Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer (raw, json)
Hash identifier: SVbVLIzV1h2475odUZb2c48TxKOqZU7PCt5693vIFJE=
Subject key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E8309F8B20D7EA54456CC04F10D28E2EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jun 2026 11:55:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a01:f2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:09:f8:b2:0d:7e:a5:44:56:cc:04:f1:0d:28:e2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 1 11:55:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:04:8d:6c:d5:3e:10:ee:88:3e:76:dd:97:
1d:37:b4:08:1a:f2:a5:90:b8:93:16:92:cf:6a:d3:
2b:17:23:62:42:f4:c6:a0:bb:3d:c1:cf:a6:0d:a0:
64:72:35:27:04:cd:12:3f:c3:9c:ac:e6:19:4c:e3:
af:b1:41:52:6f:00:64:f8:44:c0:75:b3:24:1a:05:
4b:66:ad:b5:b7:d4:32:e5:b3:d1:4c:c6:16:22:c6:
e8:6a:fc:87:53:dd:33:57:29:1e:7e:4b:fa:40:9d:
75:10:a2:c8:37:7f:22:c7:b7:6f:a8:37:e1:5b:6d:
09:ce:ff:35:11:df:75:3f:0c:92:22:39:fe:18:08:
af:9e:31:10:0a:f2:8e:f1:3d:40:cd:16:6f:5d:14:
1e:1d:e3:0c:39:68:fe:de:82:fd:4f:ef:f1:fa:ba:
79:a3:de:46:b3:28:c4:11:24:8d:4f:61:60:87:5a:
01:8b:01:c6:df:ce:0e:36:e7:78:a1:71:68:05:71:
c1:85:c4:d0:cf:f4:dc:f4:23:c7:f7:cf:a8:15:07:
5b:85:c9:42:e2:f9:1e:bc:2d:52:8e:71:80:f7:00:
dc:e3:8a:12:43:62:51:8f:20:2b:65:ad:cd:8f:60:
c5:5d:14:7c:98:a5:79:41:5e:ef:41:9e:f0:08:3f:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
06:c3:eb:00:80:a3:56:dc:5a:e9:c2:7b:8e:9c:b2:86:b5:81:
a5:b3:0c:26:5f:9f:9d:5a:15:10:24:b9:61:88:58:79:32:d6:
b2:f4:0d:8f:0b:51:65:c1:6a:fe:0e:9d:26:39:90:22:c1:37:
42:93:e3:b0:93:84:b0:a7:38:e1:2f:4d:67:8a:d1:d1:37:d0:
66:d4:b3:3d:88:1c:e0:4a:1d:ae:ce:e2:6d:08:5a:1b:dc:54:
51:4d:30:14:40:68:b8:b9:01:5b:8f:c9:fa:49:7b:b6:18:bd:
87:9d:6c:fa:fd:cb:ab:dd:4d:85:c0:da:ec:f0:db:59:fa:2f:
8f:82:ce:be:42:a2:76:0b:a3:c2:aa:1c:6a:4e:b4:3f:b5:6a:
68:8c:2a:fd:8d:5a:da:5e:99:fb:64:3e:6b:1c:57:d3:65:18:
a0:4d:ba:c5:7d:8a:bd:9d:fb:4a:4a:0d:2b:98:2a:81:be:1e:
1e:e9:06:be:ed:b2:cc:2a:e6:ca:f5:10:23:55:a3:4d:ab:84:
3a:1c:6b:b1:d9:bf:47:6b:33:e6:d8:8d:70:77:4a:87:75:c4:
01:d9:b0:71:12:eb:2b:6f:dc:ac:fb:09:9c:85:87:69:f8:f3:
09:5f:a4:6f:3d:f9:3e:06:b5:11:e3:f1:ad:03:b2:2b:68:ff:
f3:4c:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:19:49 2026 by rpki-client