Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.cer (raw, json)
Hash identifier: vpx+CGNTJRQAS15D9i3WvVKpWAXDumgozfx2D7pzerM=
Subject key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019940DDC4012B65C9FC3720CCE556585260
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 13 Sep 2025 02:18:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.246.40.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:40:dd:c4:01:2b:65:c9:fc:37:20:cc:e5:56:58:52:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 13 02:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f521e174f84f7165961d41b68ea7262e28337d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:1c:be:f0:d6:bb:90:39:59:a5:3c:f1:65:
31:58:9f:76:81:ca:16:15:78:d2:bc:6c:ee:36:da:
5c:3f:0d:36:3d:c1:bf:1a:1c:bf:6b:0a:33:e8:d5:
2e:33:d2:04:4d:c3:07:4b:04:bb:6d:5f:ed:72:60:
5f:68:44:b6:01:6a:83:ac:46:a0:0e:4f:b1:a3:ae:
ed:ed:c6:cc:9b:19:38:18:34:22:c6:fc:4c:eb:a9:
b2:1f:3e:e8:ca:bb:35:15:e8:8f:66:55:28:8c:57:
e6:0d:37:8d:fc:4c:13:5e:d9:0e:99:79:2d:c4:8e:
52:35:6a:67:29:6e:f9:31:c7:39:5e:b0:a3:5e:21:
43:ce:e0:66:5b:3a:02:d4:17:cc:8c:e8:a1:9d:eb:
dc:e1:56:85:75:4b:38:96:df:0c:55:91:a7:6b:dd:
18:fd:24:f6:c6:3d:35:a9:a5:ac:69:d1:7d:e5:f7:
61:9f:3e:ff:87:5a:dc:65:23:2d:e7:5e:74:a2:3b:
1d:d5:d9:c4:0e:ab:2a:30:10:44:e9:e2:b0:75:7c:
06:91:9f:74:52:dd:9c:bf:35:12:be:81:86:08:44:
10:80:7d:93:c4:d0:5a:b3:b4:dd:45:c7:cd:ef:b3:
f6:46:b4:9e:b5:33:18:da:09:80:c6:6a:28:99:a0:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.40.0/22
Signature Algorithm: sha256WithRSAEncryption
46:c4:f5:64:48:79:fb:1a:ce:94:51:a1:6d:5f:71:fb:88:ad:
d5:9f:8d:d4:4d:1a:ce:07:d1:b4:fd:44:2f:47:9c:bf:c4:5c:
69:03:37:78:70:97:dc:2e:87:f1:05:88:b1:7b:3d:07:f7:1e:
7d:21:4c:a6:00:84:7f:50:99:92:a6:23:1a:6b:29:1f:82:c9:
a7:7f:48:64:8c:5d:7a:fa:25:7f:6c:4e:22:5a:3c:8e:db:13:
e2:76:43:b0:c4:3e:d2:d4:30:6e:f6:22:fb:9a:28:0d:b8:15:
37:c8:81:30:22:0f:5e:2c:b7:2a:41:80:a6:ee:f6:ff:fb:08:
a5:53:bc:a5:12:1f:f0:64:c3:78:b0:50:72:11:e3:02:1f:55:
67:d4:b9:06:6e:a2:3f:de:04:5a:cc:d7:72:19:57:50:d4:36:
61:bc:fb:fa:92:9b:70:6b:6d:3e:45:51:52:c6:5a:72:d9:3a:
6a:18:99:6a:cd:d2:20:c2:a2:3c:74:20:d1:1a:e1:0c:8b:45:
f9:54:64:ee:00:b0:0d:13:ac:cd:42:a2:8e:e5:a0:3d:f0:77:
12:38:93:d8:b7:6c:7a:b0:e4:ef:cf:4e:7b:c0:18:e3:83:c0:
42:9c:1c:d1:02:de:04:d6:08:ef:90:e6:99:09:19:61:c7:0f:
69:a2:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:13:14 2025 by rpki-client