Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
File: EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer (raw, json)
Hash identifier: +HEUDDZ4BBbWGmeG2RCa0e2LpNOLhZWmDaTVWt8OziQ=
Subject key identifier: 10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199784FF47800B008D679D268445686BEB8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Sep 2025 20:42:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 62.164.198.0/24
IP: 87.199.127.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:78:4f:f4:78:00:b0:08:d6:79:d2:68:44:56:86:be:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 23 20:42:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:47:09:8a:d8:3d:a6:43:04:47:79:4f:47:dd:
1e:36:bb:90:88:d8:9b:59:f2:e9:39:f0:71:f2:ac:
be:cb:3e:a4:f2:79:ad:39:0f:27:f4:89:d9:c2:88:
05:d5:82:39:78:d0:c2:90:e5:67:4b:2e:f5:81:28:
4f:30:53:7d:3b:3d:89:e6:90:1b:40:58:4b:18:46:
f4:14:4b:7c:85:36:c2:b4:4a:14:36:de:df:b2:7b:
d3:47:b0:0d:1a:39:9d:ce:1e:41:f2:85:8e:c7:01:
44:c7:0a:e0:0f:92:7b:8d:f6:86:90:ec:5a:57:6a:
4c:88:48:d7:6e:f7:39:64:d2:a7:53:98:c7:3c:5e:
97:09:ed:8b:d7:d0:c9:c6:1a:97:c4:67:fc:1e:16:
2f:27:a1:03:51:7e:ab:6b:63:64:d6:10:55:13:c7:
22:77:2c:84:4a:2e:2a:15:a7:b6:71:8b:0c:e0:6b:
24:17:a7:1d:74:a4:3f:dc:79:0a:49:2e:2f:19:48:
94:f5:87:41:c2:30:41:93:89:8f:54:2b:f9:7e:d5:
80:47:d4:0e:03:15:c4:78:a0:50:38:1e:83:b5:11:
f4:cb:30:ea:b1:23:b2:0c:f4:73:f5:6d:91:9e:03:
ae:81:b8:8b:1b:9a:22:7b:fd:ac:d6:18:72:d6:2c:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.198.0/24
87.199.127.0/24
Signature Algorithm: sha256WithRSAEncryption
08:60:30:c3:eb:fc:23:96:7c:b0:95:83:aa:e3:ee:15:cf:2e:
3c:9d:d1:e2:fb:3d:7e:66:a3:c0:49:86:ea:df:61:fa:f7:b2:
49:df:ba:24:a0:13:17:66:d9:a5:64:ea:5b:df:31:78:c0:6c:
71:de:f0:2e:45:08:be:51:85:dc:f3:b3:e9:63:99:39:48:1a:
08:8a:6d:f8:c9:da:44:bc:90:81:d7:dc:00:a2:bd:a5:c4:2a:
c3:fb:1a:b1:d2:8e:74:d4:e4:06:86:60:be:16:df:28:e0:57:
a1:c6:69:8f:ca:b5:44:69:a6:f3:29:42:56:1d:07:df:60:a3:
61:e9:dc:db:d7:a9:14:b1:ac:4b:e7:6f:d7:75:1d:4a:4c:cd:
77:c0:13:19:38:81:72:f4:dd:f8:c6:de:58:9e:8a:16:b6:14:
15:7e:2b:1f:18:be:c4:25:54:81:96:ca:64:44:dc:67:80:78:
c5:f1:7d:08:b7:1a:94:98:8a:85:3c:bb:16:73:f4:4c:08:fe:
c3:a2:03:bc:0e:ba:66:4c:41:c4:52:01:b8:ce:8e:10:53:ea:
6b:c3:c0:a3:ff:53:44:8c:56:9b:82:a8:10:b3:8c:a7:4b:b6:
b2:60:12:50:df:c7:fa:2f:33:88:57:cf:58:47:81:3e:2a:75:
d7:7b:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:47 2025 by rpki-client