Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
File: b4CWRAfF2qRAiKz-leZIi4APreU.cer (raw, json)
Hash identifier: 0phJXhoqKWH1/FDZKFPYvBVeA87faPdDok7O0VbcPWE=
Subject key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198EA9925F4ACD0E402DD4D6708C6C099E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 27 Aug 2025 08:16:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.202.192.0/22
IP: 2a0e:6a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:99:25:f4:ac:d0:e4:02:dd:4d:67:08:c6:c0:99:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 27 08:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f80964407c5daa44088acfe95e6488b800fade5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:37:04:98:74:d2:81:23:6e:50:3b:fd:36:3a:
f2:65:7f:0c:e4:b0:45:9f:e7:77:ab:e9:84:8e:c5:
3d:e2:11:7f:5e:80:53:f9:24:a0:f4:03:79:d5:51:
85:60:bc:dd:12:6c:dd:fb:80:8a:49:8c:b0:4e:7e:
7f:96:55:34:e2:11:a1:87:e6:f7:04:a1:09:bc:6a:
70:ab:1e:4c:32:30:e0:cd:7d:13:f5:fa:45:95:43:
50:63:72:41:8f:a7:8f:ae:ad:33:e1:7d:61:52:16:
f5:be:cf:ee:c5:19:a0:f3:ab:e5:50:af:8e:f2:ab:
0f:a4:62:75:ca:5c:c0:f4:57:bb:7f:c8:2b:fb:14:
d5:62:c0:75:06:65:e6:65:11:86:e3:c8:cd:41:5a:
70:a7:a5:3c:d3:0a:da:7e:5e:f1:31:dc:28:d3:10:
86:c3:88:3c:e8:77:fc:a6:57:13:23:df:54:fb:ca:
b5:7f:06:9d:12:82:b1:d1:c5:61:1c:aa:bc:48:6d:
d0:57:53:81:6e:48:50:d4:1f:64:ea:5e:e8:5a:25:
52:2e:44:47:1a:ed:dd:ac:4d:e9:39:d1:26:83:35:
d4:87:94:11:77:9f:4f:40:c4:9a:b9:a8:74:d9:88:
a3:d2:10:c4:2c:df:50:22:e0:67:85:dc:42:c9:13:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.192.0/22
IPv6:
2a0e:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
29:0b:ec:12:6c:ee:c3:3b:8a:80:e4:ae:fa:8c:f8:5d:aa:f0:
f8:d5:2e:b2:7f:20:08:10:cc:1d:33:5b:45:e9:66:fe:80:9b:
68:3c:ec:f6:6e:c0:21:6f:99:80:2d:b5:39:8f:57:ca:71:c7:
bd:d9:0b:47:a8:97:c1:91:8f:2e:db:80:5d:bf:02:1d:25:10:
46:d6:b3:57:9e:43:5e:8b:e2:89:10:fd:27:6b:63:fa:3a:29:
a7:60:96:42:dc:e3:f0:79:eb:c1:9d:90:c9:de:7c:8e:45:0f:
1f:34:5a:58:5f:ac:96:d1:9d:ad:cd:df:67:f8:70:46:66:a8:
c0:41:8b:b6:79:61:2c:8e:dc:c5:fb:3c:40:c1:c0:e8:c6:48:
2f:e3:0b:98:aa:f6:5e:38:07:22:26:71:ab:c6:12:7d:6e:6f:
6d:e6:06:5a:77:6f:6d:67:40:7a:e3:37:3d:57:78:e2:44:f6:
bb:90:0c:46:9c:9f:40:71:db:cc:d3:e2:21:5e:a5:5a:02:28:
d9:73:dd:dd:d5:fb:e2:4c:cf:e1:8a:06:c2:4e:1e:a3:c2:2c:
da:9c:94:23:fa:2d:50:4f:52:a4:92:7b:86:43:55:5e:59:b7:
5c:bb:1d:59:cf:ff:b0:0e:f6:4c:62:86:d7:da:77:93:21:b9:
07:b4:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:38:10 2025 by rpki-client