
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
File: B113B31E9F01A2F41870E8C77492B18EBA830E07.cer (raw, json)
Hash identifier: CE8rEUajqb/rYqenrdiSwWUrmxbqkwelMD4fWqG2/Ic=
Subject key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial: 2DCF5DCBB61A8A5333B8468D93D29C7063817380
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 02 Mar 2026 05:20:35 +0000
Certificate not after: Mon 01 Mar 2027 05:25:35 +0000
Subordinate resources: IP: 2a06:1283:8a00:: -- 2a06:1283:8fff:ffff:ffff:ffff:ffff:ffff
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:cf:5d:cb:b6:1a:8a:53:33:b8:46:8d:93:d2:9c:70:63:81:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Validity
Not Before: Mar 2 05:20:35 2026 GMT
Not After : Mar 1 05:25:35 2027 GMT
Subject: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:4a:3c:b9:3b:18:62:5c:e7:8c:2a:b0:e3:
a5:21:50:5f:56:66:16:99:b4:f1:99:7f:3a:22:04:
a9:de:b9:1b:49:85:a9:f4:34:92:1b:e1:92:de:5a:
b1:78:b2:5c:20:27:2e:f2:8c:22:a3:f2:a0:6c:19:
38:59:74:2a:fe:10:79:24:56:05:de:32:4a:1a:26:
8d:1f:4d:33:12:70:46:39:4f:c4:82:fb:a9:79:b0:
9a:64:f5:dd:25:9b:7a:25:e4:3d:b4:d4:31:c0:b6:
cc:17:e9:95:3f:68:27:3a:79:91:a5:3c:15:0a:25:
5a:eb:a7:a4:3b:62:53:5d:36:28:09:60:5d:9e:77:
84:02:25:7a:13:63:35:b0:92:fe:24:0d:22:ba:43:
e8:ef:d4:b5:bc:ce:da:e0:3a:b0:1d:a6:81:47:04:
be:00:ac:b7:e8:66:5f:61:4d:82:ac:4b:36:5d:54:
a1:00:c6:2e:69:78:70:f3:32:b9:db:a2:83:71:c1:
3e:34:c3:bc:23:88:c7:bf:d1:c8:32:a5:40:d5:e9:
36:43:17:87:7f:df:be:27:ba:d0:cd:38:f6:2c:0d:
cf:fc:db:4f:16:9e:dc:da:9d:ec:6a:23:54:10:bc:
29:b8:5e:c9:a4:73:8b:a7:7c:57:8d:77:5f:25:57:
f6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
X509v3 Authority Key Identifier:
keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:8a00::-2a06:1283:8fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5f:22:22:23:f5:92:6a:4b:79:55:f2:cb:45:8f:5a:46:83:65:
ea:2e:9d:5f:59:7e:a8:49:7f:07:25:d1:ce:58:59:b4:f6:b9:
3a:38:41:c1:a4:9e:7e:b3:e8:24:25:17:f3:f7:a8:61:d5:4e:
2f:84:2f:5b:35:e6:de:ea:b2:50:a8:f7:a7:77:62:cb:29:85:
b6:39:b3:c2:fc:ae:5e:2e:22:93:94:52:68:d2:49:9b:e3:73:
e4:08:56:fc:7d:43:2c:cd:0b:a0:ef:71:a5:e4:db:4d:96:94:
5a:bd:19:b3:73:14:35:2b:f4:11:97:d5:9d:13:8c:fb:6f:52:
07:dc:03:bc:f5:43:79:f3:f1:26:ef:fa:64:3e:a6:d2:d0:e6:
09:72:72:c2:f5:95:dc:77:a5:34:60:4b:e7:6b:c3:c2:e6:0b:
90:5b:65:5f:0e:56:88:06:fd:b8:03:4d:aa:9a:6a:af:cb:48:
c6:6a:a3:0f:26:dc:02:c1:0a:b2:ff:57:9f:cc:de:a6:ca:e6:
03:63:48:a6:c9:2a:27:7a:01:1c:d7:56:0a:2f:9e:c7:9b:eb:
c7:a2:7a:69:92:42:4e:28:dd:13:74:1f:5f:6c:2b:87:8a:e8:
5e:02:b6:52:3c:3b:f8:51:78:27:43:a6:1e:72:5d:1b:37:de:
55:68:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:04 2026 by rpki-client