Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
File: 1E74494683D8D2A4E029AAD4573928D2A55FA411.cer (raw, json)
Hash identifier: +0hnNfLH+KrZUwBi9MoiQmog8aTbQil8ImCdFWYmrWQ=
Subject key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Certificate serial: 0E32EB057F8F6933B0B8999025E51A26DFAA0D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 25 Apr 2026 10:14:06 +0000
Certificate not after: Sat 24 Apr 2027 10:19:06 +0000
Subordinate resources: IP: 2a13:c8c4::/32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:32:eb:05:7f:8f:69:33:b0:b8:99:90:25:e5:1a:26:df:aa:0d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Validity
Not Before: Apr 25 10:14:06 2026 GMT
Not After : Apr 24 10:19:06 2027 GMT
Subject: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b2:d1:ce:a6:34:e1:d8:42:0a:40:81:24:0e:
cb:91:b5:d3:51:c1:1c:b1:b6:6b:62:f0:aa:6c:90:
c5:02:dc:18:3d:7c:bd:75:79:2e:8d:28:00:d7:4d:
cd:fe:1d:6f:ef:41:ed:2b:e8:6e:9d:d5:e0:63:aa:
5d:4c:85:22:7d:2f:40:b1:a9:4f:d5:52:e1:fc:0d:
ee:e3:1e:b9:97:7b:2b:71:65:bc:14:bb:6e:79:e0:
66:78:bf:20:fb:1e:ae:fd:fd:60:30:52:3d:d0:21:
a4:8a:61:32:c1:e1:26:01:90:89:dc:8f:31:d0:94:
5f:02:fb:e7:12:73:74:05:ab:0d:a4:8e:34:47:c7:
07:98:61:f2:76:69:eb:17:9f:ba:cb:c5:bb:17:f5:
82:25:19:44:c7:10:e9:9a:eb:0e:a1:c0:d3:77:01:
a9:68:d4:33:ae:c6:fe:75:3d:dc:4b:dc:86:b3:1d:
9a:1c:a1:74:d2:03:78:c0:b6:33:98:51:6d:8e:35:
0f:db:a7:c2:20:f1:c3:57:f3:37:5a:aa:8f:a3:ce:
b7:f0:4a:d9:e5:50:df:63:8a:ad:e1:95:4b:9e:f2:
e4:67:27:3a:13:d1:7e:56:6f:3a:73:74:7e:a5:f0:
05:20:9f:8d:d6:8c:97:71:e9:5a:0e:7d:0e:71:50:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
X509v3 Authority Key Identifier:
keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c8c4::/32
Signature Algorithm: sha256WithRSAEncryption
19:db:8a:33:6a:9a:31:8c:fa:2e:92:2b:1d:10:1b:40:6e:d8:
b5:09:17:31:1f:74:2f:80:45:24:24:b1:bf:91:f9:91:73:9b:
fc:0e:42:5d:88:ba:88:99:89:f8:18:d8:4c:eb:32:bd:3c:b2:
33:cd:b9:02:84:ab:7d:dd:5b:72:9d:19:26:99:da:6a:0c:55:
98:55:5e:07:b4:c6:02:18:7f:fb:51:3b:c2:12:ba:62:48:31:
14:66:de:49:08:2d:4e:f5:b1:b2:3c:8f:1b:2c:f0:af:eb:d2:
e0:a8:fc:01:ae:ef:a7:04:c9:fb:18:62:9b:d3:b9:8b:b7:27:
0c:e9:0c:c5:2b:cd:07:85:06:e6:bc:44:5e:b6:79:9e:19:6e:
79:b2:f5:41:de:51:01:de:6e:d2:e4:da:39:24:be:50:06:83:
2d:18:30:cd:6f:64:f7:f4:79:11:e9:de:fb:0a:40:10:f7:1f:
e0:09:85:bb:79:38:35:71:79:c3:19:7d:cd:c6:73:4d:f0:fd:
6d:0a:f5:f0:da:49:7b:90:07:ea:4a:20:93:97:7f:7f:ae:97:
6f:bd:5f:ed:f8:02:5a:54:20:9e:46:15:c1:04:ff:87:16:bf:
e3:72:93:89:a2:1a:d9:4e:03:12:e1:31:d2:ab:40:8e:fd:bb:
7c:20:b7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:29:56 2026 by rpki-client