Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
File: I8-ih96iNF6mFxqkd9aO4tu0leE.cer (raw, json)
Hash identifier: 3YohtCy/vqSaUZNhZtnE0E262W9rPVFMEX+dEZzQl7w=
Subject key identifier: 23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F69F192948C05757159C227B55ED15B11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Jul 2026 08:01:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 212.102.100.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:f1:92:94:8c:05:75:71:59:c2:27:b5:5e:d1:5b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 08:01:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:bf:b3:e3:d8:f8:43:1d:53:5a:10:ec:2c:
51:42:1d:8b:2d:e0:f7:16:7f:6e:4e:36:cc:8f:bb:
0a:fe:a7:73:7a:d8:6b:f0:7d:55:5d:b5:9d:df:af:
59:28:77:59:cc:a6:5d:bc:49:ee:89:b8:e6:ab:fa:
18:ce:2e:f4:2d:94:c5:db:65:d5:9b:24:fa:0c:26:
3e:6d:15:eb:8e:db:29:d5:70:4e:b0:1a:56:7c:3f:
70:22:70:78:99:42:a6:d2:32:1a:bc:75:28:0f:56:
8c:c2:b9:e8:82:81:1b:dc:37:93:9e:45:f7:c2:f9:
b9:72:b8:c7:0a:55:21:49:19:19:9a:ee:03:9c:bc:
e4:3f:5e:75:12:75:cd:bc:0d:da:b9:d9:dd:ac:e8:
85:29:51:5a:bb:02:96:69:bb:cd:0f:a2:46:30:43:
39:a2:2f:f9:7b:c1:76:2e:39:5a:3b:a6:ee:c5:a4:
32:07:c6:9d:ad:12:e0:99:d3:67:c1:e4:12:be:b7:
cd:b0:3a:6a:7b:56:cb:ee:f0:f3:d4:a0:f4:8f:8c:
20:71:be:59:8f:4c:da:9c:ec:b2:9c:95:f7:7b:fb:
57:75:54:ea:93:c0:fa:80:d2:eb:6b:09:74:c1:bb:
3f:3c:8d:a6:f1:dc:c3:25:05:d6:4e:3b:a3:1d:9d:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.100.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f4:9e:12:1c:05:6e:88:b9:ed:0f:3c:e1:06:97:ea:64:6f:
4d:af:ff:61:47:00:30:42:25:e7:a2:bd:7e:5c:e5:4e:aa:16:
e8:51:44:c0:dc:fb:32:8a:f9:3b:ad:d9:84:f5:d1:79:27:50:
59:b7:43:4c:4a:b2:c7:fe:19:a7:73:d5:a4:28:97:13:90:9c:
49:34:c9:34:53:a2:ee:c6:64:ee:7f:99:33:5c:0d:81:28:4d:
1d:17:75:4a:2d:e4:57:21:42:61:7b:d7:e7:75:ff:77:66:54:
38:8b:42:0e:79:22:32:a5:53:82:32:06:8d:b1:ae:7d:1e:36:
98:61:d6:15:e0:74:12:8f:0b:db:28:bd:63:f6:71:63:16:7f:
74:c5:5c:8c:b8:7c:96:ce:84:a8:f1:e1:15:95:2b:c7:92:bb:
ea:a2:59:9c:8a:65:0c:72:dc:51:11:c4:96:76:cc:c3:22:13:
1a:78:57:8f:44:d3:2c:b2:a6:1c:5b:af:68:98:23:84:4c:3e:
a7:d2:6a:e1:4c:5e:6a:58:cb:ad:96:b6:7d:ec:9f:2a:21:bf:
d0:23:2f:d1:54:a0:93:cd:df:dd:ae:23:ca:fe:70:b0:76:bf:
10:6d:c1:43:d8:fd:17:6a:1e:94:30:6f:8a:2d:29:74:43:0a:
0f:e3:12:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:18:08 2026 by rpki-client