Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
File: FcGBcG9hxLc3zX63j3Iw40zfwUw.cer (raw, json)
Hash identifier: S9IdsH5lbWqxGsk8v0DDresXGXaQQECAnwYwk7ZMoU4=
Subject key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019818A10BF3635E28DF4C096BEC3C9057BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Jul 2025 13:44:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 145.36.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:a1:0b:f3:63:5e:28:df:4c:09:6b:ec:3c:90:57:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 13:44:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:00:b1:c4:f9:ed:3c:27:a8:c0:8d:79:f0:
b2:dd:ee:74:55:7e:42:bc:c5:9e:11:90:b9:76:8b:
90:fd:b2:9f:d6:9c:71:c1:bb:d2:b7:df:d2:5d:c0:
19:f7:d4:10:60:7b:5a:0f:98:bc:7b:ce:04:8b:69:
6e:a0:36:9d:57:a6:07:38:05:0e:59:eb:54:7b:8c:
dd:90:72:96:cc:d1:a3:3e:c5:16:be:b8:13:cf:72:
2f:ab:08:0d:18:a5:75:be:49:f9:22:68:b7:ee:c2:
a3:cc:83:ae:f7:a7:84:36:1f:49:d1:98:9f:1a:f7:
c6:60:37:a9:6f:34:78:e9:22:27:95:f1:47:33:94:
79:00:52:01:2c:cd:18:fa:b1:1e:d0:32:32:f1:71:
20:2d:88:c2:45:fe:1c:47:5b:04:fe:07:31:20:07:
4b:08:6c:3b:b8:b6:81:c1:e4:61:e5:c5:53:7d:bb:
83:4b:ee:24:09:04:42:a8:96:a2:92:96:bb:05:a5:
63:cd:a1:53:61:ba:f9:9d:b7:f0:34:78:d5:ae:5b:
a2:b9:30:da:bc:22:db:04:9f:63:ae:85:a1:26:3a:
81:3e:9f:7f:7c:bd:22:a0:f5:50:46:21:46:83:9d:
62:fb:32:e0:8e:b8:86:d3:ec:e2:34:2d:8b:54:ff:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.36.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:ea:e5:8a:3b:c4:94:86:1c:d9:ec:8c:8d:60:01:71:e9:25:
b1:dd:9f:b9:7a:5e:55:1d:e4:7a:b6:e2:5f:08:0f:72:15:69:
b9:56:1c:2f:6f:ec:75:60:e3:e1:64:da:a0:7a:dc:b8:5a:c4:
a0:2e:44:6c:3f:60:dc:b4:d8:24:ac:21:bc:85:1f:21:57:9d:
9f:af:21:f0:14:a6:7d:3f:31:37:7b:2c:36:b1:be:f2:89:03:
3b:94:29:ef:27:e8:40:ca:a5:d8:d6:59:31:17:67:65:9a:0c:
ed:ca:5f:ed:3b:aa:b6:84:b4:09:f2:99:59:3b:f9:ee:78:d0:
d1:5b:43:d9:50:e8:19:de:db:b5:0d:a7:fe:3e:ac:74:0c:8a:
85:ff:2b:66:14:5c:99:d5:4f:5b:77:60:51:68:1c:86:09:5c:
42:c8:5e:f9:43:eb:e1:a4:7e:20:28:ee:1e:0f:1c:7b:33:5b:
c7:c2:30:ec:76:f9:f6:23:07:4a:dc:01:92:fc:f7:f0:6c:0a:
ff:e7:f7:5d:c1:26:34:f7:4d:b3:77:23:21:13:55:27:f3:44:
af:7e:12:e2:97:4d:ca:50:92:7d:1f:1e:f7:c5:17:b8:34:5a:
89:fc:cb:f7:b4:d5:9d:c5:a0:88:a0:01:cf:ce:51:0c:d6:ca:
2e:bb:e3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:35:59 2025 by rpki-client