Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/JP35-50qJ0Ol2fCtMyj9cIn7maY.cer
File: JP35-50qJ0Ol2fCtMyj9cIn7maY.cer (raw, json)
Hash identifier: rXziayr0p4xUdJUC/ksVdF/iFiC11NehnH8ApVkh4r4=
Subject key identifier: 24:FD:F9:FB:9D:2A:27:43:A5:D9:F0:AD:33:28:FD:70:89:FB:99:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A10C458AD34DC547343AE27B5CC3EB8822
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/af5abb-5763-426e-a160-4220374a34e1/1/JP35-50qJ0Ol2fCtMyj9cIn7maY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/af5abb-5763-426e-a160-4220374a34e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Oct 2026 13:34:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 212.11.64.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:45:8a:d3:4d:c5:47:34:3a:e2:7b:5c:c3:eb:88:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 5 13:34:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24fdf9fb9d2a2743a5d9f0ad3328fd7089fb99a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:5c:41:d6:dd:98:d4:07:7a:d3:8a:c1:db:
a2:96:49:31:96:d0:cd:4b:65:e0:54:e4:2a:93:73:
38:16:fd:6b:39:14:68:24:17:c7:72:9c:06:f6:1b:
69:20:84:1d:3e:c5:3c:a0:36:16:cc:9e:c2:34:fd:
ef:4e:94:52:cd:cc:be:16:2c:b1:50:21:b8:53:85:
a6:82:38:36:44:71:1f:d0:c0:6c:07:95:f4:5f:e6:
d7:8e:0f:c4:b1:23:ec:d4:41:83:85:b2:a9:c2:7b:
46:88:fd:47:be:f9:9a:60:8c:60:eb:01:68:ec:9d:
7a:ca:a5:40:a2:a3:7d:29:2f:f2:dd:3d:7d:48:11:
d9:ef:44:0c:df:3f:37:86:4d:e5:08:78:99:de:1f:
8a:66:33:a9:93:17:fd:9b:da:b7:6a:81:b2:b9:a5:
07:aa:24:77:a6:49:56:17:58:e8:b5:7c:c7:38:9c:
c3:69:ed:61:1e:54:29:a5:ce:a0:9a:1f:5d:3f:8e:
91:2b:40:36:f5:b8:39:68:5a:b5:e0:4b:de:b9:bf:
66:7e:59:c0:49:6a:58:5d:79:76:55:2a:4c:69:8d:
7d:b7:50:67:10:33:ec:76:02:a3:7c:60:bc:b1:30:
8f:6b:08:02:ad:4e:66:94:20:ed:fc:ad:35:81:0a:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FD:F9:FB:9D:2A:27:43:A5:D9:F0:AD:33:28:FD:70:89:FB:99:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/af5abb-5763-426e-a160-4220374a34e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/af5abb-5763-426e-a160-4220374a34e1/1/JP35-50qJ0Ol2fCtMyj9cIn7maY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.64.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f6:4d:3d:91:07:8e:4d:01:8f:ed:f9:f0:39:52:76:0b:9c:
4a:a0:92:c2:d6:58:c0:20:18:e3:c4:af:45:11:e5:7c:92:b9:
23:ce:1c:9a:13:c4:a6:cf:b3:9b:c7:e7:d1:99:c0:57:b3:af:
24:56:96:02:d4:e4:e4:2b:12:36:81:a9:0a:96:09:1e:5d:c5:
e7:c3:40:f0:1f:6a:4e:82:cd:61:cd:58:fe:e2:24:bc:c8:e5:
f7:1b:d6:98:b8:49:06:07:04:86:7e:76:59:72:25:76:18:a3:
45:81:27:0d:85:03:fe:64:1f:c9:24:7a:3f:16:96:db:a2:8a:
39:10:49:9d:b8:d2:cf:12:fe:68:b4:19:6a:d4:77:02:1c:d2:
30:61:f4:8e:d7:e1:9c:c2:a0:8f:71:a8:3c:4d:0a:92:06:1b:
42:ba:1d:93:d1:28:75:3e:74:79:cc:bb:16:f9:0e:46:09:dd:
63:75:99:eb:1b:67:5f:73:0f:4f:d5:0d:4b:01:1a:8d:78:f7:
3c:5d:23:15:e2:b2:fa:3b:69:e1:42:2f:f9:ec:af:38:7e:de:
33:a7:ee:1e:4b:e7:19:c7:8a:11:e5:47:91:f3:bc:af:7e:fa:
10:0e:31:01:d3:65:7e:82:ef:8c:cf:d8:bd:4d:f0:a9:14:3a:
04:46:a9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:45:06 2026 by rpki-client