Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
File: e5RH_ppKzH1v9y1seY1D1mzVDD8.cer (raw, json)
Hash identifier: iAgsg0YAW5gCxQl0O8VNlYcYhF2LDCNUcxK2llwwJkE=
Subject key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198093364777E9FA76D06F885AB05471525
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 14 Jul 2025 13:50:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a09:3700::/29
IP: 2a09:6900::/29
IP: 2a09:8b80::/29
IP: 2a09:da40::/29
IP: 2a0a:bbc0::/29
IP: 2a0c:ac0::/29
IP: 2a0d:adc0::/29
IP: 2a0d:b9c0::/29
IP: 2a0d:f640::/29
IP: 2a0e:6740::/29
IP: 2a0e:8840::/29
IP: 2a0e:9180::/29
IP: 2a0e:c440::/29
IP: 2a0e:dfc0::/29
IP: 2a0f:c00::/29
IP: 2a0f:4300::/29
IP: 2a0f:72c0::/29
IP: 2a0f:da80::/29
IP: 2a11:1840::/29
IP: 2a11:21c0::/29
IP: 2a11:2d80::/29
IP: 2a11:3080::/29
IP: 2a11:31c0::/29
IP: 2a11:35c0::/29
IP: 2a11:3d00::/29
IP: 2a11:3f00::/29
IP: 2a11:41c0::/29
IP: 2a11:5a40::/29
IP: 2a11:66c0::/29
IP: 2a11:7080::/29
IP: 2a11:d380::/29
IP: 2a11:d700::/29
IP: 2a12:1240::/29
IP: 2a12:1540::/29
IP: 2a12:1a40::/29
IP: 2a12:24c0::/29
IP: 2a12:2e40::/29
IP: 2a12:3140::/29
IP: 2a12:35c0::/29
IP: 2a12:3cc0::/29
IP: 2a12:41c0::/29
IP: 2a12:7300::/29
IP: 2a12:cc00::/29
IP: 2a14:9700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:33:64:77:7e:9f:a7:6d:06:f8:85:ab:05:47:15:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 14 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:50:cd:57:02:4f:a7:02:89:54:00:f2:9a:65:
09:d0:c4:56:ff:60:1b:32:4b:65:cc:de:3e:f4:0d:
b7:b9:cd:a6:8d:74:a2:ba:a0:23:c3:07:ba:50:38:
21:b1:02:8a:a2:b7:d0:3b:75:ef:76:cc:f6:a9:74:
9a:cc:ea:d5:00:b5:7a:ff:ee:1c:44:54:06:02:76:
8a:0d:bb:45:b9:29:96:38:2f:42:1f:f9:0a:e6:7a:
f3:af:2a:b7:8e:94:74:fc:73:09:cf:0b:22:26:f1:
8a:bc:db:60:d7:f9:25:9d:5f:95:bf:c5:c4:f8:1d:
c9:5e:c0:f8:f2:39:c4:51:e1:21:2a:00:4d:c6:63:
17:15:30:df:3d:9e:5c:e3:8b:95:12:b4:d4:6f:9a:
24:a5:bf:2d:1d:0b:99:8e:da:70:cc:fe:e2:7c:a1:
e2:51:5e:c3:63:c2:12:ab:f9:5c:8a:a1:7a:8a:66:
c3:58:6f:ce:1f:27:31:b5:51:76:3b:cf:d0:f0:16:
ee:80:78:ec:70:62:4d:d8:30:48:f6:2e:30:45:81:
fd:5d:1d:2d:91:d0:bb:21:aa:49:cb:e2:84:bf:4c:
b7:7e:c1:12:bc:e7:a0:6a:bb:cf:80:a4:f7:68:b4:
3f:f7:24:6a:c7:89:cb:4c:38:7a:45:76:84:ab:9b:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3700::/29
2a09:6900::/29
2a09:8b80::/29
2a09:da40::/29
2a0a:bbc0::/29
2a0c:ac0::/29
2a0d:adc0::/29
2a0d:b9c0::/29
2a0d:f640::/29
2a0e:6740::/29
2a0e:8840::/29
2a0e:9180::/29
2a0e:c440::/29
2a0e:dfc0::/29
2a0f:c00::/29
2a0f:4300::/29
2a0f:72c0::/29
2a0f:da80::/29
2a11:1840::/29
2a11:21c0::/29
2a11:2d80::/29
2a11:3080::/29
2a11:31c0::/29
2a11:35c0::/29
2a11:3d00::/29
2a11:3f00::/29
2a11:41c0::/29
2a11:5a40::/29
2a11:66c0::/29
2a11:7080::/29
2a11:d380::/29
2a11:d700::/29
2a12:1240::/29
2a12:1540::/29
2a12:1a40::/29
2a12:24c0::/29
2a12:2e40::/29
2a12:3140::/29
2a12:35c0::/29
2a12:3cc0::/29
2a12:41c0::/29
2a12:7300::/29
2a12:cc00::/29
2a14:9700::/29
Signature Algorithm: sha256WithRSAEncryption
11:28:a9:14:7c:9b:27:ff:8a:c1:c9:db:76:f0:88:8c:61:26:
55:d9:55:e7:95:e8:d3:c1:2b:4e:d9:42:62:b4:17:ce:a0:0c:
6e:6c:aa:8b:0b:e7:9c:18:59:32:12:f7:64:28:30:f8:50:6b:
65:2a:36:ef:02:dc:f1:e8:24:23:75:70:bc:83:6f:4f:3b:9e:
87:46:a6:86:d6:00:cb:dc:ce:ab:3d:16:19:14:67:d8:6d:d4:
66:26:4c:62:bd:0f:64:d0:fc:53:6c:6c:29:44:b6:a0:f1:6d:
8d:7f:32:48:a4:22:d8:9e:f2:36:a7:9a:00:0d:31:5c:7a:73:
f8:9a:0e:94:09:7d:0f:e0:3a:e0:2d:5c:f5:1f:7c:f4:93:f5:
12:ad:b5:36:4d:25:66:7e:ad:06:19:fb:3f:12:ee:b5:19:26:
ad:c6:29:8d:dc:60:c3:28:e7:d9:5e:ab:bb:c3:f0:8c:3b:58:
3f:9d:d8:a1:52:0d:7f:81:c6:8d:10:4e:24:ec:80:32:64:65:
f5:e3:fa:ff:f4:19:fb:de:5d:07:51:d2:53:a6:e6:ca:74:4f:
5f:d6:e7:37:2c:1d:a3:d4:0f:47:1c:3f:29:5a:ec:d9:8e:12:
79:ae:75:71:75:0a:c6:79:65:ac:59:6b:a7:ad:cb:eb:bf:47:
c3:e2:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 19:12:23 2025 by rpki-client