Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R0NPTmaYKfhsbea6PrDo9m2piLY.cer
File: R0NPTmaYKfhsbea6PrDo9m2piLY.cer (raw, json)
Hash identifier: KKk/KmohKnF6q9NxCro0L+hNHgWmmMs//bTv0IMdv3Y=
Subject key identifier: 47:43:4F:4E:66:98:29:F8:6C:6D:E6:BA:3E:B0:E8:F6:6D:A9:88:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197E8D5C3634DD0A538948506AC3B0D703C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/R0NPTmaYKfhsbea6PrDo9m2piLY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Jul 2025 07:00:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:cb8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e8:d5:c3:63:4d:d0:a5:38:94:85:06:ac:3b:0d:70:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 8 07:00:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47434f4e669829f86c6de6ba3eb0e8f66da988b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:43:e3:6f:a4:c4:59:fb:52:94:ad:8f:92:
99:e8:36:2e:38:4c:d1:08:d7:44:83:33:e5:e4:48:
1c:78:f8:44:24:5b:f7:85:59:dd:1e:66:fa:3d:e2:
50:1f:f2:e5:24:d7:47:b4:01:92:cd:7b:91:12:40:
02:60:43:dd:0f:3d:7b:48:33:81:fb:24:90:fc:03:
3c:9e:86:53:c5:a8:f7:8e:3c:c5:80:b7:c9:20:b6:
b0:ed:de:46:34:ab:26:56:52:50:4f:79:ea:8c:b9:
5e:bb:1a:4c:6a:c8:0e:5d:16:a6:e9:71:17:39:a8:
61:95:b8:ad:a3:26:d4:21:78:a4:9c:6f:18:62:49:
28:4e:43:c2:47:12:4a:0a:6f:ce:6a:3c:e3:46:64:
d3:f6:a7:ba:2f:2e:38:ea:e0:a9:e6:88:a1:c8:21:
ec:e2:3f:32:c1:2f:29:f9:67:b3:f4:b6:28:f6:ef:
6f:74:c9:f8:b3:a1:ca:75:e9:79:dd:7a:7c:7f:50:
ec:24:bb:88:1e:b9:9f:0c:47:51:7b:dd:e1:90:53:
97:62:d2:fb:0b:62:8c:90:38:8c:f0:f7:da:1b:65:
8d:45:87:b5:26:94:b3:58:7c:a8:49:ce:61:d4:69:
da:0e:ec:8d:8e:66:36:27:eb:62:2c:7f:db:17:92:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:43:4F:4E:66:98:29:F8:6C:6D:E6:BA:3E:B0:E8:F6:6D:A9:88:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/R0NPTmaYKfhsbea6PrDo9m2piLY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:cb8::/48
Signature Algorithm: sha256WithRSAEncryption
5d:80:e9:90:99:c6:a9:d4:91:3c:bb:8b:0b:3c:68:3a:05:ad:
fb:6a:4b:eb:6e:b2:04:b2:9f:51:42:86:49:65:99:a0:1a:0c:
63:95:e5:fa:76:be:dc:b2:60:99:07:ad:ff:26:15:e7:f5:b5:
dc:0c:f6:75:a1:98:0e:c8:8b:bc:b6:1f:45:c6:b3:b0:e6:9b:
de:dc:cb:6b:02:f9:d9:41:ee:16:7d:d4:b4:a4:41:74:e8:91:
96:70:7e:b2:f2:4a:56:4d:ac:1d:c2:38:2e:fe:8f:51:9a:41:
67:9e:23:66:e8:c1:61:4d:f7:3e:c2:14:fb:4c:b3:64:3c:42:
3c:f0:60:b2:de:ea:82:e0:26:7d:c2:79:e6:91:83:e1:f3:85:
fc:d5:d3:a7:94:2f:60:4a:8f:50:78:31:b2:03:de:01:7d:e2:
f0:0b:b2:69:25:c0:c2:c0:33:53:40:55:ea:bd:ec:e8:99:7e:
c0:ca:bc:d6:1b:e1:5d:25:fe:22:2d:98:be:7f:28:e7:37:20:
e9:57:67:97:4b:95:9c:e4:0a:13:18:5e:76:d0:16:22:ed:fd:
90:b3:e9:e2:2c:69:30:40:ca:0c:11:6e:a8:dd:39:68:0b:75:
4f:d9:73:bf:20:39:05:57:69:b7:9a:a9:59:ad:f6:e0:b1:4e:
41:40:ff:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:35 2025 by rpki-client