Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
File: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer (raw, json)
Hash identifier: +o7SQ0qa5QcBxnDLFSayjfkIaUsBarHRoLcgv0ZvRqA=
Subject key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 6D35129EA59E8C1A80E8CB518B77C952935F3E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 02 Jun 2026 12:21:31 +0000
Certificate not after: Tue 01 Jun 2027 12:26:31 +0000
Subordinate resources: IP: 2a0f:1cc5:1000::/40
IP: 2a0f:1cc5:2f00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:35:12:9e:a5:9e:8c:1a:80:e8:cb:51:8b:77:c9:52:93:5f:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:21:31 2026 GMT
Not After : Jun 1 12:26:31 2027 GMT
Subject: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:a6:bc:76:2f:62:34:b7:a6:d7:91:e0:ca:
8c:90:c9:dd:f1:01:1a:20:71:94:01:23:19:35:ee:
76:6a:db:14:c2:ba:d0:41:56:00:6d:d1:6c:31:9c:
df:4c:b9:57:b6:c5:9e:a2:8f:ad:a7:4b:91:95:f3:
9d:b6:05:4a:91:cc:a0:27:b3:db:45:b1:85:0e:8b:
e9:1f:ef:10:3e:1d:ee:5e:1c:c5:bd:7c:1f:33:82:
f4:6d:5a:8e:41:bb:fd:cf:c5:7a:09:f4:31:d3:7d:
2b:f1:58:ef:43:ee:f2:cf:5a:8c:d0:68:d9:cd:7d:
5c:96:5f:35:f1:36:26:d9:02:7b:47:cf:12:32:ba:
d5:51:29:c4:cf:f6:c2:1f:9c:3b:0a:8f:d5:9f:e5:
70:cf:14:94:73:92:61:de:4b:3b:19:d8:67:7e:09:
bd:bb:91:fa:c2:23:4c:ab:46:77:d6:a8:ef:d6:89:
08:bf:4d:08:c9:50:86:cc:2c:3f:7d:23:3e:ca:85:
7b:23:fd:8b:9f:a3:a8:33:f9:be:4a:09:d1:74:ba:
09:98:c7:31:86:73:1d:8c:2e:12:9e:1e:3f:22:fe:
e0:bd:63:50:57:04:f8:ef:d1:de:d5:14:33:15:96:
59:d0:39:08:fc:84:88:75:94:63:c0:b2:21:97:ac:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:1000::/40
2a0f:1cc5:2f00::/40
Signature Algorithm: sha256WithRSAEncryption
3a:bd:29:d5:49:86:94:72:5a:ce:fb:23:ed:8d:d6:cd:8f:2f:
11:1b:f2:ed:a9:8a:c6:db:34:92:8d:71:3a:32:fa:51:1a:13:
42:e2:5e:f5:c7:e0:e5:c3:e5:60:71:77:3f:ab:c4:d2:a9:a7:
17:cc:95:88:72:77:83:ea:c9:23:95:1a:4b:78:70:1a:64:53:
d4:db:12:67:f7:6c:ee:15:1c:c3:57:12:2b:57:ba:21:30:bf:
9e:80:29:a7:cd:cb:88:3b:75:39:a0:9c:1a:e0:57:6e:84:8f:
9a:bf:48:2b:a7:ba:e3:54:01:85:88:d0:63:d4:4e:ac:31:29:
ae:81:5b:9c:a2:c1:b2:90:c9:7b:2e:90:48:49:35:ba:8a:03:
04:cd:a1:3e:32:79:99:c4:f3:b5:6d:b2:dc:5e:cc:22:96:af:
dc:2b:82:76:3a:77:22:35:81:49:ca:de:4c:83:7b:63:01:f1:
33:3a:b1:bd:31:b1:ca:7c:b3:8d:8b:fc:84:39:de:1c:ef:10:
c6:ca:95:3f:88:f2:95:db:f1:3a:c8:57:b0:4d:3d:67:b0:09:
f2:b8:b1:65:46:c9:64:63:be:52:a6:23:68:2d:8e:c0:3e:d6:
05:cd:bb:d1:c9:68:8b:9c:5b:a6:aa:2f:10:af:b0:32:8f:4f:
6c:34:1e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:39:47 2026 by rpki-client