Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer (raw, json)
Hash identifier: a+qXx3Lizw2twI6i8qw9furiiLOCJhrJ9lh5YbcqzYI=
Subject key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198EA78B5CF87BC6388C504C715A9339AB0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 27 Aug 2025 07:40:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.220.123.0/24
IP: 185.245.21.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:78:b5:cf:87:bc:63:88:c5:04:c7:15:a9:33:9a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 27 07:40:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23f5c2585382084792f13ad197205efdd2752df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:85:6d:83:28:ec:99:f1:ba:5c:cd:25:be:
17:da:be:0b:3b:0d:29:5c:34:70:61:c6:71:aa:41:
91:ea:34:3a:b1:72:6f:9c:89:28:20:d8:ef:de:4d:
99:fc:6e:f1:70:a8:5f:ff:4e:2d:70:db:e2:90:23:
f9:e2:0a:40:42:6d:95:04:4c:55:5b:5a:cf:73:d2:
03:6c:2a:04:34:1a:2f:0d:3f:90:4e:20:8b:cb:5e:
7d:c1:cf:f4:8a:11:c6:f4:a9:ba:70:d1:6c:c0:d5:
9d:79:88:74:90:ee:a6:68:e0:bd:26:15:71:87:46:
d7:ef:23:50:b1:f7:73:a2:77:48:20:ca:18:3b:a6:
59:4c:09:14:9c:a2:37:d7:6a:eb:fd:e3:6d:0f:2d:
c1:3b:33:fb:c5:ed:f5:01:2d:d3:29:16:fd:11:01:
4d:6b:10:d1:08:be:a4:1d:70:94:58:4e:20:21:b2:
1c:9c:56:2c:c3:70:c6:5d:63:01:e0:24:09:4f:9d:
5a:b2:5e:c8:d9:b3:d0:7a:0c:e6:85:d5:8d:04:e0:
a6:35:43:a9:43:43:bc:11:d6:89:25:15:65:25:21:
fd:ae:52:8a:42:4f:f4:e4:54:eb:bb:a5:70:f2:a5:
54:2e:56:e4:a5:39:3a:eb:9f:23:10:a6:5e:d7:0a:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.123.0/24
185.245.21.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:21:bf:29:aa:74:48:53:e1:bc:1f:e3:1e:56:33:e1:b1:61:
ad:62:09:ad:fb:32:4b:b6:92:b9:27:0f:fc:71:93:1b:33:7b:
03:3d:13:90:9f:7e:e6:93:12:60:7a:96:3a:db:ce:88:23:1e:
f7:c1:e6:8b:8a:19:11:5d:95:e3:dc:3a:59:d9:f4:3f:5f:0e:
9c:93:88:c8:5a:61:1b:fd:e9:3b:34:75:f5:45:a5:65:78:86:
36:e8:81:ed:f1:2f:19:2a:a0:5c:c8:b4:0d:21:fa:11:0f:f8:
c5:fe:50:57:de:0e:92:8c:dd:e5:5f:86:83:73:0a:70:47:6d:
82:43:54:e5:b4:0c:ac:4f:19:8b:24:68:44:27:36:7b:20:ad:
4d:cb:e6:a4:c4:f1:5e:32:5a:0a:7e:b5:74:df:f1:5e:1e:30:
1f:ab:13:56:19:c4:f1:9c:70:e0:6c:6f:68:cc:16:13:93:c2:
4f:26:46:b1:7c:b1:c0:0d:41:61:34:a2:09:a3:6d:d5:f1:db:
6b:66:5f:df:6a:af:e8:03:83:53:c9:64:f7:29:42:79:9c:78:
f7:92:bd:71:a4:93:22:96:13:5b:46:88:2d:e6:be:97:00:1c:
fb:0d:a3:a8:b2:10:f6:ae:ad:6e:3c:9e:57:14:e5:79:24:27:
66:84:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:41:49 2025 by rpki-client