Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.cer (raw, json)
Hash identifier: BvJD+OQjl8i6kpuCOyQuDynciICzkRThVfaQnd5DziA=
Subject key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019971EA73027F9F2D0135B511A6E7F1F2D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Sep 2025 14:53:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.35.208.0/24
IP: 2a14:2e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:ea:73:02:7f:9f:2d:01:35:b5:11:a6:e7:f1:f2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 14:53:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:18:51:c9:66:99:ee:2c:72:45:f6:53:1e:
f3:72:36:5f:ea:e4:ac:ef:6d:9e:a6:a8:b2:c9:27:
98:75:86:73:55:3a:90:a6:9c:17:5f:b1:44:be:ff:
6a:4b:8b:5e:95:98:54:84:88:ef:d2:b9:a3:11:e4:
3c:93:fd:97:02:cb:49:87:ce:1a:f8:64:4e:42:58:
ca:3d:21:b0:7c:2b:9f:af:29:bf:29:5a:5c:49:d0:
68:1e:45:83:16:2a:ff:58:f3:ad:d1:90:d6:25:c8:
57:15:0c:61:06:63:dd:7a:6a:79:7c:23:fd:13:73:
5f:f8:88:b8:48:56:2e:b8:e5:f5:6c:5a:3b:1d:76:
28:82:38:c0:fc:6e:a8:8e:1f:38:ce:32:04:91:53:
c5:c8:71:5c:f8:45:08:4c:a1:a0:27:50:7a:6f:50:
50:db:dd:77:76:40:66:0c:64:3f:19:58:9d:a1:c8:
30:16:78:56:9d:c2:38:86:6f:6c:1d:6f:45:9c:20:
14:dc:8d:cd:23:51:89:d4:72:5b:4d:d7:66:8c:be:
66:0a:99:54:f3:9b:83:f2:56:d5:aa:47:36:1d:8e:
2f:63:19:6b:a1:80:d6:75:e3:13:bb:78:21:f6:96:
c2:fb:dd:69:52:3a:85:69:9c:eb:50:10:48:80:b1:
38:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.208.0/24
IPv6:
2a14:2e00::/29
Signature Algorithm: sha256WithRSAEncryption
82:ae:fe:3b:17:00:45:3b:29:a2:d7:8b:57:98:66:d4:2e:99:
30:82:2c:88:62:1c:ad:16:3b:61:15:7c:73:8b:a1:61:02:28:
5f:31:08:6b:3a:fb:28:c8:d4:8f:e2:4f:0d:2f:e8:09:d1:e8:
67:5f:9e:61:bf:45:fa:81:f4:fb:2b:fc:17:8c:87:62:7b:a5:
68:60:72:fd:b6:63:bb:9a:0c:7a:3f:5b:6a:53:18:3e:93:ca:
e2:12:c2:e1:7c:fe:30:f3:71:b5:88:ab:0c:3f:1d:b6:f2:2c:
bc:9a:23:08:ed:c4:57:5e:92:f3:da:60:ac:00:46:cd:d8:e8:
22:6e:37:a1:88:48:67:93:f8:6d:63:a5:b1:19:59:fd:25:bb:
e6:d0:c8:34:29:55:ca:aa:38:43:dd:55:3b:ba:78:d9:12:5d:
5a:1d:c0:1f:4b:15:56:81:ec:e0:2f:1e:23:e3:0e:83:84:c8:
a8:df:d9:45:ae:eb:43:40:3c:b2:50:4a:74:5a:d9:f2:c3:74:
6c:0b:90:a7:fb:ae:a8:8a:33:14:61:cf:81:49:a7:7f:6b:a5:
a4:d0:98:3d:f6:03:58:0b:08:a9:d9:81:f3:b6:f6:dc:14:8c:
45:25:c5:86:b5:a2:24:dd:26:9c:a2:83:0a:05:ef:33:fc:06:
84:fb:3d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:48 2025 by rpki-client