Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
File: EbBIqvW7QvbE2dOHrSen6yGfOII.cer (raw, json)
Hash identifier: XwE9uOwPCxzdP5d9iu3ob9WcoMcHFbIwksDbRTgQ1V0=
Subject key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01973977746A1842F95AFCC0C638E4FA0020
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Jun 2025 05:43:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.196.44.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:77:74:6a:18:42:f9:5a:fc:c0:c6:38:e4:fa:00:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 4 05:43:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:86:48:08:84:bc:60:fc:a1:fc:bb:cb:5c:
f8:78:13:76:3c:a1:42:6c:f6:a5:b1:29:3b:33:42:
45:5c:3f:76:90:91:e0:81:aa:88:f2:8a:86:12:8d:
6b:03:be:25:ef:12:3a:b3:19:5b:f2:67:39:ba:90:
65:aa:6c:3a:3c:22:6f:5e:13:b3:77:25:ef:17:ca:
5f:79:cd:d5:8b:b8:fc:16:d0:7b:bb:b0:34:e8:5f:
2e:b3:8d:6e:94:b6:0e:3d:92:57:05:cc:9e:3a:1f:
a4:a9:32:4e:a5:21:dc:39:ab:7a:96:c6:cd:54:2a:
bd:c7:1f:a6:f9:e3:f8:90:f9:1c:be:53:6d:ea:9a:
e5:bd:22:24:eb:8b:16:21:3a:6d:66:03:00:eb:a6:
bf:89:ab:5d:ed:73:78:5b:34:3a:05:18:64:56:85:
cb:02:44:f1:63:b1:ff:13:87:52:ff:c9:35:2c:ac:
3b:c6:9d:2f:94:70:51:82:75:58:cd:2d:46:1e:ac:
3d:e6:b2:10:f1:71:7c:42:be:e7:bd:0a:12:92:f3:
8d:02:a3:13:6b:f2:08:7c:3d:d2:56:d7:26:ff:77:
a5:15:00:2f:27:29:e7:22:24:c2:4a:8f:0b:c8:9a:
20:b8:50:86:27:76:0d:c6:f2:61:ee:c6:0b:bc:ea:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.44.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e2:07:c4:66:1e:02:b7:7d:14:54:d7:26:28:1a:c5:b1:aa:
ce:05:8b:c1:0c:0b:04:94:fd:6f:2c:6a:3b:8c:04:74:07:ef:
09:5c:69:d7:b8:c8:f6:05:92:b9:fe:a5:90:23:f2:1e:0a:e1:
8b:a9:15:c9:18:f7:ad:49:a7:4c:3e:ee:15:f7:bf:48:aa:f5:
88:37:da:c0:e8:26:16:2f:08:68:0f:db:aa:4d:8d:21:38:91:
9e:75:dc:84:e4:71:bd:9b:db:7e:0b:69:22:0c:79:42:15:7b:
73:34:30:51:4f:bb:c1:d6:1c:29:e0:29:92:d8:6c:1f:23:d1:
74:bd:39:72:ab:52:e0:b9:5f:c6:d6:a9:a4:8b:af:8b:29:31:
13:85:ea:e9:da:b8:1b:b2:c4:57:4e:10:21:d6:ad:70:9f:0e:
62:ff:0f:b3:c7:cc:75:8f:64:f1:a7:a9:ca:7c:77:bd:76:7e:
bc:51:d9:62:f6:6f:6d:d6:17:39:4d:99:0e:3c:a0:3b:f3:ef:
3c:95:be:16:a3:fe:9b:ec:e7:c5:35:20:2c:2f:1f:6c:68:3f:
25:88:9b:b9:e1:20:75:5b:56:1b:64:93:f9:0b:06:cb:45:6f:
e8:85:c8:ea:b0:8c:4d:41:59:74:a4:b8:ac:ee:57:7c:4b:7f:
5f:c5:fe:58
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZc5d3RqGEL5WvzAxjjk+gAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNjA0MDU0MzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWIwNDhhYWY1YmI0MmY2YzRkOWQzODdhZDI3YTdlYjIxOWYzODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/6GSAiEvGD8ofy7y1z4eBN2PKFC
bPalsSk7M0JFXD92kJHggaqI8oqGEo1rA74l7xI6sxlb8mc5upBlqmw6PCJvXhOz
dyXvF8pfec3Vi7j8FtB7u7A06F8us41ulLYOPZJXBcyeOh+kqTJOpSHcOat6lsbN
VCq9xx+m+eP4kPkcvlNt6prlvSIk64sWITptZgMA66a/iatd7XN4WzQ6BRhkVoXL
AkTxY7H/E4dS/8k1LKw7xp0vlHBRgnVYzS1GHqw95rIQ8XF8Qr7nvQoSkvONAqMT
a/IIfD3SVtcm/3elFQAvJynnIiTCSo8LyJoguFCGJ3YNxvJh7sYLvOo0TQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBGwSKr1u0L2xNnTh60np+shnziCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzdiZTli
Mi0yZTE5LTRmZTAtYjE3YS01Y2YzZTc2YTFlYmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvN2JlOWIy
LTJlMTktNGZlMC1iMTdhLTVjZjNlNzZhMWViYy8xL0ViQklxdlc3UXZiRTJkT0hy
U2VuNnlHZk9JSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAucQsMA0GCSqGSIb3DQEBCwUAA4IBAQCE4gfE
Zh4Ct30UVNcmKBrFsarOBYvBDAsElP1vLGo7jAR0B+8JXGnXuMj2BZK5/qWQI/Ie
CuGLqRXJGPetSadMPu4V979IqvWIN9rA6CYWLwhoD9uqTY0hOJGeddyE5HG9m9t+
C2kiDHlCFXtzNDBRT7vB1hwp4CmS2GwfI9F0vTlyq1LguV/G1qmki6+LKTETherp
2rgbssRXThAh1q1wnw5i/w+zx8x1j2Txp6nKfHe9dn68Udli9m9t1hc5TZkOPKA7
8+88lb4Wo/6b7OfFNSAsLx9saD8liJu54SB1W1YbZJP5CwbLRW/ohcjqsIxNQVl0
pLis7ld8S39fxf5Y
-----END CERTIFICATE-----
Generated at Fri Jun 6 23:47:10 2025 by rpki-client