Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer
File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.cer (raw, json)
Hash identifier: F1LX/MW+4VeZCRqGzRkx7qIbwr40WLpeqD1aIEUxWE4=
Subject key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 142C4A3BB8CC285C8ABE66AB9EDF1387DDDC74F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 17 Sep 2026 11:36:29 +0000
Certificate not after: Thu 16 Sep 2027 11:41:29 +0000
Subordinate resources: IP: 2a0f:1cc5:c00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 15:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2c:4a:3b:b8:cc:28:5c:8a:be:66:ab:9e:df:13:87:dd:dc:74:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 17 11:36:29 2026 GMT
Not After : Sep 16 11:41:29 2027 GMT
Subject: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:e9:36:05:11:a5:af:8f:d9:56:da:c9:47:
88:e4:8e:84:40:6f:0b:27:bd:6d:b9:98:6f:de:c3:
1b:15:59:1e:0f:df:dd:d7:cf:8a:c7:dd:2f:e9:1e:
c2:22:f3:e9:dc:e6:09:58:8f:6d:19:35:17:e2:6b:
06:10:0d:0b:5f:48:70:db:4a:49:92:cd:52:58:5f:
31:a0:2d:b2:10:91:ab:cb:ad:19:d2:3f:bd:cb:33:
b6:0d:b3:15:13:3f:44:6e:38:34:38:38:75:66:8a:
27:8a:70:7b:cd:2e:e5:1a:1f:dd:bd:1b:7d:7a:c6:
fa:39:6f:92:0b:9e:3b:fa:f3:f4:1b:80:88:e2:92:
71:a1:2d:f2:f2:6b:00:97:0b:db:55:f3:b3:0d:8f:
81:84:fc:b9:ab:ec:57:10:49:c0:6a:53:bf:1b:f6:
83:31:5a:3a:7d:14:c2:3d:af:00:7b:0a:66:d1:6a:
56:29:b8:dd:75:81:da:b9:41:9a:46:bd:1e:dc:8b:
d7:09:c2:a1:04:89:13:af:b7:b2:b5:89:e5:4e:3e:
80:be:dd:0a:f0:b3:2e:d2:43:83:08:5f:70:80:ad:
6b:7c:fd:33:b7:0e:af:45:30:2d:0e:08:1b:4d:41:
4b:44:7e:09:ba:03:8b:53:9a:96:bb:26:79:dd:f1:
e1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:c00::/40
Signature Algorithm: sha256WithRSAEncryption
46:db:7a:07:25:05:6a:f8:b9:f1:ce:f5:e7:24:97:ff:e2:84:
0e:61:fd:11:91:a9:d9:21:8f:9a:e5:51:86:a9:3d:1f:be:12:
1f:66:66:50:63:b2:66:2b:65:35:99:f8:97:1f:af:d2:da:3c:
dc:cf:bb:7b:15:b1:1f:c2:29:84:2e:2c:be:6f:f3:26:8b:a8:
c9:cb:89:cc:63:8b:06:f6:35:75:84:e9:bc:57:b1:e2:6b:c7:
98:f4:b9:17:84:db:53:fd:1f:f1:2f:bb:cf:77:3b:cb:85:b1:
d4:60:70:4c:aa:dd:5d:be:47:82:f8:23:d1:b5:fd:49:97:83:
de:4a:96:85:d2:9f:af:a0:04:1c:b0:0b:07:d5:65:c9:03:6d:
c8:c5:07:54:a6:5a:fb:62:c3:b1:0d:f0:e3:a6:22:03:10:30:
dd:49:ca:38:3c:7e:ab:25:89:24:79:ef:42:ed:b6:06:3b:27:
ac:0b:a4:41:a5:68:1d:00:6c:c1:d8:15:cc:41:0f:a3:68:41:
43:19:01:50:49:21:29:af:10:d1:48:9d:c8:58:78:b6:30:23:
47:bd:65:0e:af:00:fb:35:6d:bc:17:c9:0e:cc:39:de:2c:30:
b6:c0:86:3f:d8:62:f7:b6:15:cb:7b:2d:34:a4:36:80:1d:75:
3b:f7:4b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:46:19 2026 by rpki-client