Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer (raw, json)
Hash identifier: VmD5d2zSXpBnh4zey1j+YYT68GRMwAQQuz4xwlJeLl8=
Subject key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199E6DB5E0C2B884A74636A2CCD38844D7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Oct 2025 07:52:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.221.138.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:db:5e:0c:2b:88:4a:74:63:6a:2c:cd:38:84:4d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 07:52:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e31c010e95015c2123641d33120a7e9c9008002d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:a1:e2:fc:c9:ab:de:08:0c:c2:f6:94:b8:
36:6b:cb:7a:56:ab:85:e8:38:a8:3e:07:8c:8e:da:
88:b6:8d:d6:2b:a5:58:18:36:c7:1f:9d:e3:1e:25:
db:15:22:8a:eb:30:44:d4:9f:10:80:35:51:23:b6:
e6:0c:43:45:a1:5c:bf:2e:de:33:c1:01:bd:9b:f9:
6e:d1:80:e3:11:2a:05:d1:04:45:f2:2e:05:8a:ef:
0e:9d:58:2c:b7:44:da:7e:8c:80:d2:dd:cc:dc:de:
1c:06:fb:ec:17:be:5b:09:6b:d2:00:fe:da:57:ba:
65:61:0c:a0:ac:11:c8:4c:73:60:22:6f:56:70:93:
19:1a:0e:c7:6a:80:50:8c:60:7f:82:7c:d0:bd:cb:
f5:8d:31:22:5b:d1:dc:c4:cb:e4:8e:8f:5c:e9:96:
c3:34:e3:a1:5f:82:9f:48:7d:25:7d:c3:88:55:fc:
a1:c6:23:1e:25:27:92:7f:e8:2d:7b:e2:ab:a5:49:
34:8d:88:44:4b:e7:f5:7a:3d:17:6b:f2:7f:63:d8:
44:79:2c:68:2f:d8:4f:8b:ec:03:5f:54:65:e2:b2:
76:6c:56:10:39:e0:f2:35:e7:2f:da:e0:16:65:95:
ec:fa:99:e6:63:5a:d2:73:45:da:c3:24:4d:ba:1d:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.138.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:d8:6a:61:25:7a:c0:52:3e:08:49:71:52:04:39:4f:fc:f1:
d2:6b:a5:0f:11:6d:8b:9b:99:99:70:88:75:f0:96:18:d6:37:
c6:3c:6c:d7:a4:42:35:a8:df:11:aa:0a:8d:e7:2e:ca:b6:61:
11:51:0b:4e:75:ca:bb:cc:c4:a3:5c:4c:52:e8:57:58:c0:7d:
6e:47:69:0c:92:1f:49:5c:a7:c3:ff:a1:c9:9f:08:ca:55:2b:
8e:db:fa:07:b7:ab:b9:81:e0:56:37:30:76:73:a5:e9:60:b8:
55:77:aa:60:fb:6d:56:07:64:a1:a3:21:61:00:4f:ce:5e:ae:
52:a0:90:ed:88:79:c7:2b:74:6b:f8:28:77:c3:57:10:97:47:
c1:2c:af:6d:72:18:3b:7a:b4:00:62:fe:84:a5:f6:cc:eb:83:
42:c6:1e:02:2a:d7:be:2a:2d:45:eb:ab:96:29:67:6f:26:9e:
60:c4:61:dc:ea:b3:bc:d4:bf:77:2e:1e:1c:cf:a3:04:39:eb:
8a:b5:64:17:8d:77:64:d5:ac:51:22:95:d6:29:8c:8a:62:24:
ab:10:e2:8c:f2:b5:7a:33:6d:7b:ad:4d:5e:1c:4c:70:3e:e3:
f1:fe:ba:61:67:59:dc:ab:c4:b3:e6:3d:f4:c2:ac:7d:0e:cb:
c4:8a:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:40 2025 by rpki-client