Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer (raw, json)
Hash identifier: B3k08akUGBOUOCJ8iYTn4TfFg4jNTl7fKuuylomquDY=
Subject key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6B1007D7C1A5DDD4868D98FE7FE9638950B130D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 18 Oct 2026 19:20:44 +0000
Certificate not after: Sun 17 Oct 2027 19:25:44 +0000
Subordinate resources: IP: 2a0f:85c1:325::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:10:07:d7:c1:a5:dd:d4:86:8d:98:fe:7f:e9:63:89:50:b1:30:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 18 19:20:44 2026 GMT
Not After : Oct 17 19:25:44 2027 GMT
Subject: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3f:38:0a:7f:00:00:c6:66:5a:55:96:89:01:
4c:f7:4a:5a:2b:b0:3e:e6:05:ee:7f:51:a0:88:58:
c5:40:66:0e:bb:84:d0:25:8d:20:46:43:27:76:97:
3f:7f:cb:75:66:b7:98:1d:d8:2a:11:17:5d:44:91:
df:88:ae:34:ba:6c:28:ec:74:a4:51:81:12:c9:0b:
9b:30:91:ad:51:8b:45:1b:cc:21:4b:84:d3:ee:54:
b8:ee:e0:78:35:80:9f:aa:aa:4c:7c:c9:da:26:c2:
75:d0:ef:78:36:4b:fe:c6:7d:74:07:41:de:2f:c5:
66:b8:f7:03:32:e5:e9:cb:bf:eb:ef:d7:21:5b:6b:
3f:f7:6a:fb:23:05:cf:19:b0:20:45:2c:3b:fa:9c:
35:66:5f:97:bc:6b:f6:d5:a3:de:1b:0c:ec:bc:39:
d6:27:52:6f:65:1d:db:88:eb:72:0f:0c:cf:a4:c6:
e9:b5:cf:3d:f5:3d:18:9b:3c:b6:03:26:bf:87:65:
96:66:d7:ca:4b:3f:35:52:e0:b8:b7:ab:df:bf:5a:
a4:51:54:7d:72:62:1a:7f:72:3f:84:d0:16:e1:0b:
4c:b5:a1:ba:62:62:47:2a:9d:cb:82:29:68:42:56:
ab:9e:cb:74:d2:9a:e4:8c:5a:67:69:93:f7:2e:59:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:325::/48
Signature Algorithm: sha256WithRSAEncryption
af:68:ac:0b:71:72:75:5e:82:75:89:79:4f:18:80:1a:b4:e8:
aa:13:c8:28:1f:e0:83:31:24:a4:0b:c5:ec:a1:92:13:5a:82:
ef:27:fe:f0:11:9b:9a:13:09:70:8f:bc:f5:14:7f:fe:97:7d:
5b:a6:4e:0a:44:54:28:92:77:a2:16:e9:c0:d6:d5:1d:3a:32:
ae:dc:93:08:07:83:b1:52:05:e3:f0:b4:67:d5:b6:d3:fd:4a:
e9:ca:c4:76:cb:32:52:41:9b:6c:10:5e:4b:fb:72:ab:cf:d6:
d6:e4:c8:84:47:28:15:6f:42:8a:23:60:6d:f4:0d:16:df:33:
1e:86:4f:f7:84:87:c5:ef:17:b3:e1:45:ac:f8:d2:8c:59:30:
7f:ba:e1:cc:0e:db:75:90:9a:f0:c9:7e:c3:7c:be:7b:8c:59:
7b:f8:89:4d:0c:2b:03:8d:a2:23:db:f8:c2:ec:17:14:b4:ef:
b4:70:d4:52:8f:bf:97:ed:45:09:6d:69:27:d9:10:27:68:cf:
7b:8f:8d:ba:cc:90:4d:5b:6c:17:a0:79:25:7b:f6:56:b8:c7:
fa:20:87:d8:e5:38:8b:a7:5d:a8:ab:a8:e1:85:1e:e2:80:3a:
93:55:a5:17:c2:84:92:6c:15:c0:d0:e3:31:03:bb:a3:34:51:
15:37:a8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:35:21 2026 by rpki-client