Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
File: jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer (raw, json)
Hash identifier: C1FDo4i6oWh9slvcBCUa7dOWToSXxdvFM5A3TSwVK94=
Subject key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01990F15CA67E07A49DAFCC88FF760583A1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Sep 2025 10:18:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.24.236.0/24
IP: 2a14:2340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:15:ca:67:e0:7a:49:da:fc:c8:8f:f7:60:58:3a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 10:18:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:10:fe:1b:f1:09:86:fc:83:88:5e:35:50:
21:d7:c7:92:70:2a:87:0d:e1:57:94:17:1e:f7:50:
2c:75:24:ac:2f:7a:4f:f9:65:e2:84:8e:eb:8c:b0:
1e:73:4e:1e:c9:3a:5c:9b:6e:bf:39:f5:3d:72:dd:
7b:fe:c4:ca:b2:87:f7:e9:05:7c:93:8a:7f:73:7b:
98:2f:3d:d2:5a:ff:7f:f9:df:71:82:df:7f:79:84:
fb:cc:31:0d:a7:de:6d:0d:32:ce:8e:8d:c0:9b:32:
6f:f5:42:ec:33:fb:96:42:70:c4:ce:8a:bc:51:a1:
cc:ba:8a:49:42:0b:00:26:12:8b:72:09:40:e8:3f:
d2:d8:d7:18:ca:df:b1:b8:4c:81:e6:a9:9f:79:74:
b4:87:72:1d:37:86:00:34:ab:f3:07:77:79:26:42:
bb:20:98:98:dd:e2:0d:3c:24:da:3b:ed:d1:18:ac:
c6:b7:96:0b:52:07:7c:44:bc:ad:2f:53:e9:ec:25:
c7:a0:2b:d3:58:5f:1e:80:2a:a2:7d:f3:ff:be:11:
64:c5:c4:93:54:6d:7c:0d:32:cf:dc:79:53:f0:f0:
b6:76:67:b5:6c:ce:62:10:b3:9c:50:36:f2:9a:e0:
71:de:42:33:98:47:46:88:7e:db:ee:29:44:a1:74:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.236.0/24
IPv6:
2a14:2340::/29
Signature Algorithm: sha256WithRSAEncryption
14:38:73:11:ba:39:c1:14:c5:c3:75:13:9c:e6:ae:e6:d6:84:
b7:3f:84:57:cd:2b:ea:4e:49:ca:88:9e:a5:ba:e6:9f:fb:91:
97:0b:1b:0c:32:5f:1b:6d:64:77:8e:77:aa:aa:bf:d3:c2:b4:
45:8a:f3:e3:ab:cd:15:e5:f2:1a:e6:47:ab:c7:99:66:d3:24:
62:8c:2a:71:d5:83:7a:cb:d6:e4:57:50:80:77:22:80:f5:bb:
8a:7b:75:5a:b2:e6:86:bb:d3:50:c8:c1:d8:d4:4d:7f:c0:67:
83:d8:55:b3:62:c7:7e:c7:72:10:7a:16:d8:5d:eb:bf:87:86:
e2:b8:a9:19:55:04:85:06:df:28:29:78:e5:3f:20:7e:89:ef:
12:28:33:68:cc:26:03:97:c4:4e:62:f1:8a:fd:d7:0f:f9:18:
b3:b3:ab:bc:83:84:ad:a5:46:d0:95:78:ac:92:f8:2a:ca:fa:
fd:be:20:25:0d:82:d0:df:ec:51:2c:79:eb:a1:cd:e6:26:8e:
e5:a9:7a:be:56:c6:60:c6:e7:3a:be:27:95:f4:6d:d3:ff:6c:
6b:97:85:8f:df:ae:6e:e3:9e:36:78:63:bc:6c:58:20:d4:d5:
3d:be:bc:0a:e7:b5:c4:f0:4d:a6:b4:64:79:19:1b:46:a2:ca:
b3:72:dc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:31:01 2025 by rpki-client