Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer (raw, json)
Hash identifier: YO2s2XrxEdPPOoYMIqP4HPzkQihyL3xMUSn2UqEt3dE=
Subject key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 12B3DAE4A0F64EE73599BD6E6B4C81E598BCA83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 04 Sep 2026 03:02:26 +0000
Certificate not after: Fri 03 Sep 2027 03:07:26 +0000
Subordinate resources: IP: 2a0f:85c1:325::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b3:da:e4:a0:f6:4e:e7:35:99:bd:6e:6b:4c:81:e5:98:bc:a8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 4 03:02:26 2026 GMT
Not After : Sep 3 03:07:26 2027 GMT
Subject: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3f:38:0a:7f:00:00:c6:66:5a:55:96:89:01:
4c:f7:4a:5a:2b:b0:3e:e6:05:ee:7f:51:a0:88:58:
c5:40:66:0e:bb:84:d0:25:8d:20:46:43:27:76:97:
3f:7f:cb:75:66:b7:98:1d:d8:2a:11:17:5d:44:91:
df:88:ae:34:ba:6c:28:ec:74:a4:51:81:12:c9:0b:
9b:30:91:ad:51:8b:45:1b:cc:21:4b:84:d3:ee:54:
b8:ee:e0:78:35:80:9f:aa:aa:4c:7c:c9:da:26:c2:
75:d0:ef:78:36:4b:fe:c6:7d:74:07:41:de:2f:c5:
66:b8:f7:03:32:e5:e9:cb:bf:eb:ef:d7:21:5b:6b:
3f:f7:6a:fb:23:05:cf:19:b0:20:45:2c:3b:fa:9c:
35:66:5f:97:bc:6b:f6:d5:a3:de:1b:0c:ec:bc:39:
d6:27:52:6f:65:1d:db:88:eb:72:0f:0c:cf:a4:c6:
e9:b5:cf:3d:f5:3d:18:9b:3c:b6:03:26:bf:87:65:
96:66:d7:ca:4b:3f:35:52:e0:b8:b7:ab:df:bf:5a:
a4:51:54:7d:72:62:1a:7f:72:3f:84:d0:16:e1:0b:
4c:b5:a1:ba:62:62:47:2a:9d:cb:82:29:68:42:56:
ab:9e:cb:74:d2:9a:e4:8c:5a:67:69:93:f7:2e:59:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:325::/48
Signature Algorithm: sha256WithRSAEncryption
bb:89:8b:14:84:87:9b:53:2b:3c:b9:36:34:d3:fb:dd:dd:db:
6e:ef:dc:a4:07:d4:89:31:b4:b8:88:29:e1:31:a4:54:c2:21:
91:1c:76:4f:0a:bb:d5:59:ef:ce:61:14:e1:83:cb:60:20:f4:
1f:b2:da:33:49:9b:3d:44:9e:95:44:03:a9:db:f7:ec:51:95:
ed:29:2c:fb:f0:2c:b6:fe:90:df:af:65:56:7c:96:97:c3:af:
be:21:de:01:39:a6:da:bc:ed:25:bf:b9:1b:6d:f8:08:23:3b:
cf:f6:21:1d:45:9b:f5:e4:55:b8:d2:c9:d3:e0:ca:b6:ab:a2:
cb:b8:54:d8:f2:9b:3c:60:c8:b8:08:fd:e4:24:07:20:17:b5:
f0:e5:7b:47:5d:51:1e:e3:6e:45:0a:a9:27:81:01:e9:26:10:
87:16:58:12:1b:cf:f5:10:13:33:61:ed:31:50:4e:2c:f9:e0:
b7:25:1b:fe:7f:4a:17:71:ad:19:2d:26:ca:dd:83:a1:d4:04:
67:6f:29:c7:50:d7:fe:fe:b4:ed:ed:45:0b:46:69:7d:13:af:
b1:55:68:a7:16:91:c9:5b:e5:b0:8b:31:f1:07:08:56:a2:94:
3d:16:1d:03:c7:85:fa:fe:79:63:c1:45:de:fe:10:92:11:de:
3e:3f:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:29:51 2026 by rpki-client