Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
File: eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer (raw, json)
Hash identifier: GqSI1i18mgcl5CGbSZonbVWOH4Jx87LK0NsvI/min3Q=
Subject key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198E0F9E3A1890B10D6D83823A8F8BA699B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 25 Aug 2025 11:25:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34868
AS: 59716
IP: 80.83.176.0/20
IP: 185.69.2.0/24
IP: 185.190.228.0/22
IP: 2001:4ce8::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:f9:e3:a1:89:0b:10:d6:d8:38:23:a8:f8:ba:69:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 25 11:25:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d65d4a22df705beed7b3432fbe48a356597724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:a8:29:72:43:fe:42:1e:d2:42:18:a5:93:
41:0c:d0:69:40:0d:2c:08:a5:84:50:9a:2e:59:a6:
fa:c9:c5:0d:97:5c:8c:a1:e0:08:fe:0a:1d:0d:06:
7c:ad:ef:f5:27:35:1a:5e:93:3b:27:fb:6a:6e:90:
99:29:b3:1d:1a:55:d0:53:e3:bd:42:c5:eb:5f:c7:
db:48:09:10:2d:93:ee:6d:ed:07:0d:b2:ca:9b:4d:
2e:9d:4d:b4:1e:97:7d:21:c3:05:47:57:0c:9c:5b:
d3:88:4a:74:ad:e1:cb:a4:79:b7:5b:31:ed:e5:21:
1c:f1:c6:dd:ac:9f:79:b1:0f:a0:05:1a:fc:b0:6b:
e8:4d:75:9f:b8:b5:f3:5c:99:b9:7d:32:4c:a3:9c:
9c:c9:44:31:43:ec:cb:64:57:14:22:fe:fd:dd:95:
02:e1:fc:61:c3:ca:76:65:4c:67:a3:ba:79:7d:5f:
76:76:18:03:d4:21:b1:66:7c:63:a5:64:11:a4:9e:
05:e0:30:24:b2:b7:69:36:de:5c:94:96:c1:de:48:
ef:2e:f1:9c:81:2b:4a:d8:8f:61:54:58:33:69:9b:
de:fc:09:52:50:e0:42:ff:48:ee:3c:e2:05:d3:b2:
b5:84:da:68:48:ad:9f:8d:33:8c:13:7f:6d:5c:b5:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.176.0/20
185.69.2.0/24
185.190.228.0/22
IPv6:
2001:4ce8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34868
59716
Signature Algorithm: sha256WithRSAEncryption
27:3d:04:86:77:b3:c0:c2:b3:90:6c:b9:2d:60:13:77:e0:ee:
13:ef:d6:59:8e:ed:9b:79:32:28:06:db:57:6e:28:de:7e:04:
fc:99:04:11:26:e4:37:8f:cf:d7:8f:a9:00:b6:e4:08:60:c5:
41:f9:58:c0:6b:e7:82:43:08:40:b8:1e:c1:6f:a4:61:a9:54:
14:3f:c6:97:cf:f2:c3:08:d4:34:08:ac:be:6e:c7:54:50:fb:
3a:7e:ce:7d:f2:0c:91:d6:3b:14:41:0e:f2:19:53:c3:e9:54:
7c:68:e9:fc:5b:16:51:16:15:95:01:df:f6:52:ca:7f:57:3b:
32:e0:cb:9b:60:44:17:e8:f3:d1:fa:40:40:8d:74:a7:df:66:
a1:a0:0b:96:aa:17:69:b3:86:c7:1a:83:48:b1:65:11:97:2d:
96:24:0e:f5:82:f5:fc:46:54:71:d5:f3:46:8f:fd:d2:86:94:
d6:e6:20:f5:f5:61:2b:1a:6b:63:0b:75:29:29:32:be:11:39:
38:77:14:ea:7e:e2:51:c2:00:1d:d7:b6:fd:2c:63:c0:fe:b8:
c6:2e:ae:a2:c8:50:9e:36:67:2d:79:1f:db:4c:da:d5:b1:3d:
74:72:9a:7e:99:35:48:e2:6b:6f:14:53:83:3e:af:8a:ac:a2:
09:fa:23:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:28:01 2025 by rpki-client