Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer
File: CECA73092344CA9B6F74C1A83D6C747962186C47.cer (raw, json)
Hash identifier: pTKz89FvFAzeNtV7lHRv93V5HEUDzySXmIkbDozvIdY=
Subject key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47
Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94
Certificate serial: 47EE00B8F4045BFB5638160F446C2165778149A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 01 Feb 2026 11:55:28 +0000
Certificate not after: Sun 31 Jan 2027 12:00:28 +0000
Subordinate resources: IP: 2a0f:1cc5:2700::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 23:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ee:00:b8:f4:04:5b:fb:56:38:16:0f:44:6c:21:65:77:81:49:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94
Validity
Not Before: Feb 1 11:55:28 2026 GMT
Not After : Jan 31 12:00:28 2027 GMT
Subject: CN=CECA73092344CA9B6F74C1A83D6C747962186C47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:9d:f8:09:83:04:3e:79:79:ec:e7:90:bc:
71:16:1b:a7:92:c4:63:d8:e6:69:83:a2:91:28:35:
ce:2e:87:53:07:8f:20:41:ee:27:fb:4b:9a:38:50:
3f:bf:4e:81:eb:a8:82:56:cf:0d:43:22:59:52:8f:
91:a1:40:5b:31:a9:77:e6:de:10:a0:bd:05:32:79:
ab:67:75:29:69:35:91:c9:18:62:ff:31:a6:fa:1d:
ae:34:04:68:3a:b2:d8:76:8f:b0:b2:7b:33:b1:39:
c5:f6:43:4e:5d:50:66:ed:32:61:05:8e:37:32:e6:
bf:b0:90:ef:f9:72:b2:d7:b5:df:7c:ff:ae:97:43:
48:4d:d1:d5:00:a3:46:48:2c:58:76:66:42:77:c1:
b9:fb:bd:de:de:22:f4:f3:80:48:52:a2:29:2b:76:
f7:37:55:20:d3:3c:08:cf:b0:a1:5a:44:2b:92:e1:
43:56:25:cd:80:31:58:48:c6:e9:d1:cf:d4:25:5e:
26:e3:0d:e6:47:bd:8e:b7:6a:51:b2:dc:21:2d:09:
35:f1:41:d0:04:19:b3:35:c1:b5:01:9a:bd:18:fe:
52:69:12:b4:23:7c:2c:04:23:30:cd:44:8d:49:df:
b6:f1:ff:78:9f:1e:26:b6:1c:e6:da:ac:c2:7c:4b:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47
X509v3 Authority Key Identifier:
keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2700::/40
Signature Algorithm: sha256WithRSAEncryption
1b:50:97:ec:be:a7:ca:16:90:ed:01:45:16:2b:36:dd:19:9a:
63:49:fe:96:d1:5e:0c:ae:04:95:10:d5:7c:f3:fe:02:d3:00:
49:15:bd:74:04:59:42:4e:4c:b2:b5:01:9d:aa:b1:1d:d2:07:
00:21:eb:2e:64:ee:9b:cb:f3:c6:db:c2:ac:92:02:5c:94:87:
cf:99:63:e8:8e:b6:aa:a6:42:02:00:18:b4:a4:90:5c:ef:e5:
6e:e8:5c:d2:06:1a:bc:2f:f9:25:58:04:51:4a:d3:70:f0:5e:
b2:cb:8e:1b:67:8e:aa:40:13:01:a3:f5:78:7e:c5:dc:4b:4c:
cd:ec:bd:4a:6d:db:e1:a7:9d:bb:9f:ff:81:cb:44:a9:2f:f9:
5c:80:5c:4a:71:60:ea:a4:dd:0c:a7:76:61:7d:85:7e:c3:38:
3b:2c:e3:eb:2b:e3:91:f0:d0:a3:9b:c3:4c:6b:66:18:73:d6:
60:16:13:6f:3d:05:80:70:8f:a7:2c:3e:04:70:bf:bf:8b:f0:
be:2f:04:20:fd:b0:4a:4f:5c:6c:10:ed:5c:08:4a:1f:f3:56:
84:7b:af:25:0d:e6:b5:87:c0:47:58:5b:59:09:45:2f:fa:a6:
cb:a5:99:e4:fe:6c:d6:89:fa:49:92:d8:f0:ca:9d:bb:0b:45:
86:05:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:12 2026 by rpki-client