Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer (raw, json)
Hash identifier: 0bXhyRwQxlER1eJ3KIl16JG+maTiuQkwPjIl7gg+Fkk=
Subject key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 438FB692DC7ED978AFCF0C8BEAAAF9C2A5D062B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 20 Jul 2026 07:24:17 +0000
Certificate not after: Mon 19 Jul 2027 07:29:17 +0000
Subordinate resources: IP: 2a14:7580:f300::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:8f:b6:92:dc:7e:d9:78:af:cf:0c:8b:ea:aa:f9:c2:a5:d0:62:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 20 07:24:17 2026 GMT
Not After : Jul 19 07:29:17 2027 GMT
Subject: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:75:cb:9b:50:1c:89:9c:a5:fd:9d:b5:ed:
4b:9c:f5:6d:86:32:6f:43:cb:f0:00:91:83:b8:6c:
6e:48:e4:2e:e5:ad:e0:e7:05:0b:c6:76:6d:ff:29:
af:70:82:c4:b2:e9:ee:e1:eb:30:6a:17:e5:0d:cb:
c7:21:ef:b1:b8:d4:aa:16:0c:dd:14:b2:e5:61:66:
59:40:20:9c:fa:31:06:c9:b5:bc:21:ce:89:a5:a3:
c5:11:ea:12:92:98:2e:5c:c9:2e:d4:4e:a0:ad:53:
4c:50:88:f6:11:c5:db:4e:eb:d1:8e:be:ae:05:b1:
76:b9:ae:fe:7c:a8:15:9f:ba:5b:f9:08:b8:98:2b:
8b:94:81:dd:66:25:2f:37:38:92:e3:c4:05:7e:c8:
3f:67:24:01:76:c7:0e:9d:84:48:6a:bf:fa:f9:7a:
6e:86:c6:d9:1c:fe:d8:46:cb:cf:d3:d1:4d:15:7b:
d4:fa:bb:50:25:27:3c:07:91:ac:59:4c:47:1f:08:
92:4a:92:f1:47:d7:c3:52:5b:0d:c3:40:bb:6d:3b:
0e:08:a8:30:fd:a0:9b:81:2f:7e:f0:f3:85:de:0d:
61:72:a6:4b:ad:4e:4b:1c:65:62:88:0e:00:fa:96:
7e:ee:f7:a5:13:9b:e5:80:66:44:be:95:8c:6c:93:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f300::/40
Signature Algorithm: sha256WithRSAEncryption
69:6d:0f:ef:84:2e:5f:88:86:13:96:ff:15:5e:c4:5b:3a:10:
b7:bc:84:a0:d4:3b:bd:65:e3:63:b0:93:d8:11:ee:54:ff:2d:
f7:3a:0a:69:d3:f7:c7:53:7b:9d:6f:d2:41:6c:3f:7f:e3:8f:
25:62:df:c2:08:ca:79:b5:54:15:a7:b1:51:ef:0e:de:62:d8:
e2:70:e3:84:95:6c:ec:2f:af:1c:37:a0:7a:76:2e:65:a6:9c:
ce:70:d9:b9:4d:5a:cb:a2:38:0a:36:0f:f1:38:38:de:a9:7a:
61:fb:6a:03:3b:2c:a8:32:21:d1:7c:d7:22:60:d3:9a:e5:e4:
3c:e8:b2:7c:cd:2a:51:0c:ad:55:34:28:19:e9:1e:ee:d0:6d:
a9:14:ee:69:c3:14:98:79:c8:d0:67:09:94:9c:16:d4:e8:9c:
ac:cb:fb:f8:87:88:5e:74:15:09:b0:87:ae:b2:51:50:4e:be:
3d:87:3a:21:13:74:3b:a1:4a:9f:64:e6:14:a5:fe:94:c8:85:
86:1b:c5:ee:7e:23:cf:40:45:66:43:ed:6a:8a:d7:48:d3:6d:
3d:a9:20:6a:6f:b3:8e:de:7d:e8:4d:12:a9:06:26:55:ae:7d:
80:b2:e4:f0:2b:19:ec:bd:30:cf:8d:c3:93:bb:e8:b9:16:fe:
bf:ec:d8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:31:10 2026 by rpki-client