Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer
File: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (raw, json)
Hash identifier: wZK8GKavAyHxdXi2NXubIUtrqAxE1wgx7MB4jomVNVo=
Subject key identifier: FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial: 235CB6B92D456A76B5E5D3AD83613CDA39E059DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Manifest: rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
caRepository: rsync://rpki.qs.nu/repo/cyntest/2/
Notify URL: https://rpki.qs.nu/rrdp/notification.xml
Certificate not before: Mon 09 Mar 2026 20:00:08 +0000
Certificate not after: Mon 08 Mar 2027 20:05:08 +0000
Subordinate resources: IP: 2001:67c:1190:555::/64
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5c:b6:b9:2d:45:6a:76:b5:e5:d3:ad:83:61:3c:da:39:e0:59:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
Validity
Not Before: Mar 9 20:00:08 2026 GMT
Not After : Mar 8 20:05:08 2027 GMT
Subject: CN=FF0595CB477C33B6B94C7E477213C842A6067D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:97:31:be:6c:77:50:ba:ad:de:ac:e2:6d:
2c:8f:b8:5f:99:76:13:b4:75:61:d1:d6:66:21:55:
c4:67:19:d1:f5:fd:48:74:f9:b9:90:5b:99:bf:2b:
54:f1:bb:79:91:47:a3:fd:93:48:95:a0:de:72:2a:
dd:34:ed:26:3a:a3:02:f7:97:3b:21:80:43:9f:18:
0e:f4:b3:d0:ea:3e:50:29:0d:96:1f:05:54:b1:d4:
e9:aa:50:30:24:2b:01:47:48:43:fa:53:96:9d:81:
b1:04:fc:66:1a:18:ca:7a:97:1a:e1:b2:42:f5:d0:
31:8f:e4:9a:f1:05:a4:7e:d5:d5:ec:bf:d3:b7:1b:
9e:80:27:1a:4a:8a:dd:c1:93:86:8c:4d:e5:2f:30:
94:10:f4:e4:b8:7a:1b:e6:8e:46:d3:4c:13:bf:f4:
3e:0e:ea:72:76:5c:50:15:c3:8a:9f:c3:69:aa:dd:
98:38:e7:f5:27:46:d9:81:23:70:63:df:5b:8a:76:
6a:3f:4a:42:ef:14:a3:01:dd:2d:03:3d:a7:2c:3a:
ba:98:5c:c8:f6:7c:e3:10:0b:b9:76:1e:af:57:53:
82:74:41:c8:3c:53:b5:90:04:c0:0e:ce:9a:c1:5d:
d7:35:15:df:5c:82:a2:50:13:77:04:6a:df:4b:bf:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B
X509v3 Authority Key Identifier:
keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.qs.nu/repo/cyntest/2/
RPKI Manifest - URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
RPKI Notify - URI:https://rpki.qs.nu/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1190:555::/64
Signature Algorithm: sha256WithRSAEncryption
c2:e9:46:db:9c:3a:e9:37:ec:14:88:2d:c7:dd:58:50:f7:0f:
dc:b5:23:8b:2b:5f:7c:a5:e7:99:8d:27:d0:4a:c5:42:6e:71:
8a:e6:d1:b1:c9:20:1e:9a:7c:4d:9a:b6:3c:a0:d9:6e:55:29:
43:3d:6d:73:ea:08:04:67:58:b8:33:eb:59:b8:a4:1c:8b:62:
f1:7d:7e:78:77:40:ab:b4:e7:1d:17:f2:fc:13:46:5d:d4:50:
e7:35:28:c8:76:a5:2f:21:6c:d6:01:35:44:bf:d4:c4:df:a0:
63:8c:3e:c4:91:45:04:b2:07:c0:a3:b1:4f:30:e6:cf:57:48:
ba:0c:55:c2:9f:be:ae:83:f6:8c:e4:9d:74:a9:74:60:6f:de:
aa:9d:4f:86:a5:0c:f0:0f:5e:7f:f0:72:4a:eb:c5:59:dc:54:
bf:aa:a1:fd:3a:c0:88:5c:39:62:a5:1d:e8:ae:b7:2a:d1:20:
fc:46:36:e3:2f:40:6d:1d:c1:97:9f:4e:26:4e:2d:a7:1a:51:
70:57:81:42:78:06:3c:f1:12:05:85:52:96:3f:df:6f:16:63:
49:98:6a:42:b6:80:a8:0b:2e:d4:62:45:a5:33:61:99:9d:0c:
2a:95:bd:a4:5e:77:39:2c:38:c9:b6:af:bd:d4:83:9d:c1:a9:
6e:49:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:04:49 2026 by rpki-client