Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.cer (raw, json)
Hash identifier: kqk0R8s/0vRYp5fmcUkfIhuhO3IyqLMzHVZF5w6jbE0=
Subject key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019840FEED6DA0A4C167EBDFEA2D69358477
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 25 Jul 2025 09:51:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 139.29.0.0/16
IP: 2a01:4800::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:fe:ed:6d:a0:a4:c1:67:eb:df:ea:2d:69:35:84:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 25 09:51:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=893afecd711705c476b785d0c86ef54c2124354c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:14:cc:2f:a5:75:35:1e:ca:8d:cb:fa:43:
e9:a2:e3:cb:cf:ee:88:e4:31:c2:0e:99:e7:8a:5a:
46:e3:85:f3:1a:14:06:9f:85:db:8c:76:32:52:69:
de:cb:2f:dc:12:9d:4e:5b:c5:5d:0c:1f:cb:3a:d3:
9c:33:d9:9a:21:b8:43:e6:a4:44:d2:81:dc:31:0d:
3f:e6:94:82:a0:93:50:c8:6f:07:0f:01:1a:4b:03:
34:68:b6:74:ef:d3:55:49:39:29:34:67:95:97:54:
0b:a1:ad:03:10:25:4e:0b:4e:e8:f6:2a:f4:82:4d:
81:f0:f1:d8:05:b8:e4:37:78:bc:ac:ff:62:3f:5f:
35:33:24:29:47:21:5c:5b:52:4e:35:5a:5c:62:d3:
f9:a9:e9:7a:5a:37:a2:64:9c:99:1d:36:f6:d3:94:
06:6e:fa:d0:89:94:24:a5:95:8a:16:a7:60:ff:52:
8b:fd:f4:0c:ad:d0:0d:f6:08:b8:5f:53:de:2e:53:
42:d3:24:75:53:51:e9:d3:d1:a6:53:04:e5:15:2c:
e3:64:8a:ec:11:5f:e2:a2:a9:96:64:d6:83:bf:0d:
e2:1b:b9:04:91:fb:c0:c7:05:3e:bf:6a:3b:87:ca:
00:00:2b:5e:cd:12:59:d4:72:6b:a3:f4:eb:97:05:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.29.0.0/16
IPv6:
2a01:4800::/32
Signature Algorithm: sha256WithRSAEncryption
b1:35:19:73:91:7c:6a:af:d3:d9:cd:3e:24:f2:c0:81:b0:de:
f3:42:21:8f:cd:11:70:1e:5e:69:61:08:fa:1e:e1:da:83:41:
68:9e:fc:d6:20:f7:df:55:82:18:c6:11:b2:09:9b:ef:ce:af:
6d:09:73:f6:ac:f3:f6:95:c0:b8:98:1e:76:70:13:d6:f6:51:
03:0b:b1:66:8b:2c:d7:e0:85:de:50:7c:ae:a6:16:03:44:61:
c3:ca:6b:41:0f:a6:86:99:8e:02:76:3d:bd:77:76:28:97:cc:
e3:2b:5e:ef:8c:08:72:ae:be:e6:45:b9:03:24:07:d9:22:be:
81:83:23:a4:ae:6a:c3:55:89:8e:3b:58:16:44:b5:ec:f2:71:
11:83:42:e2:29:25:98:7a:99:dd:86:02:64:78:e4:c5:a7:23:
c3:a1:56:46:77:58:c2:bb:98:8d:1d:9d:66:c3:23:99:41:c1:
5a:e5:2e:44:45:65:67:f3:4a:34:d6:a9:e5:b7:80:10:7c:28:
9d:3a:72:b4:18:26:90:bd:33:2f:f9:64:8c:58:38:3f:72:d7:
f5:77:8f:62:46:89:30:1d:36:b7:e7:3b:9d:5f:b7:75:1a:7d:
63:72:23:98:f3:5e:46:d2:d9:66:7a:ec:cb:c4:5c:71:b2:e5:
47:cb:d1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:48:43 2025 by rpki-client