Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer (raw, json)
Hash identifier: jfZR8misYvy4pK0nN9IpRRRxS5ul985EOO9m9DtG2K0=
Subject key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 41E27BA30C82D623A1D8638BD32273209087CE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 24 Mar 2026 22:28:13 +0000
Certificate not after: Tue 23 Mar 2027 22:33:13 +0000
Subordinate resources: IP: 2a14:7580:d00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:e2:7b:a3:0c:82:d6:23:a1:d8:63:8b:d3:22:73:20:90:87:ce:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 24 22:28:13 2026 GMT
Not After : Mar 23 22:33:13 2027 GMT
Subject: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:20:3e:3b:64:8b:16:1e:23:c3:fe:3b:54:
ab:36:f6:ea:b0:d1:3c:97:f0:81:b5:8d:74:e1:23:
b1:02:cb:75:ad:71:b1:53:b5:7e:68:a8:d2:b2:2d:
77:4d:bf:0f:4e:42:1e:0f:42:e6:d9:f0:6a:af:bd:
b6:3f:2f:4a:17:22:80:56:01:e9:90:5f:31:c3:29:
66:c4:a5:82:fd:29:22:4f:fd:49:77:92:d8:95:0f:
c2:08:fc:10:ff:29:db:0e:5e:4b:05:22:d3:37:9d:
79:48:43:4e:43:23:1e:d3:47:c5:1c:27:01:43:b9:
a8:82:f9:c6:29:ef:d7:05:e4:4e:e1:ee:84:6c:4d:
bc:e3:b2:bb:d5:2c:cf:6e:6f:c6:18:33:dd:61:61:
0b:e0:45:40:90:c5:9a:f5:bc:7c:6f:65:cf:93:49:
70:22:74:08:37:98:4b:18:33:a3:74:70:33:a6:de:
c5:39:bb:e5:8a:78:2d:bf:63:10:99:d2:78:cc:06:
89:a4:dd:26:c0:b5:e6:b9:9c:9a:3d:8b:37:f7:03:
5c:f0:f1:eb:03:11:a1:9f:fc:18:0a:f3:23:02:4c:
1d:2c:5f:a1:f9:66:07:9a:de:7e:3b:5f:06:32:59:
d1:d7:aa:e7:25:19:7a:5d:5b:97:f6:a6:b7:a2:9f:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:d00::/40
Signature Algorithm: sha256WithRSAEncryption
16:d1:24:4c:00:6a:22:ee:8e:16:fc:4d:ca:4e:bb:0d:cc:06:
d9:0c:1b:f4:83:99:ac:31:a2:2d:03:d9:57:f6:1d:60:02:e7:
c0:17:94:ab:d2:a8:26:df:9b:1c:f2:b5:88:af:ba:6e:92:76:
31:12:e0:39:39:83:b4:f9:fc:ff:f6:bb:39:cb:6e:a9:66:2a:
c5:04:96:b7:bd:40:9d:47:d6:b7:1d:20:8d:df:58:66:7b:ca:
bc:d1:1d:c8:3d:0a:b3:56:b8:dd:3b:0b:e8:20:6d:57:86:bf:
87:db:fd:ef:3f:e0:33:c0:20:66:2f:7e:6b:9e:68:27:57:f9:
39:28:d5:0e:16:28:6b:7b:64:ac:24:f9:a8:94:64:06:99:5e:
c4:74:8d:7d:ff:a0:36:f8:75:d8:ad:9f:e7:e1:be:31:1e:84:
2c:e9:28:0a:ab:e5:06:ec:60:3f:39:aa:57:15:98:a7:38:58:
34:e6:dc:f9:49:35:f6:16:f9:3d:c1:51:0a:cd:f2:9d:1b:10:
af:72:be:cb:da:cb:89:2d:df:05:28:14:f3:02:0f:92:60:02:
37:dc:ec:f7:e6:67:66:67:dd:a8:b7:9a:48:2f:a0:63:5f:b0:
2c:3a:a3:1b:37:d7:42:a9:90:7e:8d:ab:73:7c:fc:bf:e1:14:
50:af:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:39:59 2026 by rpki-client