Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
File: 8zXtZqwB15F1zk149nKh_kcgN4A.cer (raw, json)
Hash identifier: NXc9jmIhSs+ygsLeC/Ox/n8QpnAgLH2+DEB5rT9C4tU=
Subject key identifier: F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198BD7B26BC7E0B330CFD1A9321DB4E1BD5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Aug 2025 14:00:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 167.150.21.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bd:7b:26:bc:7e:0b:33:0c:fd:1a:93:21:db:4e:1b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 18 14:00:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f335ed66ac01d79175ce4d78f672a1fe47203780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:28:3f:69:a6:55:c3:74:1e:64:ec:6e:f8:
60:e4:1c:b9:c8:23:1e:be:63:fd:ad:74:0d:bd:f0:
1c:aa:d9:f5:1d:1c:61:ab:7e:17:0d:c0:6e:55:2f:
95:bd:61:54:05:ef:b1:fd:32:fa:91:6e:a9:5a:a1:
9f:1d:f3:98:8a:72:28:b6:85:71:f0:a8:03:06:d9:
de:17:55:63:43:51:dc:5b:88:00:df:09:b1:42:f7:
4c:0f:12:30:3f:f3:66:5e:50:a9:d3:b0:71:83:8d:
81:6b:e8:96:1a:26:72:fc:f6:77:45:d6:68:5f:73:
49:8d:88:45:89:88:8f:5a:e8:30:b8:c7:17:e6:7b:
31:9f:64:ed:c6:f6:68:1e:d4:70:db:66:bd:20:f0:
8c:35:97:40:b6:d1:49:e8:b7:6e:a9:98:6a:68:e5:
36:1d:b3:d4:16:81:50:17:77:af:85:8d:96:34:b8:
b5:8c:5c:e5:17:8f:2b:72:6c:51:a7:87:b2:29:1d:
67:e8:cd:a2:01:c9:09:cd:de:06:d7:c0:9c:df:e7:
ed:da:df:ae:4c:1e:51:d0:1f:c1:5c:0b:dc:ad:28:
ba:b3:12:ac:c1:36:95:e4:e9:bd:75:68:45:6a:20:
31:33:0c:3f:f9:ce:a0:63:dd:16:31:8c:f4:a3:72:
7a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.150.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:8f:7e:34:7b:2a:0f:4f:a7:6e:9c:53:6f:e2:72:f1:2e:48:
ac:1b:ba:ae:59:bf:0d:31:c1:b4:40:55:3f:87:fa:a4:9d:5a:
9b:03:48:09:e6:7a:e3:6b:4a:d0:34:05:4a:21:9a:8e:b8:21:
54:95:4f:85:7f:6f:e3:f8:31:7b:fb:df:e5:4e:2b:33:e8:a6:
c7:c2:e0:58:ad:14:af:12:23:b2:c7:85:aa:d9:85:30:79:5c:
0f:ee:8b:44:40:88:60:c6:d1:43:2d:9f:a7:42:e6:9e:db:99:
63:1c:11:65:89:71:f9:37:e2:59:d7:6d:cc:42:f0:2d:18:d2:
7d:b7:de:9f:7d:e1:ce:bb:d4:b5:7b:96:35:5a:e3:0f:7b:19:
bc:cc:e9:36:19:06:12:4f:1c:42:30:8f:aa:e1:81:d8:b8:9c:
cf:a8:bd:cc:27:2c:84:aa:6e:48:84:38:e6:ee:3d:0f:db:80:
ad:98:22:81:20:82:13:af:85:9b:25:ea:4e:61:d1:f1:f1:26:
41:39:f2:d5:0a:64:a6:fe:5f:c1:f3:99:ba:1c:6a:a4:d1:e5:
a2:c2:32:3c:d1:b3:2b:a5:41:b0:b1:99:93:73:6d:00:d3:66:
42:3a:44:33:82:e6:95:74:38:28:84:74:7f:75:55:ed:59:be:
34:63:4a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:59:48 2025 by rpki-client