Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer
File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer (raw, json)
Hash identifier: MbCWQuZqYXhnorvnUA+KCmDSP++YbuQsBdqX3Q4flhA=
Subject key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 04DC5BD7BA8350FF008D789455C4DEC9CEB99C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 03 Jun 2026 23:16:41 +0000
Certificate not after: Wed 02 Jun 2027 23:21:41 +0000
Subordinate resources: IP: 2a0f:1cc5:2d00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:dc:5b:d7:ba:83:50:ff:00:8d:78:94:55:c4:de:c9:ce:b9:9c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 3 23:16:41 2026 GMT
Not After : Jun 2 23:21:41 2027 GMT
Subject: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:17:34:80:02:cc:8f:25:b0:d7:f5:e0:64:
3c:84:0d:97:95:ae:e2:6a:09:03:6c:35:e6:f8:b3:
6a:d1:c2:27:14:0c:82:08:fa:79:55:2f:28:bb:d0:
75:42:d3:5a:0b:fe:67:ef:1e:03:52:b5:47:59:d7:
75:aa:70:1b:9f:68:8b:c7:4e:52:d1:26:bf:4e:44:
3b:c7:c6:5a:d0:c9:23:37:b2:e1:fb:64:0a:82:44:
88:d0:b1:7f:71:99:d7:9b:64:e0:c8:48:51:61:0f:
9a:5f:97:34:51:b5:97:3c:80:3d:43:50:a4:ef:3f:
da:a9:e8:8d:5c:6a:aa:48:15:5a:f6:e3:14:f1:09:
7c:13:b6:53:64:ac:c5:13:28:ab:71:cd:42:93:b9:
2d:16:f2:30:c8:ce:1e:af:8e:51:1b:c1:d5:90:25:
22:17:1e:6b:4c:ac:2b:f3:c1:20:11:3b:6c:a2:a8:
82:eb:c2:f9:93:d6:6b:22:6c:59:0b:a1:59:51:66:
5a:21:48:fc:89:92:e0:d2:18:fe:e7:55:c7:2a:61:
fc:a4:0b:92:92:a3:86:f9:00:e7:03:e5:a8:b0:b1:
68:34:35:65:76:00:1c:79:40:21:ba:d3:a8:e2:5b:
3e:2c:37:ed:34:66:4b:44:30:8d:5b:df:33:e7:88:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2d00::/40
Signature Algorithm: sha256WithRSAEncryption
1c:5f:5c:09:8d:f9:77:40:44:bf:31:29:e7:93:af:4c:27:aa:
f9:41:43:ec:06:5d:45:17:79:f0:e3:0b:60:57:93:38:88:ce:
7a:5b:4d:dd:9f:81:d6:c5:26:df:88:87:f8:c0:25:d9:e7:31:
3c:bc:19:83:c3:e8:a8:54:e0:59:d3:04:a0:86:f6:a9:3b:00:
6c:ac:1a:f0:93:55:38:74:f1:9a:3b:31:1f:cf:b3:d8:ad:b8:
2d:53:3e:d2:e0:a8:5a:51:ed:2e:fa:36:42:57:b9:cc:02:fb:
f8:c8:32:ed:9c:33:dd:3c:3f:88:60:24:58:47:ed:f3:92:a1:
b9:78:04:a9:95:34:fe:1e:70:97:45:fb:fa:db:11:a5:2c:86:
48:53:f4:e6:3a:7f:4a:12:d8:3c:99:df:58:68:88:18:af:44:
1e:23:2b:2d:7b:f0:be:0e:01:97:ef:83:ef:80:cc:7b:ea:c0:
9c:0b:5d:dd:91:d7:59:c3:e8:e8:5f:ef:43:69:8e:02:fb:52:
a6:90:c0:06:2e:f4:b9:d4:de:74:f9:a2:e6:e1:23:2a:d7:c3:
c9:21:9d:9e:29:31:c2:d2:1c:5a:a3:7b:3a:ef:7c:f2:07:db:
9c:c3:7f:78:d6:c2:6f:eb:cc:e0:39:01:e2:0d:9c:63:de:52:
b2:89:cf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:30:45 2026 by rpki-client