
Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer
File: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer (raw, json)
Hash identifier: Adxrio/tHCwtSH4lnFZ+UsitpQOtG85BX8Qsyl0HNYM=
Subject key identifier: 5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE
Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Certificate serial: 464FB08A83E6E0D5C33F99B3A1BF70FB0DDE4844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 20 Jul 2026 11:57:44 +0000
Certificate not after: Mon 19 Jul 2027 12:02:44 +0000
Subordinate resources: IP: 2a13:c8c1::/32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:4f:b0:8a:83:e6:e0:d5:c3:3f:99:b3:a1:bf:70:fb:0d:de:48:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Validity
Not Before: Jul 20 11:57:44 2026 GMT
Not After : Jul 19 12:02:44 2027 GMT
Subject: CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:9d:ae:6d:fd:d1:db:4c:77:61:cf:83:f4:
8d:ea:84:19:60:8a:d5:1b:33:2b:78:9f:61:ad:26:
70:de:d4:99:75:73:7f:4b:78:88:05:ec:39:4c:19:
3a:b5:fd:79:3a:fb:51:cd:e7:69:22:2e:ad:4f:73:
c1:ff:9f:3c:7b:c4:35:d4:f1:ef:bc:c9:9b:22:e8:
bb:94:14:c0:17:2f:9a:e5:b9:5d:e7:e3:4d:b2:87:
7f:6c:8d:e5:ba:a3:fa:9c:28:f4:32:0a:ea:fb:7c:
bc:fe:10:30:3a:60:37:e3:68:ef:8a:16:c0:a8:70:
92:44:c6:fe:ab:d8:c2:71:ac:04:3a:4c:0e:a3:70:
e1:0b:04:a4:f0:99:55:80:d2:a0:70:9d:12:d0:b4:
91:39:6c:32:22:62:70:e2:e7:82:e2:f7:62:42:4c:
8c:30:36:39:6a:fb:bb:47:77:d5:d9:35:4b:18:f5:
60:ea:42:44:8d:f3:20:66:b1:33:03:1e:f7:36:e1:
19:f9:da:a6:ac:b7:db:2d:47:f8:e7:41:b7:31:f8:
2b:dd:8e:43:5d:ff:f0:a5:ac:7e:6c:fd:b2:47:79:
dd:6e:74:89:0d:20:3c:61:d9:10:26:cc:c3:d9:36:
a7:a8:d5:c8:3b:80:df:83:d9:31:a6:a4:47:a9:73:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE
X509v3 Authority Key Identifier:
keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c8c1::/32
Signature Algorithm: sha256WithRSAEncryption
34:40:45:a6:b4:f6:de:bd:10:ba:c9:13:cd:c5:90:00:6d:ec:
7e:0e:61:d2:d4:01:e8:7e:4c:d9:1b:5f:56:b0:4d:71:1d:f1:
2e:f1:43:f5:4b:12:96:dd:b3:b6:58:6d:ed:fe:f4:ed:89:b9:
50:c2:0b:32:3d:d8:e0:5e:68:67:ec:2d:e6:7b:aa:0f:3b:39:
29:64:55:21:2e:3e:70:d3:b0:d3:d4:81:39:fc:c6:8e:62:1c:
e9:2b:a0:2f:2d:9c:1f:6f:ab:20:47:fa:80:d4:a8:23:c7:34:
f9:b3:c9:a8:6a:51:5a:37:4b:3d:2b:7b:f1:a5:9c:d3:09:83:
07:d9:76:a8:c1:81:d6:b8:d0:97:36:02:89:82:9c:85:21:35:
7d:34:9e:ab:d4:91:b1:22:8d:9d:ac:0a:05:6b:1d:fa:11:a5:
0f:25:e7:d0:9c:18:f1:4e:ec:f8:db:b5:90:f3:ac:48:14:86:
2a:11:15:20:1e:16:ea:fc:b1:67:3b:97:38:70:36:c4:82:3a:
71:12:41:43:9d:90:4a:20:49:31:ef:fd:fe:65:02:4a:20:e2:
ad:ff:cb:88:fe:bc:02:4b:6d:5a:69:c6:47:3b:de:55:92:bb:
d7:7c:32:c8:4a:26:5b:3c:49:66:b7:8b:b8:4e:c5:da:13:9d:
d0:dd:76:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:51 2026 by rpki-client