Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer
File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.cer (raw, json)
Hash identifier: SVkSbHvoGTooAJG/BpwRM33Tfum5qTqza+xABZYtI8I=
Subject key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 1A88348870A1277AF2920A228E5D73E3BCC7D2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 26 Jul 2026 23:21:43 +0000
Certificate not after: Sun 25 Jul 2027 23:26:43 +0000
Subordinate resources: IP: 2a0f:1cc5:c00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:88:34:88:70:a1:27:7a:f2:92:0a:22:8e:5d:73:e3:bc:c7:d2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jul 26 23:21:43 2026 GMT
Not After : Jul 25 23:26:43 2027 GMT
Subject: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:e9:36:05:11:a5:af:8f:d9:56:da:c9:47:
88:e4:8e:84:40:6f:0b:27:bd:6d:b9:98:6f:de:c3:
1b:15:59:1e:0f:df:dd:d7:cf:8a:c7:dd:2f:e9:1e:
c2:22:f3:e9:dc:e6:09:58:8f:6d:19:35:17:e2:6b:
06:10:0d:0b:5f:48:70:db:4a:49:92:cd:52:58:5f:
31:a0:2d:b2:10:91:ab:cb:ad:19:d2:3f:bd:cb:33:
b6:0d:b3:15:13:3f:44:6e:38:34:38:38:75:66:8a:
27:8a:70:7b:cd:2e:e5:1a:1f:dd:bd:1b:7d:7a:c6:
fa:39:6f:92:0b:9e:3b:fa:f3:f4:1b:80:88:e2:92:
71:a1:2d:f2:f2:6b:00:97:0b:db:55:f3:b3:0d:8f:
81:84:fc:b9:ab:ec:57:10:49:c0:6a:53:bf:1b:f6:
83:31:5a:3a:7d:14:c2:3d:af:00:7b:0a:66:d1:6a:
56:29:b8:dd:75:81:da:b9:41:9a:46:bd:1e:dc:8b:
d7:09:c2:a1:04:89:13:af:b7:b2:b5:89:e5:4e:3e:
80:be:dd:0a:f0:b3:2e:d2:43:83:08:5f:70:80:ad:
6b:7c:fd:33:b7:0e:af:45:30:2d:0e:08:1b:4d:41:
4b:44:7e:09:ba:03:8b:53:9a:96:bb:26:79:dd:f1:
e1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:c00::/40
Signature Algorithm: sha256WithRSAEncryption
76:07:fc:2f:fc:d2:87:5b:7e:eb:26:48:7a:d3:da:72:52:c2:
ed:d8:6b:0e:61:ec:3a:6e:27:3a:a8:47:e7:e4:7a:51:25:da:
92:db:a0:c0:2b:87:c8:fd:5f:1e:cc:83:89:8c:a3:24:a7:98:
9c:e2:ed:9c:96:ba:63:04:11:0e:3d:96:17:5d:b1:a2:52:23:
5e:2b:bf:4e:52:24:9d:3e:26:e6:45:6d:3c:17:55:12:36:c9:
b3:fc:d2:58:c2:14:32:33:9a:e9:b2:a8:70:bb:f9:42:45:4f:
76:58:39:47:7a:4b:13:52:e7:c9:4d:a5:43:50:d5:af:95:8e:
61:86:1d:28:5d:4f:5f:ca:56:32:41:3f:51:58:92:6e:ee:1b:
16:cf:b3:38:8f:e4:18:04:d4:42:f4:c5:ba:04:49:7e:84:72:
52:3c:aa:59:49:43:f2:d7:fe:be:99:3b:46:d6:bf:d7:f1:bb:
f0:9a:52:22:c8:0c:52:a8:6e:48:50:0e:5f:a5:66:86:8d:35:
25:48:62:98:08:2c:eb:6a:85:3c:08:f1:3a:04:31:07:5b:8a:
fc:10:1f:3d:12:bc:31:61:43:a8:9b:c6:1c:f4:da:01:95:76:
02:04:44:46:15:c1:51:15:45:69:e1:ab:25:fb:5e:54:d3:ea:
3b:56:16:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:00:47 2026 by rpki-client