Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
File: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (raw, json)
Hash identifier: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=
Subject key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 497A270A90F717FFD489BDDED1DFF01665C34E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Manifest: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
caRepository: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Tue 17 Jun 2025 17:48:40 +0000
Certificate not after: Tue 16 Jun 2026 17:53:40 +0000
Subordinate resources: IP: 5.83.192.0/19
IP: 37.1.224.0/21
IP: 37.230.48.0/20
IP: 77.75.192.0/21
IP: 109.107.48.0/20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7a:27:0a:90:f7:17:ff:d4:89:bd:de:d1:df:f0:16:65:c3:4e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Jun 17 17:48:40 2025 GMT
Not After : Jun 16 17:53:40 2026 GMT
Subject: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:1d:ed:3f:0d:51:75:72:45:24:70:52:50:
c2:58:bd:54:fe:13:38:02:af:81:14:09:a9:0e:c1:
f1:01:b1:fb:99:1b:5e:dc:cd:76:6d:df:7a:4c:32:
e1:7e:2f:ec:ef:f9:9d:c8:4a:34:62:19:00:a7:9a:
d4:dd:46:92:98:02:98:a1:c1:8f:a7:1f:0e:52:c7:
63:c6:f5:4e:18:2d:38:d5:56:43:ff:f4:a0:36:ac:
40:4c:64:9d:64:7c:df:e4:3d:b3:0e:ca:7e:1b:ad:
a0:48:dd:e0:40:d2:39:67:e0:50:99:48:92:84:30:
e4:05:be:52:b1:4d:5c:4d:25:89:0d:61:ee:98:1a:
28:17:04:ec:8b:42:19:3e:6a:01:f9:65:b5:63:d5:
43:ad:8a:bc:3b:97:53:23:da:3f:c5:fb:03:e6:72:
e8:7e:a4:09:64:6b:ca:76:5f:b6:c4:0e:eb:38:19:
12:d6:ff:f5:37:18:bf:8e:b6:33:bc:af:a6:5e:d7:
70:3c:b3:d8:e8:7a:40:00:a4:19:38:39:55:34:dd:
ce:41:8b:7b:e3:ac:cc:2c:33:04:c5:99:32:ce:3c:
06:67:1d:23:99:c4:f3:c7:36:10:b4:07:c4:d3:bc:
fb:14:dd:f8:4a:82:ec:2c:9d:f7:b7:f4:43:86:b2:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.192.0/19
37.1.224.0/21
37.230.48.0/20
77.75.192.0/21
109.107.48.0/20
Signature Algorithm: sha256WithRSAEncryption
91:8c:a0:85:b3:83:bf:d5:0c:0b:ee:ed:bf:7f:67:51:6c:b0:
5b:c2:51:f0:5b:cd:23:da:c5:11:d4:93:90:9d:46:d3:cd:60:
fd:a1:0d:1b:36:b6:b5:cb:b2:36:f7:a2:4a:92:6c:9d:f8:70:
07:70:f1:ab:81:ce:57:e7:1a:62:7e:c0:3d:d9:d7:9c:eb:fb:
d0:73:06:39:14:e0:d2:b8:40:ad:99:e8:74:e9:41:db:48:cc:
3c:f9:7f:15:a6:2d:c7:df:5c:b1:6b:22:e2:44:5b:9d:82:4c:
4c:5d:07:53:76:68:4a:7b:9d:7e:2b:fc:cb:9a:cd:d5:66:80:
a1:b6:ac:59:9c:08:07:20:a2:a4:0c:e5:b6:a2:7c:7c:52:91:
b0:f0:fa:f5:f8:8a:13:23:76:49:e7:98:40:41:dc:1b:c6:8b:
25:a7:90:09:94:b4:34:71:09:10:6e:cc:71:bf:3a:e0:83:c4:
a1:b6:d3:be:68:f7:4a:6c:bc:12:3c:36:43:ee:c6:ab:0b:c6:
fa:24:ba:cc:fb:14:22:21:be:90:1c:9d:85:42:87:c5:b5:c5:
a1:0f:f1:8c:db:49:18:11:77:19:68:ed:25:ad:3b:1f:d3:31:
c0:5f:f4:7a:e6:fa:0a:97:bc:34:6f:4d:cf:bc:9f:0c:44:5a:
8d:83:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:28:28 2025 by rpki-client