Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer
File: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer (raw, json)
Hash identifier: sywMS9qWEL1h6bB7fHgVdrwCj/vqzz1P+AsXyBKUpEU=
Subject key identifier: FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2FF41DE284C12A9A6F4B172549D8FAA2D6760A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 16 Aug 2025 15:32:44 +0000
Certificate not after: Sat 15 Aug 2026 15:37:44 +0000
Subordinate resources: IP: 2a14:7581:3b00::/40
IP: 2a14:7584:e000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f4:1d:e2:84:c1:2a:9a:6f:4b:17:25:49:d8:fa:a2:d6:76:0a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 16 15:32:44 2025 GMT
Not After : Aug 15 15:37:44 2026 GMT
Subject: CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:a0:1d:3c:7a:74:e1:ae:ee:5d:93:1f:85:
0d:dc:1a:46:31:da:ac:cf:67:e9:26:da:46:6c:26:
65:f1:3f:16:07:be:33:02:32:c0:90:39:bc:a6:e1:
74:2f:22:91:70:63:05:51:5c:75:83:9b:fe:b5:dc:
91:5c:af:73:42:c2:a2:2e:57:43:3c:fb:51:cc:3a:
35:69:54:7a:b6:3b:c7:58:35:9c:3f:3b:3e:40:5b:
69:71:bb:a5:b0:41:42:51:bf:ff:e8:d8:27:3b:48:
0e:e1:61:74:2f:69:9b:19:95:5d:fc:69:5a:a5:83:
b2:f5:03:61:e7:82:8a:bd:da:b9:ab:cf:2c:8a:dd:
e2:93:b3:95:18:58:0a:7f:8a:9a:17:84:7a:47:b4:
28:93:6a:0b:22:68:5c:d9:33:f2:43:3e:cc:3b:21:
25:8a:40:74:df:40:3c:6d:a3:c2:65:1c:ef:ce:c9:
46:c2:ce:6a:2d:31:a1:a8:f0:f6:94:f9:d3:72:e6:
5d:93:43:38:ab:f1:7f:51:cb:4e:a4:aa:5a:4f:19:
61:16:ce:2c:a5:bc:53:ea:85:28:30:73:54:c2:43:
ea:16:1d:e6:e7:99:ed:79:ce:64:f9:a0:ad:73:ad:
13:ba:ca:c2:4d:70:3e:39:3d:80:f5:f1:8f:dd:aa:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3b00::/40
2a14:7584:e000::/36
Signature Algorithm: sha256WithRSAEncryption
45:7d:00:22:3d:3a:ee:2d:e2:d0:2d:f4:9a:a5:52:74:86:00:
88:b7:a5:d5:0c:04:1d:8d:45:f3:84:dc:70:f9:4e:0d:27:14:
87:13:22:2d:31:4d:26:53:90:fe:b9:6a:03:ad:8b:6c:74:b2:
f1:3b:94:e4:73:d5:f9:2a:57:0b:af:4d:0a:ac:c7:1c:7f:96:
c0:d1:7c:d4:16:7a:f5:ad:8c:3a:be:fd:7a:c8:6b:dc:c9:86:
0a:df:bf:d5:bb:3e:31:16:07:fb:02:c1:2f:aa:9c:4b:68:6f:
a8:ea:9b:1b:7f:87:fe:08:2f:e8:a7:23:28:71:c7:43:8a:40:
6e:f9:ac:18:bc:db:a4:29:07:9b:43:0c:80:d1:8e:0a:8b:73:
8e:17:d9:49:15:80:79:21:d2:71:17:ff:6a:eb:23:5d:c2:5f:
fc:bc:32:14:ae:47:0f:1a:58:d8:e2:fc:1e:b4:65:17:d3:5e:
10:8a:bd:4c:2f:1c:39:4c:1e:37:ef:74:3f:2b:28:88:53:41:
0b:03:c6:bf:01:e7:6f:b7:94:f0:f7:79:7d:8d:91:20:ae:1e:
21:c8:60:ae:d6:e9:13:e8:ac:a0:fa:4d:d6:bc:46:ae:bb:03:
33:03:16:10:c8:87:1c:00:76:57:26:0d:99:89:d3:48:c4:96:
b7:91:98:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:02 2025 by rpki-client