Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer (raw, json)
Hash identifier: 93CIpU7P/YAhFIg4fyP9DxSHU8juC0LlORIOGsk9zZs=
Subject key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5DE70D026373D8FCB04CB15447E0337194689CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 04 Mar 2026 08:38:18 +0000
Certificate not after: Wed 03 Mar 2027 08:43:18 +0000
Subordinate resources: IP: 2a14:7580:d00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e7:0d:02:63:73:d8:fc:b0:4c:b1:54:47:e0:33:71:94:68:9c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 4 08:38:18 2026 GMT
Not After : Mar 3 08:43:18 2027 GMT
Subject: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:20:3e:3b:64:8b:16:1e:23:c3:fe:3b:54:
ab:36:f6:ea:b0:d1:3c:97:f0:81:b5:8d:74:e1:23:
b1:02:cb:75:ad:71:b1:53:b5:7e:68:a8:d2:b2:2d:
77:4d:bf:0f:4e:42:1e:0f:42:e6:d9:f0:6a:af:bd:
b6:3f:2f:4a:17:22:80:56:01:e9:90:5f:31:c3:29:
66:c4:a5:82:fd:29:22:4f:fd:49:77:92:d8:95:0f:
c2:08:fc:10:ff:29:db:0e:5e:4b:05:22:d3:37:9d:
79:48:43:4e:43:23:1e:d3:47:c5:1c:27:01:43:b9:
a8:82:f9:c6:29:ef:d7:05:e4:4e:e1:ee:84:6c:4d:
bc:e3:b2:bb:d5:2c:cf:6e:6f:c6:18:33:dd:61:61:
0b:e0:45:40:90:c5:9a:f5:bc:7c:6f:65:cf:93:49:
70:22:74:08:37:98:4b:18:33:a3:74:70:33:a6:de:
c5:39:bb:e5:8a:78:2d:bf:63:10:99:d2:78:cc:06:
89:a4:dd:26:c0:b5:e6:b9:9c:9a:3d:8b:37:f7:03:
5c:f0:f1:eb:03:11:a1:9f:fc:18:0a:f3:23:02:4c:
1d:2c:5f:a1:f9:66:07:9a:de:7e:3b:5f:06:32:59:
d1:d7:aa:e7:25:19:7a:5d:5b:97:f6:a6:b7:a2:9f:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:d00::/40
Signature Algorithm: sha256WithRSAEncryption
8f:0a:57:fa:a4:5d:a2:f2:59:8c:f8:86:14:12:e8:f2:83:3f:
df:77:a3:7f:4b:02:d6:3c:30:ad:13:67:d6:80:fd:d4:c7:d7:
42:16:7c:41:2e:37:60:d6:55:12:9a:86:50:90:01:c7:24:77:
74:69:dc:5a:d3:1a:61:27:05:b1:4a:4b:6e:4a:fa:64:ae:cb:
df:d2:d3:0a:e9:ba:4a:6a:e3:53:85:7f:ef:21:61:32:1d:1d:
34:c3:17:53:f6:be:37:16:c4:e4:b1:df:fb:be:70:09:7d:2d:
69:0b:78:7b:fe:43:00:8a:d5:5b:28:9a:ad:f5:3b:09:d3:1d:
1d:de:67:5b:07:9b:2d:9a:cc:bb:e9:50:13:fd:fb:b8:28:39:
d0:64:65:8c:cc:96:1d:47:ba:c4:02:34:6b:9d:36:d0:ee:74:
7c:76:44:02:90:a2:9f:e0:66:44:d6:d3:c4:68:ad:f7:52:b4:
7a:13:9d:a8:54:85:c2:8e:f7:a1:66:c3:0e:7b:59:12:1d:73:
27:19:9b:dd:7f:93:01:93:82:71:63:1c:f5:d0:4f:5a:7b:de:
92:03:17:5f:a0:ab:dc:e3:e0:09:0f:36:7d:cf:1f:92:39:7f:
f0:61:e8:8f:1c:ff:9e:13:9c:1d:86:8a:46:63:94:20:2e:ed:
56:af:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:25:13 2026 by rpki-client