Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
File: 1D570B984E9C5E382B0A879AA21F6518621F059F.cer (raw, json)
Hash identifier: w4LlrRiZpjCqpbWEegKCJHPhvyvwSjODOuNEEV+R23o=
Subject key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 68E11237844C1B23490516F9DA201B482F5FF53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 10 Jun 2025 01:32:29 +0000
Certificate not after: Tue 09 Jun 2026 01:37:29 +0000
Subordinate resources: IP: 2a11:f2c0:ffc8::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e1:12:37:84:4c:1b:23:49:05:16:f9:da:20:1b:48:2f:5f:f5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 10 01:32:29 2025 GMT
Not After : Jun 9 01:37:29 2026 GMT
Subject: CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:13:a3:be:96:07:ed:03:91:5d:25:b0:33:
fa:58:8a:68:c5:14:ef:a9:84:d0:a2:5d:ed:43:52:
12:6d:e3:93:f6:bc:a6:d6:63:e9:a9:06:c9:f5:a1:
f2:1c:c0:cc:9f:c1:0b:8b:70:bb:f8:df:9b:cf:f2:
4e:15:30:26:85:d2:df:06:25:ad:ea:67:47:7f:fa:
bc:cb:7f:9f:61:b3:ed:57:c2:f0:3e:ce:b7:30:8e:
de:27:a5:dc:b5:2e:1b:2f:82:60:06:6f:8d:79:09:
4b:1f:2b:94:ed:3d:d9:4c:32:62:06:b6:62:92:69:
d0:81:c5:30:d5:50:fc:a9:b3:a2:e4:c5:d0:90:77:
aa:f3:c1:4d:2d:f1:22:9e:e6:7c:79:9c:56:55:de:
6e:9e:33:d0:ef:52:dc:4b:4d:58:7b:66:77:d0:fe:
a6:35:ad:bd:44:4c:7f:92:01:a0:8a:1b:da:c2:d3:
eb:b4:e5:64:2b:09:a1:98:3d:fe:61:3d:df:35:04:
21:e8:e3:b2:d4:4d:0f:46:55:3b:68:84:8f:c9:65:
82:5b:1b:f8:1a:30:83:75:f7:51:00:ed:80:be:7d:
d8:1b:b1:6e:ac:44:ae:85:dd:ac:cb:39:b7:7b:db:
52:47:15:27:36:68:ea:3a:b9:b1:ac:c2:ab:c0:03:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc8::/48
Signature Algorithm: sha256WithRSAEncryption
0c:59:3e:92:33:c8:79:ba:98:a0:7d:18:f0:e9:04:12:cc:98:
e1:45:df:3c:64:75:47:94:a3:fa:f2:52:45:cf:96:42:7a:40:
74:6f:75:ee:89:57:3f:b9:70:c8:e7:cb:47:db:65:6a:b5:a7:
67:9c:3f:42:7e:f9:68:48:ce:4c:27:62:12:5e:71:07:76:b0:
db:a0:14:9a:99:e7:f8:11:cd:c3:b7:43:d0:07:53:d1:4b:0b:
5b:76:f6:16:6e:ea:15:f4:1f:5b:3e:e5:5a:4d:1b:c4:88:5e:
fc:bb:48:30:7a:25:32:4d:27:ac:4a:d8:71:64:16:d3:ee:9b:
71:40:2e:3f:4a:bc:ad:b4:16:83:0f:e3:0e:85:77:78:e4:58:
77:09:31:7d:28:28:7f:2c:57:f7:56:cc:c4:6a:15:83:eb:49:
5d:74:c1:d6:0c:72:b7:c7:24:f8:ef:4b:83:8f:0f:3e:5f:e4:
cd:13:b8:d6:b8:6a:2d:df:54:a6:58:cc:ba:2d:e4:ed:b9:92:
6a:52:9c:92:ea:56:a1:0c:41:74:ae:1f:3b:f3:fb:74:fc:f7:
2a:8c:5a:b6:7f:fc:62:7d:35:e0:ab:cc:74:b1:99:24:15:d6:
d7:92:fc:37:e7:64:e8:ab:da:65:3d:51:97:fd:f0:eb:42:d9:
a0:a4:6d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:09:46 2025 by rpki-client