Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
File: 4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer (raw, json)
Hash identifier: 8SNRJv59LsjrPWrkVrykHlKdx2oMoVccIse/ApKcvW4=
Subject key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019915DD0FB436235E0A427569C5615B01E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Sep 2025 17:53:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60952
IP: 167.94.246.0/24
IP: 194.110.0.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:dd:0f:b4:36:23:5e:0a:42:75:69:c5:61:5b:01:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 4 17:53:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a6:d6:f5:34:97:df:51:ce:15:f3:9c:80:e5:
fb:22:2b:a0:40:a1:cc:d0:15:37:ce:67:42:47:a5:
a1:3d:90:51:9f:aa:2d:62:eb:a6:76:be:26:ef:3b:
31:d7:d7:36:83:dd:04:9b:76:71:70:c6:45:b3:64:
4c:7c:8e:16:27:c1:ba:d5:b6:b7:a9:b8:c1:67:c5:
26:02:1a:ee:c5:f8:27:7d:3f:21:f7:4f:52:b5:bc:
24:71:8b:67:23:bf:dd:02:90:b9:f4:a5:e3:e8:03:
83:5a:a2:7d:86:cd:e2:23:66:ab:42:0f:aa:46:42:
10:a6:7a:a0:10:c6:a1:33:ba:54:c3:87:26:3b:d2:
80:2f:00:92:af:63:18:2e:53:00:17:63:1a:a1:f6:
a5:60:60:39:7f:d2:90:9a:ff:4c:1b:cc:39:e7:28:
a9:89:88:08:e6:db:be:65:13:a1:cf:e8:cb:73:1e:
e3:88:3f:0b:76:26:43:f4:79:62:14:d8:75:2c:8c:
16:09:18:20:24:b2:5e:c9:18:3d:be:07:08:bb:bb:
a5:26:f5:d7:a8:86:bd:fa:31:d6:5f:26:c8:d0:1b:
17:03:48:3c:44:19:3b:0a:f5:48:c5:39:ad:35:85:
8c:6d:63:f9:f3:ea:f9:13:ab:17:65:17:22:a7:c9:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.94.246.0/24
194.110.0.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60952
Signature Algorithm: sha256WithRSAEncryption
a7:92:83:83:39:f3:13:8c:63:56:92:37:f0:cc:2c:e7:ce:46:
9e:05:cb:02:1c:c0:4f:45:7f:6d:62:ba:2a:77:91:d4:23:4e:
f1:64:9d:ad:c7:53:6b:d1:ca:ab:f3:53:f0:29:1f:a9:c4:52:
52:3b:c1:65:ed:92:a4:53:dd:f9:7b:61:58:ac:47:77:da:ce:
72:eb:fc:78:20:67:27:5c:9d:00:00:4e:52:93:99:97:eb:31:
13:c7:17:00:1e:21:8c:7e:44:a4:1a:2b:12:b7:20:75:cf:c7:
00:c6:eb:42:f3:36:2f:86:dc:95:1b:6d:53:1d:70:b9:7e:6e:
5c:78:8c:56:1c:b6:a9:68:b1:61:f1:1b:71:1e:fc:33:00:48:
53:e6:31:ba:db:4f:4d:71:bd:77:ca:b4:48:06:3f:50:ff:69:
b4:a7:38:5d:8b:5b:f4:e0:db:e9:33:3a:61:d2:af:71:e0:12:
de:ba:59:6c:5a:4d:1a:a3:61:b8:d8:81:06:81:c9:ae:4c:a3:
9c:8e:e3:7c:08:bd:ba:f8:af:cc:0e:bb:9d:8e:e9:93:e6:f2:
ef:6c:0c:40:5e:47:d1:42:88:4d:04:5f:5e:e7:01:2f:83:02:
e7:69:c8:0e:40:e6:ad:3d:63:db:04:d7:ad:05:28:65:dc:92:
97:66:b9:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 18 20:52:34 2025 by rpki-client