Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer
File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (raw, json)
Hash identifier: ySPDgXQXDUMWx5rO4blD0BT5WHnXiPLofJpU7ldxmlk=
Subject key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 76DE5A02E2CF5A7E8DC6D506122DA34FD1965993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 13 Jun 2026 03:08:21 +0000
Certificate not after: Sat 12 Jun 2027 03:13:21 +0000
Subordinate resources: IP: 2a13:9644:4000::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:de:5a:02:e2:cf:5a:7e:8d:c6:d5:06:12:2d:a3:4f:d1:96:59:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Jun 13 03:08:21 2026 GMT
Not After : Jun 12 03:13:21 2027 GMT
Subject: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:f1:8c:34:0d:01:eb:65:f7:f3:f4:11:6a:
c4:7c:25:23:7a:da:f0:34:6d:81:8f:d0:ba:77:05:
f2:f0:d1:01:ef:9b:da:ff:07:62:77:9a:d7:c7:c2:
4d:9c:39:72:ea:70:32:e8:2b:54:ef:c5:be:be:60:
06:c6:cd:93:46:82:ab:91:59:e5:71:b2:17:96:5d:
4e:cc:a6:5d:5a:1b:09:21:99:ad:2d:6f:bf:a7:13:
5d:3f:79:4e:5b:ed:c6:56:30:44:55:54:71:1a:73:
43:b7:53:c4:bc:d3:2e:68:c9:e0:90:ea:85:02:0a:
10:6f:6a:55:e5:c9:30:27:4e:23:18:a4:bc:76:c6:
e1:5f:01:e3:33:0f:6e:8d:ce:20:3a:fc:e2:5f:6a:
40:1c:77:de:0a:cb:e5:45:1c:d7:f2:61:8c:3b:8b:
28:ae:89:5b:b8:b6:24:66:97:18:c0:e4:e2:30:d2:
08:c9:a5:97:c1:60:7c:0c:25:ae:4b:23:77:38:d9:
4e:9a:58:d2:ff:e6:18:cb:26:34:35:a0:c9:9e:89:
19:c3:92:72:40:95:0d:9f:09:85:cf:f1:19:b8:e1:
4c:5c:f5:5f:8a:d5:94:12:3f:20:20:59:25:2d:8b:
f3:88:d3:0b:64:5b:1e:3e:47:14:e6:24:eb:91:ef:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:4000::/40
Signature Algorithm: sha256WithRSAEncryption
3f:92:70:e7:46:6c:59:34:6e:09:fa:55:7d:c4:ea:3a:ee:b9:
a8:32:4a:49:ac:5d:85:d5:80:b3:08:2d:a6:e7:eb:72:c7:4b:
fb:d2:11:af:1e:18:e6:7f:cd:95:be:cb:49:70:7e:a9:46:35:
6c:93:cc:96:84:7f:7d:c3:25:aa:86:08:1f:8c:0d:5b:f2:ba:
29:69:d2:ea:8d:ce:3b:35:45:10:97:2d:7b:3f:7a:ca:16:d6:
f5:cd:6d:06:9d:f2:ec:3d:0c:e0:a8:35:c4:4c:4a:24:66:96:
6f:f6:85:17:e6:82:df:45:23:2f:63:11:60:ff:ee:a5:e9:fa:
dd:7e:44:bb:8b:e2:e6:d3:ae:6c:32:dd:98:83:96:3d:8d:0a:
ca:1c:48:76:5d:af:f2:ad:ad:99:b1:28:34:74:a3:68:0a:73:
55:b8:a3:62:67:c2:f4:04:93:4b:31:97:60:2d:e8:8e:c0:83:
04:72:d6:22:30:48:e9:b2:e5:28:11:af:26:5b:e1:41:09:f3:
8c:9a:16:b1:09:b0:a1:e5:4c:b0:43:e7:98:47:d8:6f:8e:4c:
a3:a0:2a:d7:54:f2:59:e0:06:bd:aa:2f:8e:63:82:a4:60:0c:
29:41:fe:a2:3c:a9:c3:d2:23:19:8f:55:2b:8d:47:d2:20:14:
08:ed:04:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:45 2026 by rpki-client