Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
File: l1otW428KUB1EBfkqLR2cy5_ToQ.cer (raw, json)
Hash identifier: Ey6g16n9FoxOelnrn+Qhc7zjjba9IAYzY1VYHQ/luY0=
Subject key identifier: 97:5A:2D:5B:8D:BC:29:40:75:10:17:E4:A8:B4:76:73:2E:7F:4E:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FB8F8BA848088EA46302AB48B09B12157
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 31 Jul 2026 16:18:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.43.35.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:f8:ba:84:80:88:ea:46:30:2a:b4:8b:09:b1:21:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 31 16:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=975a2d5b8dbc2940751017e4a8b476732e7f4e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:f2:89:75:2a:e3:bb:17:8a:10:89:fd:1a:
96:c7:4d:fd:64:7e:04:6c:34:5e:53:c8:93:ee:23:
cd:c2:01:a9:05:41:ce:59:3e:bf:8e:df:73:08:c2:
02:d3:43:b5:da:e0:67:74:d1:ca:69:5e:17:31:f9:
c6:9d:62:15:d1:2c:7b:d4:ee:92:61:ab:ad:8d:ae:
7f:86:28:de:8c:a6:36:23:b8:30:42:7b:e3:65:3f:
5e:f4:09:56:eb:12:26:02:0f:39:67:bc:c4:7f:ee:
71:eb:ab:c8:31:06:8a:e2:92:ed:50:36:5e:2f:28:
4b:2d:b4:b7:80:b7:33:25:38:f2:46:01:cd:63:92:
c7:06:23:02:25:82:8d:10:c9:a9:1d:29:5a:e7:a6:
75:b2:0d:6d:cc:2d:a7:b6:ab:7b:5f:a2:03:29:89:
0a:e7:00:fe:99:1e:fd:6f:13:02:98:d0:45:a7:e5:
b0:50:19:66:f6:eb:f4:84:75:33:80:f4:70:8d:8a:
9f:71:8f:0b:a2:9e:c6:08:fb:47:f0:9f:6a:62:53:
e9:ab:e6:0f:da:37:4d:62:fd:7f:4d:dd:d9:49:a6:
c3:8c:f5:e6:27:24:64:00:c2:d0:fb:a1:58:fa:eb:
81:17:b2:7f:1a:57:f5:45:93:56:d1:19:2d:75:18:
ab:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5A:2D:5B:8D:BC:29:40:75:10:17:E4:A8:B4:76:73:2E:7F:4E:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.35.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8b:8d:48:2d:e6:4e:88:3c:c3:7b:4c:10:85:69:7d:95:23:
e6:b1:f7:49:b1:26:5e:3e:22:c6:a3:a7:9a:db:5b:b2:4d:32:
1c:80:57:d1:a0:1e:4d:f7:27:f5:87:5b:16:04:c5:76:58:60:
56:c9:58:67:b7:f6:db:1f:1e:3d:5b:33:62:fd:29:a8:59:df:
9c:d4:5d:35:24:f3:ea:2b:cf:19:45:25:ac:17:cb:8f:c8:02:
63:f6:24:99:79:c6:cb:83:4c:77:92:0a:7e:52:7e:be:26:bb:
43:6c:ec:6c:5e:ba:58:20:ba:4d:05:64:b5:6e:fb:6a:21:eb:
cc:20:fc:d0:a1:6f:02:3e:b1:4d:31:c7:be:35:5b:b7:4e:11:
24:17:90:19:a7:46:2f:f6:60:34:88:c0:e4:15:ed:0e:e5:6e:
40:ef:d9:cb:1f:b9:b5:e9:3b:d2:f7:ea:d4:44:ab:0a:6d:46:
d9:cf:93:a6:ef:01:db:2d:9c:1e:d1:80:63:a2:c5:5d:87:67:
1a:52:80:63:ba:6e:68:ee:8e:1d:ee:89:1c:ed:1f:61:56:2f:
74:97:01:5c:c9:c2:01:f0:cb:59:a8:10:46:53:da:9d:5c:72:
f1:af:61:d5:3d:16:41:67:a7:67:ff:80:c2:ed:ed:f4:44:2d:
fd:46:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:05:24 2026 by rpki-client