Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer
File: EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer (raw, json)
Hash identifier: 33Qhq8ZhMN/MDDpH+rpXS/hGl6WR+LbNr+cbDy5dFWM=
Subject key identifier: 10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019928EDEDB53D05A5CB269E4C4B1E1CC5A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 08 Sep 2025 10:45:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205649
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:ed:ed:b5:3d:05:a5:cb:26:9e:4c:4b:1e:1c:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 8 10:45:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1015129921e7e15faef736024a4337340c857050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:45:be:1d:60:cd:8e:0d:d4:bd:a9:de:2f:
b9:8b:66:1b:b4:fe:4d:b0:cb:a6:88:f9:78:64:e0:
58:01:f7:f4:cc:be:fd:55:77:c3:e0:c5:e0:69:8e:
53:24:b1:53:d6:ad:bd:5b:a1:e3:95:89:c3:3f:59:
8b:a2:13:f9:8b:d3:8f:4d:59:b0:cc:21:9f:fb:10:
d8:e0:b2:2c:7c:25:a8:10:ae:81:8b:8f:9e:2b:7b:
8d:ea:09:16:7a:9a:5b:0c:d0:50:c3:4c:ab:a0:0b:
8f:f4:d5:35:45:9c:0a:4d:09:82:08:ca:3b:12:38:
51:32:ab:7f:e1:cc:ac:5c:90:5a:0e:83:52:47:fb:
0c:1a:4a:f3:0e:49:06:53:29:8b:13:a9:27:c0:8d:
51:bf:d8:ac:3b:f0:83:d5:db:43:17:aa:a0:65:c2:
f4:23:bc:db:cb:6e:bf:78:49:f1:14:6b:20:c2:33:
3f:f0:53:48:b8:e8:a8:a5:66:e9:ea:5a:80:72:19:
4a:ae:66:f8:67:75:40:fc:da:8d:c0:fe:17:1b:df:
b8:98:80:cf:80:09:04:6d:1e:a8:d4:a3:ee:e6:f2:
e5:3f:9b:82:60:cf:ff:f6:55:99:7b:27:3d:c7:38:
02:6e:bc:62:bd:a6:71:66:01:6e:48:c3:59:24:56:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205649
Signature Algorithm: sha256WithRSAEncryption
10:e2:de:1e:0e:25:cd:31:d1:4a:e3:3d:fe:67:4d:77:45:4c:
b1:5d:cc:c9:ad:fa:f9:ee:79:94:c0:2f:19:b2:86:f5:3d:cf:
e5:76:d3:6c:b0:22:c8:62:f1:89:c8:5f:24:3a:ed:cd:15:ab:
9d:b1:32:00:57:c9:8a:ba:35:c7:9f:b9:8d:8f:1b:73:d0:b8:
ad:d5:fb:ea:01:6c:99:e8:43:38:6a:de:f4:63:a9:f6:a4:4d:
64:76:5b:4f:0d:cd:c0:ea:93:0d:09:ce:a2:b2:28:95:13:da:
02:05:3a:c2:a9:02:b4:c3:e5:70:f0:97:ee:c9:9d:47:cf:a1:
8a:93:39:c8:a2:72:47:36:71:8d:65:37:e6:69:f5:48:84:25:
54:a2:f6:18:c4:a1:36:75:96:ed:21:12:46:52:fc:38:03:89:
e4:a9:33:17:56:33:ed:11:96:02:81:41:31:4a:cf:65:9a:d2:
77:7f:4c:4c:dc:16:8c:50:cb:bc:33:39:53:50:ca:1d:09:8a:
1c:fe:7c:06:de:7e:64:71:66:3f:07:7f:99:78:13:66:4e:ff:
96:95:fb:f3:8f:f6:72:74:52:0a:60:d4:f5:83:9d:3f:8e:77:
d6:fb:cd:16:ff:2d:99:08:64:a6:0d:44:0c:95:db:6f:8c:0f:
b3:77:fb:d4
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZko7e21PQWlyyaeTEseHMWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwOTA4MTA0NTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDE1MTI5OTIxZTdlMTVmYWVmNzM2MDI0YTQzMzczNDBjODU3MDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqlFvh1gzY4N1L2p3i+5i2YbtP5N
sMumiPl4ZOBYAff0zL79VXfD4MXgaY5TJLFT1q29W6HjlYnDP1mLohP5i9OPTVmw
zCGf+xDY4LIsfCWoEK6Bi4+eK3uN6gkWeppbDNBQw0yroAuP9NU1RZwKTQmCCMo7
EjhRMqt/4cysXJBaDoNSR/sMGkrzDkkGUymLE6knwI1Rv9isO/CD1dtDF6qgZcL0
I7zby26/eEnxFGsgwjM/8FNIuOiopWbp6lqAchlKrmb4Z3VA/NqNwP4XG9+4mIDP
gAkEbR6o1KPu5vLlP5uCYM//9lWZeyc9xzgCbrxivaZxZgFuSMNZJFa+UwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFBAVEpkh5+Ffrvc2AkpDNzQMhXBQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2ZjMWZh
NS0xMjUyLTQ5MzItOThkYy1lZDk1ZjU2YTFhNTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvZmMxZmE1
LTEyNTItNDkzMi05OGRjLWVkOTVmNTZhMWE1NS8xL0VCVVNtU0huNFYtdTl6WUNT
a00zTkF5RmNGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMjUTANBgkqhkiG9w0BAQsFAAOCAQEAEOLeHg4lzTHR
SuM9/mdNd0VMsV3Mya36+e55lMAvGbKG9T3P5XbTbLAiyGLxichfJDrtzRWrnbEy
AFfJiro1x5+5jY8bc9C4rdX76gFsmehDOGre9GOp9qRNZHZbTw3NwOqTDQnOorIo
lRPaAgU6wqkCtMPlcPCX7smdR8+hipM5yKJyRzZxjWU35mn1SIQlVKL2GMShNnWW
7SESRlL8OAOJ5KkzF1Yz7RGWAoFBMUrPZZrSd39MTNwWjFDLvDM5U1DKHQmKHP58
Bt5+ZHFmPwd/mXgTZk7/lpX784/2cnRSCmDU9YOdP4531vvNFv8tmQhkpg1EDJXb
b4wPs3f71A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:31 2025 by rpki-client