Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer (raw, json)
Hash identifier: o3DQwLnzcxlsk0iz2tXlNaTrKZZpTW3ibFEKX4enmQc=
Subject key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 628AB8B9D79B59D0C37B7880E85EA57AC094ECC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 21 Jul 2026 02:46:49 +0000
Certificate not after: Tue 20 Jul 2027 02:51:49 +0000
Subordinate resources: IP: 2a0f:85c1:325::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:8a:b8:b9:d7:9b:59:d0:c3:7b:78:80:e8:5e:a5:7a:c0:94:ec:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 02:46:49 2026 GMT
Not After : Jul 20 02:51:49 2027 GMT
Subject: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3f:38:0a:7f:00:00:c6:66:5a:55:96:89:01:
4c:f7:4a:5a:2b:b0:3e:e6:05:ee:7f:51:a0:88:58:
c5:40:66:0e:bb:84:d0:25:8d:20:46:43:27:76:97:
3f:7f:cb:75:66:b7:98:1d:d8:2a:11:17:5d:44:91:
df:88:ae:34:ba:6c:28:ec:74:a4:51:81:12:c9:0b:
9b:30:91:ad:51:8b:45:1b:cc:21:4b:84:d3:ee:54:
b8:ee:e0:78:35:80:9f:aa:aa:4c:7c:c9:da:26:c2:
75:d0:ef:78:36:4b:fe:c6:7d:74:07:41:de:2f:c5:
66:b8:f7:03:32:e5:e9:cb:bf:eb:ef:d7:21:5b:6b:
3f:f7:6a:fb:23:05:cf:19:b0:20:45:2c:3b:fa:9c:
35:66:5f:97:bc:6b:f6:d5:a3:de:1b:0c:ec:bc:39:
d6:27:52:6f:65:1d:db:88:eb:72:0f:0c:cf:a4:c6:
e9:b5:cf:3d:f5:3d:18:9b:3c:b6:03:26:bf:87:65:
96:66:d7:ca:4b:3f:35:52:e0:b8:b7:ab:df:bf:5a:
a4:51:54:7d:72:62:1a:7f:72:3f:84:d0:16:e1:0b:
4c:b5:a1:ba:62:62:47:2a:9d:cb:82:29:68:42:56:
ab:9e:cb:74:d2:9a:e4:8c:5a:67:69:93:f7:2e:59:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:325::/48
Signature Algorithm: sha256WithRSAEncryption
31:6f:20:b2:f9:1d:e3:d1:c6:be:4a:ff:88:6a:28:eb:f4:7a:
f3:5e:28:ec:80:a0:91:e1:71:68:7f:28:c5:86:85:7b:9e:04:
62:6f:b0:ad:93:16:b6:f2:30:ea:29:eb:72:1a:6a:f0:d3:35:
8e:61:e3:ca:43:7d:0c:8c:e6:43:8b:b4:94:37:e2:60:96:52:
3c:95:fe:e6:ad:2a:c4:84:b3:33:a2:16:75:c6:8e:c6:18:4a:
29:cf:9b:5f:80:d7:a2:57:27:61:48:f5:c9:0e:f0:8f:21:5c:
23:d4:f8:48:37:28:94:7c:27:53:21:82:dd:2a:6a:47:18:0b:
82:e7:cd:0d:f8:72:88:17:c2:39:7f:d0:2a:71:14:04:8e:c6:
35:58:71:c9:fb:28:82:f4:ac:d4:47:2d:f7:87:73:86:02:c5:
37:d7:d3:d4:ca:17:40:06:8b:4e:f5:6a:1f:4e:06:56:21:9d:
c7:5d:1e:a7:86:15:85:03:49:f1:e6:6b:a9:78:8f:1e:04:b0:
2f:76:0a:24:bf:c0:56:46:6f:6d:49:62:75:11:c0:2c:50:01:
e6:5f:0d:76:ab:64:da:da:16:79:85:ac:80:cb:dd:07:12:e4:
2f:22:c2:69:48:a1:ab:f9:a8:52:1b:08:0c:a5:bf:dc:67:16:
c9:7e:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:51 2026 by rpki-client