Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer
File: AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer (raw, json)
Hash identifier: E3ySvizPdaZ0ur8D42buEVT82HdPc6JhqaWOeLvQtOI=
Subject key identifier: AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial: 2BA3AB6F892DE424190E8B594130BDDC30CE4DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 25 Oct 2025 03:08:05 +0000
Certificate not after: Sat 24 Oct 2026 03:13:05 +0000
Subordinate resources: IP: 2a0f:1cc6::/32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a3:ab:6f:89:2d:e4:24:19:0e:8b:59:41:30:bd:dc:30:ce:4d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Validity
Not Before: Oct 25 03:08:05 2025 GMT
Not After : Oct 24 03:13:05 2026 GMT
Subject: CN=AFF4C2C7543A73C42DFA94F9950C37BDC859D280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:2b:63:dd:a7:91:26:68:3a:05:2e:78:7c:
76:fc:f9:fa:2a:0e:7c:78:3e:2c:8e:57:74:ce:4a:
6d:09:8c:dc:6a:3a:b7:49:0d:29:c8:ea:75:33:a0:
93:a6:ff:f8:fb:17:ff:46:1e:b1:f8:ac:6d:60:fe:
bb:63:2a:78:86:b3:6a:b8:f2:c7:6e:60:f2:e9:f6:
82:9b:85:95:a4:0c:0f:cf:18:7c:b0:ad:71:bf:f3:
e2:fd:bc:8f:4b:b1:53:79:92:ba:1f:c7:f2:cd:3c:
6e:40:fa:ec:fd:cb:c3:4a:09:db:9b:5d:59:6a:a6:
fe:4b:90:1d:00:89:4d:33:b7:a6:5e:2a:f5:68:48:
68:e6:aa:12:f3:0d:44:3d:ff:5d:10:fd:56:15:ed:
61:e2:3c:00:d4:1f:ec:61:cc:a1:68:3a:b3:11:1a:
2c:f6:df:06:b9:af:29:3a:86:07:81:59:24:4b:a2:
ca:7b:96:d8:21:65:ea:36:b0:63:57:e8:1b:29:36:
12:07:83:1c:25:02:0c:3e:48:d6:fa:40:00:3d:46:
09:b0:9b:91:50:fd:65:a4:f8:87:7b:72:ec:b4:ad:
14:76:25:1d:65:bc:d2:c6:c7:da:4f:d4:c1:e5:84:
24:d3:d6:5a:cd:fb:58:22:37:af:b3:88:d9:0a:e0:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80
X509v3 Authority Key Identifier:
keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc6::/32
Signature Algorithm: sha256WithRSAEncryption
1c:fd:13:a2:5d:94:cf:3f:ac:cf:5f:b4:96:c6:86:5f:32:20:
fc:e6:db:51:ab:4b:9e:20:4d:c5:63:0e:88:1c:8e:4d:5a:65:
66:30:21:58:78:89:8c:9f:ad:69:69:42:8c:db:de:3a:2f:3a:
a8:a3:c0:e0:d5:62:9c:49:99:25:38:17:47:d6:6c:a7:6a:34:
44:3c:df:39:5d:6d:b1:20:f1:5f:ef:d2:f0:b0:f8:f8:17:99:
43:8e:4f:8f:24:b6:9d:4d:c2:de:d1:7f:82:bc:7a:9b:11:6d:
0c:65:8a:1f:9e:96:e8:1d:c0:91:16:42:9f:01:e6:cb:d7:df:
b1:e7:af:55:8b:01:0b:e5:92:5c:ed:9a:bf:e6:25:b5:f9:a4:
03:03:8b:1b:be:3b:78:5e:88:69:ea:10:4f:c5:9a:90:84:96:
f0:5e:a9:c1:aa:5c:3d:f8:33:6f:8f:b9:09:66:f1:85:12:24:
20:66:47:1f:f8:9c:2a:66:84:13:0d:89:8a:bf:6f:9e:49:5f:
eb:d9:0e:e3:31:6b:21:74:3d:8d:0c:03:9c:70:6d:0f:e6:4f:
96:9f:b0:17:1d:bb:03:d0:4a:00:fb:ba:fe:96:16:9e:5c:3c:
20:be:c6:e5:84:18:28:d3:55:84:29:87:9c:96:c2:57:fc:53:
f1:3c:99:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 00:11:01 2025 by rpki-client