Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer
File: 6UUBLq3IWU41GvpoVrw6GUsliH8.cer (raw, json)
Hash identifier: cR46sO7HKtskE/Swb9OjCX3EaETna7ZCiexqjF8+asQ=
Subject key identifier: E9:45:01:2E:AD:C8:59:4E:35:1A:FA:68:56:BC:3A:19:4B:25:88:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F6A21574A56B8FA7A25CA7D14667F54CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Jul 2026 08:53:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 147.188.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:21:57:4a:56:b8:fa:7a:25:ca:7d:14:66:7f:54:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 08:53:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e945012eadc8594e351afa6856bc3a194b25887f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:ad:b6:61:2e:4d:cd:78:61:ad:96:fd:e0:
94:47:3d:07:5b:ac:7f:59:6f:fe:f9:3c:c7:7d:12:
9a:bf:dd:07:4e:bb:6b:b2:62:81:55:92:19:cc:b4:
86:97:a6:e7:3e:b1:4a:02:2f:e3:d8:56:77:8a:27:
6c:70:46:b9:7e:26:27:57:ae:f7:97:15:ee:7a:f3:
f1:45:0a:44:81:e8:2c:85:09:2e:1f:68:18:35:78:
14:72:88:47:77:59:8a:bd:7c:b8:83:5b:22:e9:88:
a9:cd:b0:93:b5:db:76:48:df:b9:aa:3d:66:db:83:
20:28:74:7d:e5:cc:a2:40:72:5a:5c:41:24:14:fa:
01:70:87:3e:08:a7:b4:b2:76:57:66:f1:f7:7c:70:
3e:fc:ae:34:7b:97:3c:2d:f2:df:2a:4a:a4:41:67:
f8:2f:d7:a3:e8:26:f8:b2:18:e0:9c:4d:a1:4c:e1:
fd:5b:e7:94:55:9f:1b:78:4b:96:a4:bf:67:5a:f8:
5d:38:e0:4b:27:2a:1e:60:f4:40:21:97:92:c9:21:
0c:ac:c8:71:6a:af:95:b2:f9:2d:38:9e:ff:e5:88:
33:ee:e7:8e:70:62:12:e7:00:cf:fe:a8:e0:78:d8:
ff:34:c7:21:d9:5a:d3:c9:b6:01:44:41:db:3a:c5:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:45:01:2E:AD:C8:59:4E:35:1A:FA:68:56:BC:3A:19:4B:25:88:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.188.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:57:1a:21:a4:60:fb:2e:68:6b:5c:21:56:fb:12:69:a9:8b:
94:f4:b9:cd:2e:dc:45:21:3e:9c:b5:2a:cc:97:a0:3f:d4:fa:
91:26:46:11:ea:de:52:3d:50:de:86:02:84:8c:5f:57:7a:7a:
88:1d:31:f8:68:c1:c3:a7:96:68:a5:c2:ec:78:73:7f:e5:91:
1e:4b:a9:28:3f:2b:23:36:63:e6:b6:4a:d0:47:27:54:a0:a5:
b0:27:ee:3a:6c:5c:0b:eb:08:50:0a:57:86:13:37:1d:1b:76:
e1:77:75:cb:22:75:db:6f:68:bd:8b:e8:0e:82:3b:3a:78:d1:
34:f5:3b:8a:ea:02:bb:f5:ad:c7:59:f8:46:5a:07:03:dc:89:
7d:a2:21:71:4d:fd:38:b1:02:2b:da:d3:2c:a5:fd:12:52:95:
03:cc:02:f9:85:3b:98:f0:f6:db:e0:37:b5:16:bc:3c:7c:cd:
30:46:ec:b8:8d:ed:91:84:92:f3:2e:b7:ab:6c:b8:7b:e5:de:
b9:68:8f:d7:2d:8d:9d:9f:cf:0c:60:06:de:f1:03:f5:66:e0:
e8:fe:77:67:3e:c9:32:df:17:31:a0:28:9b:8f:1c:86:99:c7:
6e:88:5f:ec:77:0f:70:83:a3:24:67:c2:45:5e:fc:a2:09:24:
6d:a5:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:03 2026 by rpki-client