Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
File: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer (raw, json)
Hash identifier: b8DYpitx/j9rrFzVxWKIbb0b9igpK+X/1OqCaIt33k4=
Subject key identifier: F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01991511DAFE65309877DC70A614E92AD7CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Sep 2025 14:11:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 89.58.112.0/20
IP: 89.58.192.0/18
IP: 194.97.0.0/19
IP: 194.97.192.0/19
IP: 195.4.92.0/23
IP: 2001:748::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:11:da:fe:65:30:98:77:dc:70:a6:14:e9:2a:d7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 4 14:11:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0a9005423147453909366c6b4d09c31958acc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:48:0b:a9:a0:ec:b2:96:f2:3c:8a:cf:3c:
84:37:78:b4:58:c3:99:3b:3f:4d:9b:1a:d1:1f:59:
24:70:78:af:36:45:9c:01:e0:79:0e:ee:30:a7:ba:
1b:03:d5:98:1f:1d:f0:1a:58:34:ec:c4:87:38:f8:
bc:b6:90:41:d9:c2:ec:7c:fb:15:49:67:f7:51:e8:
28:41:c7:ea:69:83:d8:03:4d:ba:ca:05:79:a4:c4:
9c:d5:5a:f4:67:40:b3:de:e2:19:1a:33:b0:f4:e1:
4c:eb:80:17:d6:7e:bb:dd:75:aa:79:b3:7f:1b:75:
d3:42:ce:b3:a6:2e:5e:bf:b6:e8:86:69:1e:f6:c2:
2c:72:ba:65:af:a4:83:cc:8b:70:da:e1:d8:a1:3e:
72:d5:68:1e:6a:0e:0f:42:84:86:a5:40:9e:e3:c2:
7f:8f:a8:24:8c:63:0e:b7:af:1b:a0:d7:a4:96:48:
57:07:2d:60:b1:b8:36:88:b5:4b:b3:f3:8b:41:a2:
7f:56:70:2c:b4:2f:81:90:ef:2a:0f:10:8a:88:20:
9c:f8:23:0a:00:8d:3e:63:ac:7b:79:94:49:f2:8d:
b9:d8:32:4f:12:38:c1:2c:71:ce:31:a6:06:e9:ff:
b4:b9:d5:61:df:c3:f3:63:6d:5e:8e:bc:b7:80:e2:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.58.112.0/20
89.58.192.0/18
194.97.0.0/19
194.97.192.0/19
195.4.92.0/23
IPv6:
2001:748::/32
Signature Algorithm: sha256WithRSAEncryption
4d:25:d6:7a:87:90:62:07:04:45:d3:53:02:91:66:db:5a:5b:
2e:b9:16:c1:31:a8:b1:b6:8a:cd:b9:26:77:ee:7d:5e:2c:e4:
24:51:72:18:8b:55:45:17:44:4b:2e:9a:5f:bd:47:c2:64:32:
72:68:fe:7e:49:9c:08:b3:e8:8f:97:ff:a3:c1:c2:87:0a:60:
62:ed:54:00:3f:f5:5d:f5:19:70:98:9e:e6:44:02:fe:b3:24:
cf:16:ea:ed:f0:13:48:a4:7e:8a:59:a2:5f:73:de:49:4a:df:
e9:2d:1a:0c:f0:42:a6:02:d2:38:bd:72:64:4c:cb:e5:23:47:
40:aa:24:20:72:85:e7:33:3a:74:84:41:2f:96:ed:42:c9:44:
63:b8:79:29:9a:f8:73:f5:7c:80:3a:10:9c:a9:9a:14:aa:2b:
40:68:f4:d3:4d:a0:4e:31:e9:c5:51:d6:1b:a1:d3:f8:0f:a4:
aa:6e:81:78:f9:97:d6:dc:92:58:30:53:01:a1:ff:4d:a7:71:
14:f0:23:36:62:8c:c0:0f:96:3c:11:3d:9f:57:55:03:8c:3d:
08:56:f3:70:91:92:4d:17:78:3f:ce:1d:a2:b7:73:b4:06:ee:
ef:e1:93:76:57:b9:bc:8c:1f:01:d1:25:b5:28:61:af:90:5f:
63:d2:4e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:17:48 2025 by rpki-client