Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
File: 7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer (raw, json)
Hash identifier: 72qof7xoNmIeR7c2lSNF1cAZVwSJ852Q+LkwII80bDA=
Subject key identifier: EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9DEF73B614D96758457E4BE6D8768
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.154.152.0/22
IP: 2a0a:7740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:de:f7:3b:61:4d:96:75:84:57:e4:be:6d:87:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:d5:5c:36:7c:06:5c:e0:d2:41:94:2e:8b:
c8:0f:93:8c:d2:23:60:30:89:02:a4:e4:fc:a3:bf:
56:9e:78:9a:a3:bc:fe:9c:1e:29:99:ee:b9:38:80:
fc:ad:4a:b1:57:37:0b:d5:de:21:aa:10:f8:b0:d2:
b4:33:75:96:c9:b1:2a:a5:e2:6d:3a:7f:f1:51:9f:
92:fd:7e:60:4a:c5:c3:32:a0:bc:71:68:ea:f0:98:
f9:99:97:98:3c:dd:df:f1:89:2e:42:c4:aa:48:b6:
ef:b7:73:57:74:73:18:21:dc:0a:40:6c:55:39:03:
93:28:ca:e0:00:b3:60:5d:a0:0a:6d:f8:10:41:b6:
93:af:f4:11:67:a1:80:17:bb:09:0f:e3:66:6b:1d:
3a:94:22:0b:84:8e:e9:c4:6d:83:55:0a:74:9e:35:
02:a1:fd:b9:e8:3a:f5:1e:df:e8:f7:c1:88:94:e7:
96:d6:b0:42:6c:25:91:04:e6:17:24:19:60:55:3a:
81:60:8a:b8:e1:b1:bd:35:7e:88:a7:7e:f4:b2:55:
c9:ea:13:26:5a:32:5a:50:ce:5a:34:e9:6a:e7:d2:
df:ff:97:da:f6:d8:53:fa:d0:b0:d5:10:68:12:71:
dc:c8:bb:66:88:16:a0:5f:13:3d:27:05:03:35:be:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.152.0/22
IPv6:
2a0a:7740::/29
Signature Algorithm: sha256WithRSAEncryption
9c:60:3f:34:11:6c:2d:2d:b1:bf:17:f8:12:8a:d1:72:05:be:
92:c0:2f:7b:87:d2:e1:41:e3:01:17:1e:ea:1e:06:a8:b2:13:
e0:b5:0a:54:d0:9e:6b:05:07:af:7a:64:1a:a4:01:64:59:95:
50:85:95:c3:30:87:5a:ca:f4:df:bc:8b:c7:84:3e:ab:5f:72:
5b:3c:7e:7a:d4:33:7b:0b:4f:b1:2c:c6:91:aa:47:f3:68:12:
53:e4:ca:36:46:b6:f0:a2:b0:35:08:2b:e1:32:3e:4b:f9:cb:
71:fd:d8:53:ac:38:ea:48:5e:18:0b:be:87:f4:ea:07:55:d2:
21:13:6d:2d:2e:4a:60:a0:72:e7:83:e1:1a:b1:13:56:70:0e:
29:8a:b4:db:08:0f:39:a5:cd:57:8b:a7:60:78:4e:62:7c:dd:
24:55:c1:10:fc:75:fd:72:36:6f:c5:35:63:79:be:95:a3:bd:
1e:dc:ea:46:0d:31:13:bd:8f:96:a9:17:85:a3:9c:01:53:8e:
ae:f4:13:ab:04:1d:f9:9d:35:e8:53:a5:fc:0e:65:9f:b3:34:
c4:8d:e5:0c:f9:30:60:79:26:c0:3b:32:20:28:f2:fe:db:9c:
b2:e8:4c:4d:cb:f4:7d:95:92:8c:74:1d:a5:16:d4:b1:a8:9b:
a0:d6:87:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:10:32 2026 by rpki-client