Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
File: 6fRRBEShet1zJxRhUpQ0lauruWg.cer (raw, json)
Hash identifier: mlo794MzATmQVif3ltEdbKo6lSzfXioGOucgx4r8sFk=
Subject key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019831F5712E7E8BC74F56EF498F3CFC6DB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Jul 2025 11:47:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.96.76.0/22
IP: 185.168.143.0/24
IP: 2a0d:ec00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:f5:71:2e:7e:8b:c7:4f:56:ef:49:8f:3c:fc:6d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 22 11:47:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9f4510444a17add7327146152943495ababb968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:8e:80:19:61:b6:61:6b:8c:1a:4a:a8:da:
4a:fa:20:23:42:32:d0:41:54:ae:62:89:52:54:ca:
7e:66:ba:41:30:0f:b3:d9:2e:59:34:de:a9:d0:fb:
84:f4:eb:09:2a:49:26:c2:36:96:a0:bc:89:67:2d:
35:e0:21:d2:fb:46:7f:24:2a:6d:6a:19:1a:a6:5f:
e3:f6:eb:3f:50:2c:8b:66:98:21:55:63:5f:9d:33:
7e:39:44:02:f3:e0:6b:dd:c3:4f:0c:58:71:00:9d:
70:2c:59:ea:f1:76:83:3e:5d:e9:32:37:77:fb:14:
a8:91:d3:12:2f:8c:24:f5:2e:7c:f9:15:32:93:ec:
d3:c8:25:65:ce:a3:8b:d4:5a:ef:c4:63:0f:06:27:
ef:91:76:b5:3a:6d:6b:4d:cd:ff:af:92:5d:0a:26:
18:0b:71:ab:f5:f6:9f:e5:03:e5:3e:0f:6c:ab:23:
fc:97:49:4f:23:86:df:f8:34:53:81:64:13:28:17:
7b:e4:15:aa:bc:82:65:f5:75:71:af:99:4e:fc:e7:
bd:db:52:bf:3a:03:60:b3:69:2d:4e:23:c0:59:64:
c9:80:5a:70:f6:85:20:f4:84:12:91:38:a5:43:95:
f5:b2:ee:bb:59:fa:85:99:56:9f:5e:6c:fb:aa:e9:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.76.0/22
185.168.143.0/24
IPv6:
2a0d:ec00::/29
Signature Algorithm: sha256WithRSAEncryption
86:b7:b4:aa:ed:1b:65:f4:86:0f:76:bd:c0:2f:9a:e2:ff:6b:
4d:f5:48:6e:98:64:0a:cb:7b:26:cd:60:1a:5a:ef:e1:55:00:
b9:49:c9:31:e8:94:f9:dc:8d:47:63:ad:87:6d:fa:12:72:3d:
a6:e7:67:22:de:92:c0:f4:4a:7f:f3:5c:d9:43:bd:2c:c5:d4:
52:8e:2a:fb:d4:cb:9b:f8:81:35:4a:d0:ad:da:cc:40:f2:a7:
ac:43:88:de:d4:91:7b:20:99:2a:03:5f:15:48:e2:d2:72:89:
7b:c7:76:c9:ab:2d:b3:18:16:64:6b:07:3e:e1:ed:5d:ab:2d:
83:4c:74:e1:5c:45:ba:ab:58:1f:ea:06:8a:4f:7c:77:9f:d3:
ce:21:26:cb:a7:ba:cf:18:bf:99:ca:3a:5d:cb:00:55:20:7b:
77:94:ca:eb:93:98:86:68:59:22:c2:62:1a:99:98:0f:61:8e:
5b:b9:56:62:af:17:35:ea:ea:83:d3:68:11:6f:b6:0d:24:4e:
82:69:f3:f9:35:26:57:fe:c1:07:52:80:72:71:69:ea:9b:91:
4c:a0:97:41:8c:9d:09:9e:db:5f:57:12:3a:10:3d:ea:ae:cd:
62:47:9d:77:6b:37:cd:b7:ac:df:70:ff:d9:bb:42:17:f4:49:
8b:5a:ce:a6
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZgx9XEufovHT1bvSY88/G25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzIyMTE0NzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWY0NTEwNDQ0YTE3YWRkNzMyNzE0NjE1Mjk0MzQ5NWFiYWJiOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPGOgBlhtmFrjBpKqNpK+iAjQjLQ
QVSuYolSVMp+ZrpBMA+z2S5ZNN6p0PuE9OsJKkkmwjaWoLyJZy014CHS+0Z/JCpt
ahkapl/j9us/UCyLZpghVWNfnTN+OUQC8+Br3cNPDFhxAJ1wLFnq8XaDPl3pMjd3
+xSokdMSL4wk9S58+RUyk+zTyCVlzqOL1FrvxGMPBifvkXa1Om1rTc3/r5JdCiYY
C3Gr9faf5QPlPg9sqyP8l0lPI4bf+DRTgWQTKBd75BWqvIJl9XVxr5lO/Oe921K/
OgNgs2ktTiPAWWTJgFpw9oUg9IQSkTilQ5X1su67WfqFmVafXmz7qukKRwIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFOn0UQREoXrdcycUYVKUNJWrq7loMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzRhOWU1
Yi1hYTQwLTRkYzItOGRlZC1hMjc2ZWQwYmExYmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvNGE5ZTVi
LWFhNDAtNGRjMi04ZGVkLWEyNzZlZDBiYTFiYy8xLzZmUlJCRVNoZXQxekp4UmhV
cFEwbGF1cnVXZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuWBMAwQAuaiPMA0EAgACMAcDBQMqDewAMA0G
CSqGSIb3DQEBCwUAA4IBAQCGt7Sq7Rtl9IYPdr3AL5ri/2tN9UhumGQKy3smzWAa
Wu/hVQC5Sckx6JT53I1HY62HbfoScj2m52ci3pLA9Ep/81zZQ70sxdRSjir71Mub
+IE1StCt2sxA8qesQ4je1JF7IJkqA18VSOLScol7x3bJqy2zGBZkawc+4e1dqy2D
THThXEW6q1gf6gaKT3x3n9POISbLp7rPGL+ZyjpdywBVIHt3lMrrk5iGaFkiwmIa
mZgPYY5buVZirxc16uqD02gRb7YNJE6CafP5NSZX/sEHUoBycWnqm5FMoJdBjJ0J
nttfVxI6ED3qrs1iR513azfNt6zfcP/Zu0IX9EmLWs6m
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:44:44 2025 by rpki-client