Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.cer (raw, json)
Hash identifier: jddnEDI1MLGCqgNCvEZpNP6GFQT9V8PnhwKHVJh+ItY=
Subject key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198F45959A8E536F3790D68A214DD3E82DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 29 Aug 2025 05:42:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.31.180.0/22
IP: 2a00:bf60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f4:59:59:a8:e5:36:f3:79:0d:68:a2:14:dd:3e:82:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 29 05:42:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:39:e2:57:a2:34:f7:28:87:37:67:ba:35:
e9:81:76:d7:32:87:66:e8:53:2f:0a:c4:cb:1e:ff:
45:c3:8b:ce:b3:c1:6f:b0:31:4f:aa:ae:22:fa:07:
63:3b:99:3b:72:2b:a3:e3:2b:a4:33:d6:b8:50:a4:
5d:43:48:cf:bd:fe:71:9a:87:e5:6d:2b:06:e4:1c:
97:e6:25:af:4b:d6:ba:59:ce:ae:da:42:ec:aa:58:
04:6c:2f:f9:9a:9f:3b:cf:6b:86:f1:97:80:8a:80:
71:dd:e2:ee:cc:41:8f:33:97:42:79:b5:89:19:84:
16:db:d7:02:f3:19:f4:c2:81:c8:1b:e1:14:ef:50:
77:a2:f7:3f:68:31:cf:fb:cc:69:b5:bd:6b:47:74:
0b:67:81:01:b4:cf:bd:77:a2:f7:73:ef:49:9e:c1:
c0:32:41:73:3a:c5:1c:fe:84:10:f9:f3:11:71:d9:
01:75:52:fa:3b:04:72:1e:1a:4f:e1:3b:48:29:b9:
f4:33:c3:a9:75:3b:fb:56:c0:eb:74:22:c9:b9:69:
23:7c:a2:e5:20:84:8c:39:1a:7f:f1:61:2e:77:a1:
80:73:e1:39:fa:46:f7:bd:d7:65:9f:2b:4c:3b:dc:
b5:1b:c6:94:dc:bf:f2:f6:6b:73:7b:de:fd:b6:d0:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.180.0/22
IPv6:
2a00:bf60::/32
Signature Algorithm: sha256WithRSAEncryption
71:fb:32:e5:7d:c9:84:0b:61:88:4a:12:be:f4:25:3d:3b:b6:
57:75:bd:7c:dd:72:2c:2f:a0:c0:51:54:e0:04:4f:8d:48:18:
80:db:39:89:e9:a3:3d:6d:31:a1:65:4f:b6:ba:c0:9c:89:c9:
21:e2:11:90:af:02:a5:60:fc:44:33:98:00:b6:ba:3a:29:de:
4c:71:69:8b:fe:77:c7:af:d9:e6:28:29:69:2f:46:34:6b:6b:
03:ab:6f:7c:ec:a4:ca:f7:99:1c:f8:45:ba:41:bf:31:7c:7e:
fa:90:82:e9:bb:ce:d1:e7:80:9d:9a:44:12:ca:d7:3e:3d:71:
9d:f3:a5:fc:4f:c8:7c:9c:02:2d:c3:e2:7e:e7:72:f6:d8:b7:
a5:0b:65:5f:80:d0:5e:89:a5:37:e7:80:8a:c8:3c:4a:db:e0:
1b:5e:a2:b8:50:0b:45:d3:48:16:53:34:8d:bf:44:b7:e4:5d:
6e:2f:23:a5:e0:b1:4a:65:dd:95:82:ff:9f:3e:41:7d:c0:8d:
71:af:f1:47:c0:85:a5:67:78:77:7b:a3:33:8b:53:e3:94:c9:
b4:47:00:dd:9c:4e:e7:39:e6:0a:cd:88:db:31:68:37:d5:b9:
fd:2a:47:22:6e:e6:08:ea:9c:07:3b:27:cd:3e:cc:82:c3:97:
43:60:da:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:37:56 2025 by rpki-client