Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
File: _KHkSHz41KLZYd1iLz51Ab3CSCk.cer (raw, json)
Hash identifier: DuTBW2XQXntEx76b+AaMzf95y9ALOYNOXgDUUTVF8y0=
Subject key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199CA5389E098C8ECA2CF94F86F5DEFBC8F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Oct 2025 18:54:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 92.42.202.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ca:53:89:e0:98:c8:ec:a2:cf:94:f8:6f:5d:ef:bc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 9 18:54:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:92:23:9f:01:01:14:50:1c:94:e4:0f:1e:
4b:ff:40:25:89:81:75:42:12:fa:20:31:27:9d:45:
0c:01:0d:d3:47:f8:43:f7:10:71:c4:a8:42:ee:55:
25:f2:5d:de:47:d3:67:ed:aa:1d:61:c4:0d:db:45:
de:21:b9:fc:10:be:1f:b7:93:70:4e:84:4f:c6:55:
44:56:16:aa:e3:e9:dd:d0:c7:57:86:f9:2a:8f:98:
57:37:18:36:c4:ed:ea:a0:71:63:53:25:8f:8d:ce:
dc:1c:61:4b:45:6c:25:74:36:cc:6a:44:31:ca:b0:
3f:5a:c8:b7:00:c2:31:cf:ac:6a:36:b1:71:19:3b:
9b:9c:ab:0a:d1:82:f6:50:ee:bd:69:4e:6e:e0:46:
b4:dc:4e:e7:46:61:55:4d:3a:b1:b9:dd:b3:40:c0:
22:fa:b1:3c:97:d1:5e:22:d9:8c:d3:18:42:bb:04:
83:d1:cc:ab:ab:ac:9d:db:a1:fd:19:60:d6:85:9c:
68:f4:6c:3e:96:1e:93:3c:65:3c:dd:17:1a:8b:01:
82:9a:79:8f:bf:4e:0c:02:6b:4a:6b:3d:7c:32:e9:
7c:31:7b:23:48:c5:18:3f:83:4a:a1:f6:1b:d9:28:
87:ff:cb:1e:00:32:12:f1:88:ac:ab:c5:75:9c:6f:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.202.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:23:3a:fd:16:2c:51:ed:1f:ec:04:6a:c7:e1:29:94:49:74:
1c:34:fa:d4:2e:09:26:1e:ae:d7:c3:48:83:75:7d:3f:7b:57:
de:22:d8:45:0f:a0:4b:95:9b:1d:ae:0a:b5:86:15:30:d2:be:
bc:b5:ca:6d:12:23:df:d4:d0:e5:18:8a:7c:ea:d6:38:49:54:
86:d4:37:e8:5f:03:74:f5:d1:73:4b:77:01:cf:11:89:18:bc:
89:c6:d4:95:f0:8a:69:9b:2a:ae:cf:a4:b3:01:0b:59:84:32:
9c:13:d5:11:33:80:12:33:e9:5b:85:82:ef:4f:61:5d:db:8c:
0f:b8:a9:c6:6d:3a:5a:68:cc:c9:75:ca:60:e4:2c:36:16:51:
27:52:f7:74:83:19:00:64:ae:a8:eb:da:cc:64:31:75:d8:75:
1e:3e:5f:63:2a:bc:11:bf:c4:aa:56:6a:d5:e9:e0:8b:1a:62:
2d:2b:02:42:2e:3e:cc:fa:0f:ab:5d:00:73:85:a7:ef:15:e2:
0e:ed:12:ba:90:b5:60:c3:82:1a:3c:bb:f4:6b:f3:d3:01:08:
46:09:17:0a:75:c9:5a:a4:d3:50:1b:ff:6e:74:98:9f:e8:6e:
84:6e:5f:68:df:36:07:39:6d:cf:aa:54:9b:29:bb:1d:ff:00:
0e:73:e9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:19:52 2025 by rpki-client