Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer
File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.cer (raw, json)
Hash identifier: 9x5MOn2cDQrzIoQouoDC5K1juERsHuqeC4T4E+GfrjE=
Subject key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 5214B975BC23AD3E83F19F92A573913BB43357D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 09 Sep 2026 11:47:49 +0000
Certificate not after: Wed 08 Sep 2027 11:52:49 +0000
Subordinate resources: IP: 2a0f:1cc5:c00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:14:b9:75:bc:23:ad:3e:83:f1:9f:92:a5:73:91:3b:b4:33:57:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 9 11:47:49 2026 GMT
Not After : Sep 8 11:52:49 2027 GMT
Subject: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:e9:36:05:11:a5:af:8f:d9:56:da:c9:47:
88:e4:8e:84:40:6f:0b:27:bd:6d:b9:98:6f:de:c3:
1b:15:59:1e:0f:df:dd:d7:cf:8a:c7:dd:2f:e9:1e:
c2:22:f3:e9:dc:e6:09:58:8f:6d:19:35:17:e2:6b:
06:10:0d:0b:5f:48:70:db:4a:49:92:cd:52:58:5f:
31:a0:2d:b2:10:91:ab:cb:ad:19:d2:3f:bd:cb:33:
b6:0d:b3:15:13:3f:44:6e:38:34:38:38:75:66:8a:
27:8a:70:7b:cd:2e:e5:1a:1f:dd:bd:1b:7d:7a:c6:
fa:39:6f:92:0b:9e:3b:fa:f3:f4:1b:80:88:e2:92:
71:a1:2d:f2:f2:6b:00:97:0b:db:55:f3:b3:0d:8f:
81:84:fc:b9:ab:ec:57:10:49:c0:6a:53:bf:1b:f6:
83:31:5a:3a:7d:14:c2:3d:af:00:7b:0a:66:d1:6a:
56:29:b8:dd:75:81:da:b9:41:9a:46:bd:1e:dc:8b:
d7:09:c2:a1:04:89:13:af:b7:b2:b5:89:e5:4e:3e:
80:be:dd:0a:f0:b3:2e:d2:43:83:08:5f:70:80:ad:
6b:7c:fd:33:b7:0e:af:45:30:2d:0e:08:1b:4d:41:
4b:44:7e:09:ba:03:8b:53:9a:96:bb:26:79:dd:f1:
e1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:c00::/40
Signature Algorithm: sha256WithRSAEncryption
0e:dc:5e:0e:d1:f8:c9:07:14:6f:37:f5:03:18:26:74:fa:f3:
c3:b1:91:aa:3b:dc:27:02:9b:0c:d8:9b:fb:93:92:86:05:dd:
1c:f2:f3:c4:92:b3:13:ff:3e:8f:f6:8a:c9:07:ac:40:9a:0e:
62:e1:58:dc:1c:1a:a2:d6:0d:78:d5:f8:c2:4b:d7:a9:5f:70:
f2:6f:df:df:4e:cf:f7:d3:35:91:3a:b9:ad:68:28:ef:ce:c0:
9a:24:fc:e5:b4:8f:bb:40:b8:4f:17:a2:b8:25:f1:d8:27:23:
dd:8f:02:a8:5c:4d:d3:fc:14:fa:ce:45:8c:46:0d:69:7c:09:
14:38:a8:1b:fa:32:bc:df:33:8c:36:96:57:f2:cd:87:fd:36:
66:8a:8e:5c:84:da:5b:a5:e6:cd:41:25:a6:8f:a4:d6:ce:a4:
37:3a:d6:7f:be:45:63:0d:58:6c:cc:70:21:92:15:4d:76:67:
c4:28:50:70:ab:7b:92:45:65:fe:33:e8:eb:3a:8f:f8:56:af:
0e:e6:e0:f9:f2:9b:cd:3c:30:a7:12:4e:36:1e:c1:33:91:59:
a4:b9:fd:e4:79:b7:09:2d:29:ef:ea:ca:4e:25:32:27:44:3f:
1e:62:d5:57:f1:ba:5b:03:c7:ab:47:ad:8d:9e:1b:87:76:df:
20:26:8e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:31:09 2026 by rpki-client