Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer (raw, json)
Hash identifier: RNfSGXIea9ro96S2FhKjp2SYf/iC1xsmDGD+lwcZ8qc=
Subject key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199EBD2AF20977B07CE0C5931BB3456BA5A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Oct 2025 07:01:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 213.177.176.0/24
IP: 2a01:f700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:eb:d2:af:20:97:7b:07:ce:0c:59:31:bb:34:56:ba:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 16 07:01:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:48:d0:92:3b:1a:89:85:8b:cd:36:0b:4b:b7:
f8:cb:1c:90:2d:aa:c8:14:30:7e:cc:59:60:f7:0d:
ba:70:c2:8c:c1:f7:a9:ca:7e:1f:86:2b:12:54:24:
89:08:53:12:49:b0:5a:61:dd:9f:02:dd:2c:0c:0e:
b8:b3:44:c2:a9:77:0f:ca:53:74:d1:e7:8c:ca:f4:
4a:18:fe:47:43:e9:d2:9d:a3:e9:ee:50:12:c2:64:
12:b6:03:57:1e:ce:1d:84:32:1e:7a:87:5e:c3:9c:
df:ff:81:b9:a2:83:57:d9:69:7a:f9:d4:87:0d:37:
e1:e4:02:1d:9a:b5:31:d1:1d:52:98:39:74:eb:6f:
81:78:89:f0:2c:ec:fd:13:96:7b:e7:64:30:1e:7a:
a7:91:98:89:bc:b1:a5:b2:0a:d5:62:b9:27:b6:92:
cd:8d:cf:be:be:ad:06:a5:3d:aa:76:39:f7:42:f5:
5e:a4:52:5f:be:a9:2b:4a:91:af:fb:f7:04:48:49:
6d:83:90:e0:46:d2:6b:03:c6:d2:84:c9:62:57:a5:
fe:4d:56:6b:87:51:29:36:7c:33:7e:67:dd:e6:f3:
21:c9:5b:b1:94:f3:41:84:78:10:63:1e:42:cd:aa:
5d:ed:68:05:39:a8:ae:d7:27:bb:c5:43:a8:50:7f:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.177.176.0/24
IPv6:
2a01:f700::/29
Signature Algorithm: sha256WithRSAEncryption
41:a5:8e:e5:bf:18:b1:e5:4a:85:dd:fe:36:41:a3:34:52:6d:
04:9e:9a:15:aa:a7:80:db:be:e7:ab:f4:b0:61:5b:a5:05:91:
05:b7:ac:57:d4:33:cd:98:53:ba:9c:76:71:fe:d5:d7:8e:66:
52:f9:53:7f:3f:14:96:0a:78:d3:7a:d0:8b:27:f2:6b:32:43:
af:29:79:57:12:20:2a:7d:cf:d3:9f:b6:3b:1a:ac:ab:ec:d1:
61:de:95:b9:0b:0b:0f:b4:aa:23:26:fa:d7:8c:c6:aa:57:de:
aa:d6:e9:00:2a:d4:87:95:93:82:92:72:fa:e0:f6:52:4e:0c:
bf:2f:fd:1f:fc:58:ae:64:f9:4b:58:42:57:73:bf:74:14:40:
fa:a0:25:e3:85:44:7e:0e:e2:26:54:e2:38:78:da:28:d8:1a:
ce:6c:17:5d:e3:f4:d9:c9:19:11:8e:c7:bd:4b:dd:30:7d:d3:
9a:d7:ba:96:72:f4:50:f2:51:c0:f2:bb:32:52:30:e1:e5:b7:
c3:9a:8e:3c:7b:81:d4:78:f9:a2:2c:b4:2f:eb:6f:d9:0b:85:
9e:8c:06:7c:8b:30:f3:e5:55:fc:3d:63:25:e3:bf:d3:06:59:
05:fd:4e:f3:f9:61:c0:5c:18:97:b6:8d:97:58:cf:bc:0c:5c:
65:62:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:47 2025 by rpki-client