Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer
File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer (raw, json)
Hash identifier: LjIqni6Jt5uYbzTB2jwellPkiO/ehSellr9BGyGJINo=
Subject key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6185F6DB1FD4EF7282FEC7815F587EF1EB2D2E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 17 Sep 2026 01:29:35 +0000
Certificate not after: Thu 16 Sep 2027 01:34:35 +0000
Subordinate resources: IP: 2a14:7581:700::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:85:f6:db:1f:d4:ef:72:82:fe:c7:81:5f:58:7e:f1:eb:2d:2e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 17 01:29:35 2026 GMT
Not After : Sep 16 01:34:35 2027 GMT
Subject: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:57:f6:96:27:f1:8d:64:03:e5:1e:3c:9c:
4a:36:ed:73:f8:00:b9:57:cc:69:b3:c7:04:9a:de:
2b:8e:4b:40:7c:d6:6d:99:8e:dc:1a:fc:c7:2e:c5:
b5:9c:cf:69:1e:37:48:30:e4:c6:89:00:89:20:8f:
4d:59:11:dc:6a:91:88:1d:87:65:b5:34:44:1f:09:
90:84:82:9c:f7:22:04:ad:64:19:19:ae:b7:e0:45:
c6:c3:ef:56:14:39:88:4c:59:f9:bc:73:02:32:b9:
bf:0d:9a:06:c5:4a:2c:93:a5:74:2b:29:7c:fc:7b:
39:d5:e5:36:3e:e7:70:2d:0a:e2:43:f0:ca:5b:32:
5f:0e:47:09:27:32:fc:5e:b1:c5:f2:cf:14:3d:3f:
6f:aa:18:fd:bd:6b:60:1c:91:14:d7:5e:2d:1f:63:
09:43:a8:2f:f7:42:90:5d:d7:c7:6e:8a:f8:d7:d0:
0b:15:5e:e1:7e:0b:f0:c0:97:ba:2b:ec:67:bd:be:
88:07:46:c3:cf:07:62:ea:d9:6c:31:92:98:6f:66:
db:27:0f:a8:9e:05:b0:94:ed:33:06:e8:db:16:87:
9f:00:db:af:2c:29:a8:28:cd:99:f7:60:31:cf:83:
a1:1a:03:8f:d6:53:0b:f0:09:53:c9:25:42:d2:d7:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:700::/40
Signature Algorithm: sha256WithRSAEncryption
35:c7:29:bd:27:6b:e8:6f:15:e7:31:b7:0c:33:52:16:25:36:
16:20:ff:b0:e6:80:eb:67:d3:c5:33:4a:5d:62:cc:70:56:e7:
2a:d1:2c:a4:5a:ab:1e:bb:f3:be:39:57:5c:e6:a9:a0:91:c9:
5c:68:9d:3a:3a:f8:c1:85:9c:9e:b6:d7:f4:b8:f5:24:30:0d:
95:2c:1f:ea:9c:73:eb:01:8b:bb:69:eb:82:20:d1:1e:7a:d5:
87:7c:6e:51:3d:51:9c:0c:94:e1:4a:39:42:7a:85:6f:93:24:
c6:e6:33:73:3f:9d:ae:30:6a:2b:d0:49:30:c5:95:63:e1:31:
6f:36:fb:79:f1:10:db:c4:39:17:dc:84:08:e8:b3:24:c9:ec:
45:4f:2f:1c:17:27:14:a6:58:d9:90:6a:5d:15:b0:73:0d:7d:
1b:8a:7a:22:a8:94:d2:ef:bf:90:9a:87:ce:ef:50:c4:9d:55:
60:ae:25:ae:c5:29:ec:aa:14:a2:a4:23:08:57:e7:c3:78:d8:
e1:88:a3:9a:79:65:6c:22:8d:53:82:b4:25:98:13:b0:b0:ec:
dd:33:9f:5f:9d:34:26:f2:96:c1:0d:3f:7d:ed:03:3c:5c:96:
9c:c2:10:17:16:3b:03:9e:67:4f:31:24:a7:04:c2:74:c9:9e:
4a:b4:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:54:11 2026 by rpki-client