::/40
Signature Algorithm: sha256WithRSAEncryption
92:8c:00:ea:c1:ce:e6:5a:4a:40:16:11:16:33:bd:8d:fd:36:
ce:24:6b:1b:39:96:73:68:27:60:2b:7d:1d:cf:da:2e:09:67:
67:0e:15:7f:75:f1:8a:fb:12:31:75:9f:4d:79:04:b5:86:d2:
f1:72:75:ae:be:c6:56:a8:53:7a:f7:2e:66:4d:cb:00:00:0e:
89:59:da:f5:84:ef:89:07:91:9d:34:45:2a:b0:45:22:2a:16:
48:cc:3d:ba:5d:dd:08:4d:c8:9e:46:61:63:b0:f5:e4:94:76:
a8:d3:a2:08:41:4f:7c:ae:10:67:5a:ae:20:16:a4:36:4d:62:
49:ae:f3:5f:97:34:0d:ee:d7:95:74:2c:e8:27:e5:6c:b1:46:
f8:8e:10:c3:ee:a3:e7:ef:cb:28:b0:cb:d9:f2:06:43:83:fe:
7e:fb:20:d9:92:76:0a:5d:9b:cb:b0:c3:eb:b5:79:90:82:27:
4b:53:86:aa:5a:50:bb:da:c5:ed:84:49:68:36:57:43:41:13:
19:4d:43:a0:b2:1e:06:d3:92:6a:16:1f:50:87:17:4e:f9:82:
58:52:b1:18:27:76:2d:60:33:2e:fb:c4:d9:db:7e:a6:68:91:
0b:5a:0e:29:08:74:29:b9:d2:88:60:db:60:8e:98:97:16:82:
a7:29:ab:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:51 2025 by rpki-client