Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer (raw, json)
Hash identifier: 38+/tWqn7V3P3UBElZZS/p4V0I62Wvhv5nSljchthtw=
Subject key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 57C15CDC29E6E8066003040DD4B5CA5C9B86B35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 06 Jun 2026 02:50:43 +0000
Certificate not after: Sat 05 Jun 2027 02:55:43 +0000
Subordinate resources: IP: 2a0f:1cc6::/32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:c1:5c:dc:29:e6:e8:06:60:03:04:0d:d4:b5:ca:5c:9b:86:b3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 6 02:50:43 2026 GMT
Not After : Jun 5 02:55:43 2027 GMT
Subject: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:6a:67:b5:55:38:7b:9a:20:5f:d6:b6:0c:
e4:a3:06:52:57:d4:c9:96:81:f9:e9:41:a2:a6:bf:
a4:9a:4e:75:c3:05:df:b9:95:c5:0c:86:9a:28:86:
10:78:82:5e:cf:e9:0e:6a:c5:c4:c1:d9:9e:95:b6:
39:a6:5c:52:60:7a:89:99:a0:98:90:cc:b4:fc:2c:
3d:6b:fe:5c:2c:ac:5e:6b:e6:12:5c:ae:7f:b3:62:
4f:9c:94:43:62:31:89:dc:0c:f9:72:c4:a5:e4:b9:
f9:c6:e5:6f:35:22:f4:9d:b9:bc:bc:6b:bc:8c:ae:
4b:05:70:ce:ee:68:28:4b:3b:93:3e:0c:92:e7:8c:
ed:f5:b8:68:2a:ec:f9:b2:3c:c5:44:37:d2:1a:90:
31:b5:5e:a3:68:22:4d:f3:9e:40:3a:46:24:94:7f:
7d:88:fe:e4:2b:e4:82:30:18:59:9b:ad:6e:da:b5:
d0:d5:95:75:87:cb:77:1e:4b:d0:7e:92:6b:c7:9a:
6e:52:29:c1:d2:1b:fb:34:dc:46:43:0d:77:9f:7d:
b7:0f:3d:fd:6b:27:a0:f8:be:7d:e5:cb:89:b6:3c:
64:07:1f:4d:6a:0d:8e:bc:82:75:ea:69:79:a8:20:
48:48:93:94:5d:4d:cb:92:8a:87:99:cc:d2:e3:24:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc6::/32
Signature Algorithm: sha256WithRSAEncryption
49:2b:42:30:7d:f6:f8:94:b6:eb:1d:81:2e:e9:b7:8f:da:0b:
17:5e:76:91:7c:8d:26:49:ff:16:2d:0d:c9:9a:a9:eb:20:ed:
c9:fb:56:ce:5b:f8:05:51:fe:e5:1c:35:e0:69:b1:ef:38:0d:
b0:e4:43:13:8d:8e:64:8a:d4:0c:59:78:b4:16:77:67:9f:b5:
23:10:ee:85:11:3c:0a:79:5e:0f:00:ef:11:ca:ec:f9:71:dd:
1e:bc:a9:f6:6b:80:be:e2:fa:6e:6c:ef:d0:24:88:41:21:4e:
81:92:38:c2:da:41:ae:25:38:1d:e6:42:43:88:94:09:0e:57:
ce:0c:b5:46:35:58:c4:53:d5:2e:86:5e:d2:20:6b:5e:6b:80:
fb:4e:87:a4:33:47:a6:36:00:c9:c4:a4:a9:60:24:78:11:7a:
94:15:fe:14:c6:6e:0b:65:57:29:79:27:6b:c9:3e:9d:7a:b8:
2a:0e:85:d0:51:7a:0b:d4:a2:28:53:cf:be:69:a2:f4:ac:cf:
ac:c4:e5:d3:0c:eb:4b:99:0c:e3:8c:bf:0f:67:84:22:3e:d3:
ed:b2:c7:a7:4d:de:1b:f4:fa:c6:6f:a9:3a:4c:93:a5:0b:f1:
9d:15:e0:43:d7:84:c2:2b:1c:35:31:42:04:a4:e8:06:8e:8a:
f7:ba:39:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:38:34 2026 by rpki-client