Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer (raw, json)
Hash identifier: CudTsGiQz2jt7Lzc6GedOAP6GXXWml1YvBS8ePq1cEg=
Subject key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 142631B41DEDB11B98E2E0C94F8F5071AB7F4EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 30 Jul 2025 04:31:25 +0000
Certificate not after: Wed 29 Jul 2026 04:36:25 +0000
Subordinate resources: IP: 2a0f:85c1:325::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:26:31:b4:1d:ed:b1:1b:98:e2:e0:c9:4f:8f:50:71:ab:7f:4e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 30 04:31:25 2025 GMT
Not After : Jul 29 04:36:25 2026 GMT
Subject: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3f:38:0a:7f:00:00:c6:66:5a:55:96:89:01:
4c:f7:4a:5a:2b:b0:3e:e6:05:ee:7f:51:a0:88:58:
c5:40:66:0e:bb:84:d0:25:8d:20:46:43:27:76:97:
3f:7f:cb:75:66:b7:98:1d:d8:2a:11:17:5d:44:91:
df:88:ae:34:ba:6c:28:ec:74:a4:51:81:12:c9:0b:
9b:30:91:ad:51:8b:45:1b:cc:21:4b:84:d3:ee:54:
b8:ee:e0:78:35:80:9f:aa:aa:4c:7c:c9:da:26:c2:
75:d0:ef:78:36:4b:fe:c6:7d:74:07:41:de:2f:c5:
66:b8:f7:03:32:e5:e9:cb:bf:eb:ef:d7:21:5b:6b:
3f:f7:6a:fb:23:05:cf:19:b0:20:45:2c:3b:fa:9c:
35:66:5f:97:bc:6b:f6:d5:a3:de:1b:0c:ec:bc:39:
d6:27:52:6f:65:1d:db:88:eb:72:0f:0c:cf:a4:c6:
e9:b5:cf:3d:f5:3d:18:9b:3c:b6:03:26:bf:87:65:
96:66:d7:ca:4b:3f:35:52:e0:b8:b7:ab:df:bf:5a:
a4:51:54:7d:72:62:1a:7f:72:3f:84:d0:16:e1:0b:
4c:b5:a1:ba:62:62:47:2a:9d:cb:82:29:68:42:56:
ab:9e:cb:74:d2:9a:e4:8c:5a:67:69:93:f7:2e:59:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:325::/48
Signature Algorithm: sha256WithRSAEncryption
9c:ca:b6:85:64:6a:ef:c0:81:12:d1:22:5c:ec:d4:9e:a6:41:
66:63:23:05:f1:5b:87:e5:25:03:0b:ea:a7:c0:1e:43:e8:b8:
93:01:36:c5:fd:4a:b6:cd:b5:4e:0e:ca:ab:52:71:d1:41:57:
ce:fb:ce:b5:b1:79:02:f1:07:36:e7:6d:31:b9:8e:44:59:85:
ab:47:99:55:83:d9:9a:cd:b2:0c:d3:fb:68:cf:7f:51:dc:70:
b6:68:2e:86:29:96:55:e1:2c:37:e3:dc:2c:84:ea:be:d5:cc:
66:33:c1:6d:20:45:b7:87:88:90:f5:4a:bd:ac:7b:17:13:03:
41:a5:5a:f0:66:31:62:7a:29:b5:2b:29:02:20:dd:bf:ef:99:
4c:1a:09:e3:41:df:d5:1f:e1:84:bc:e7:59:67:4c:15:a4:68:
48:7f:b8:c8:68:29:33:47:66:d3:1e:cd:b4:80:5d:66:a0:bd:
9f:05:1f:06:9d:a3:2d:f8:89:6a:2f:87:b5:71:b0:3f:16:67:
73:35:6a:24:a6:9c:fb:f3:4a:2a:c3:f6:b8:f5:76:2c:6f:dc:
3b:e2:d4:50:7a:b9:44:bf:94:fe:b1:85:31:1d:7d:b5:cc:81:
f0:b7:5c:43:d6:fc:aa:b3:50:55:62:b2:2f:88:77:d4:b7:f8:
1d:8b:ab:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:26:02 2025 by rpki-client