Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
File: nRNTyAuINe6erTfvfp9kIQp3O_s.cer (raw, json)
Hash identifier: K/iX/H97zB0gOEvWsebysOs3HNPWjpiSfdJO/FrCjo8=
Subject key identifier: 9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A29A8D54D015F77ECA8EBB91A944B0ED3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Oct 2025 07:12:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.217.217.0 -- 185.217.219.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:a8:d5:4d:01:5f:77:ec:a8:eb:b9:1a:94:4b:0e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 28 07:12:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d1353c80b8835ee9ead37ef7e9f64210a773bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:04:d5:5c:65:93:a8:42:f2:61:80:05:c4:
81:25:cc:a8:61:ed:39:53:f8:ff:56:c8:c6:c4:97:
35:99:5e:1a:31:a0:88:a5:e5:1e:9a:c7:15:08:c5:
42:e4:23:14:b5:9b:fa:a7:43:11:c5:2c:5a:09:16:
04:47:d5:0b:0d:27:dc:39:69:54:6e:0f:d0:a6:97:
c8:c7:cf:98:2f:ab:31:52:68:bb:37:a3:42:04:e4:
98:60:9b:04:af:24:f0:9e:af:08:11:74:64:d8:e6:
6d:1e:c0:25:1d:75:3a:18:dc:63:f9:ea:78:4f:af:
4d:c6:d3:4e:b1:a8:7c:f2:d2:79:12:0e:1d:87:59:
9b:1d:31:79:d8:0f:5a:d8:80:bb:42:64:00:88:59:
e6:ad:17:95:41:f9:43:d2:a7:72:37:e4:f8:8b:93:
d2:4e:57:92:48:14:15:3a:f7:dd:be:c4:7d:63:49:
41:1c:1c:93:83:85:04:d6:b4:d0:37:1c:12:ca:bb:
42:85:aa:28:33:05:a4:4f:0d:71:3c:88:fc:32:59:
88:ba:55:d4:54:bf:74:3a:82:3a:a5:e6:70:d8:6b:
f4:8c:e1:e7:a0:50:d3:22:d9:9f:50:0e:97:21:fa:
5b:0a:3e:e2:b7:cd:72:76:50:a4:53:cb:14:25:0b:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.217.0-185.217.219.255
Signature Algorithm: sha256WithRSAEncryption
6d:25:42:b2:b7:7f:91:d8:4e:58:23:5f:72:5f:be:e4:e0:31:
ae:dd:47:30:5f:af:51:c2:c2:a9:3e:98:54:a7:21:62:42:89:
62:d1:83:8f:91:93:9f:d2:42:a3:e9:04:70:ea:c5:09:e2:03:
84:61:78:60:e9:ac:06:92:7e:86:07:8e:d9:b7:4a:c0:d9:97:
c5:66:d2:14:04:3a:d3:11:4b:7b:1f:d5:55:d0:8c:7e:8f:a5:
8f:3a:91:a1:05:b5:b0:c4:a4:8a:57:e0:48:9d:89:3f:b6:7a:
1c:a8:14:21:60:d2:d1:5a:35:58:a0:47:83:3a:86:c1:ba:b1:
a7:06:7a:83:01:bd:3b:14:e9:41:03:b8:c6:27:12:6c:91:c4:
8b:25:e0:b1:30:f9:86:06:66:7f:90:ed:c2:ff:bf:9e:69:44:
10:54:2a:78:7b:d2:f7:7b:67:23:e2:0f:02:2d:82:08:dc:93:
16:77:6a:80:5d:38:7e:02:02:70:7c:88:ea:c5:d2:00:cd:18:
76:2d:1d:0d:cb:f4:91:90:ed:25:27:10:63:26:64:c8:8e:a7:
97:4e:8d:c1:fa:06:d1:61:13:ad:c8:82:3f:fb:81:32:6e:43:
75:b4:ae:ac:79:84:2c:9d:cb:7b:a9:30:13:c2:56:85:3f:60:
84:25:54:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:03:54 2025 by rpki-client