Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.cer (raw, json)
Hash identifier: opJy84ok719/pySOgtJkVizCtaZZHSwVClod7mwAziM=
Subject key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198C623CD99C6C29B4819208B40856ABFA9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 Aug 2025 06:21:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.109.40.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:23:cd:99:c6:c2:9b:48:19:20:8b:40:85:6a:bf:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 20 06:21:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7c2562038f081d18d85269407131c984003e575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:67:09:b2:d8:9c:61:cc:5f:03:8f:4b:6d:7e:
2a:76:20:ae:f0:4f:74:4d:e7:0c:0f:77:50:d0:b5:
8b:d5:2f:79:5d:21:d5:b6:ab:3a:0c:a6:d2:9e:7e:
f0:a9:e1:db:4b:48:0f:08:fd:06:dc:81:2f:77:1c:
0f:a8:a8:2b:2e:91:89:af:33:12:01:44:9f:d4:09:
9e:cf:f3:bc:91:25:59:8a:3d:e7:e7:cf:7a:2e:ad:
b5:46:61:f9:fa:a9:1b:3c:6b:5e:d5:03:5d:43:26:
eb:58:e2:bc:c7:45:e5:40:40:63:60:97:5d:7f:b0:
ad:25:fe:70:85:96:79:06:4f:d4:46:8c:fe:06:13:
d4:7c:cc:30:a5:91:23:96:13:d6:38:66:d6:e0:3e:
97:7d:c2:6f:7c:cc:ee:27:ca:6b:25:c1:b3:a8:b0:
24:c1:a5:ef:06:0f:fe:20:c5:5c:8d:79:1b:25:1e:
28:de:b4:f0:0a:fb:29:5a:b6:02:5d:86:f8:bc:03:
1e:d1:37:83:fe:fe:14:a5:73:82:a0:34:87:2e:5e:
e4:f5:44:58:5d:82:bf:c4:5a:f3:6f:92:f1:a3:d7:
66:3a:73:75:e2:72:c7:f5:de:32:5f:ad:98:6a:e4:
ae:c0:b3:9c:6d:13:cc:ee:4c:21:fd:51:f1:5b:d4:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.40.0/21
Signature Algorithm: sha256WithRSAEncryption
58:d7:93:9f:35:4e:8f:c7:3c:66:da:d3:1c:b2:cb:28:31:08:
b6:b2:aa:bc:98:26:f0:6d:3f:ba:8d:cd:a7:39:5d:a8:c2:09:
c8:91:e1:16:46:00:d8:ae:20:9c:af:26:6e:60:e9:37:33:dd:
a3:f3:b2:ee:2a:43:79:87:5b:7c:1b:5e:81:ae:9e:1a:bb:15:
ef:8d:14:fc:6a:b2:16:ce:e5:86:7f:13:68:0c:9d:5f:14:a8:
16:96:da:95:9d:4d:92:0a:4e:22:3f:84:2b:25:37:5e:d5:7d:
e2:65:74:76:16:fe:76:a7:d4:3d:4e:41:cc:09:4c:26:16:d8:
14:1e:c5:ab:31:bc:94:f0:0d:4b:3b:23:0c:eb:1c:76:3f:18:
06:b9:07:98:c2:7f:13:f1:b7:ec:74:35:83:ff:a0:a3:32:9a:
27:9b:04:40:05:9d:6b:1e:42:9b:da:4f:c3:4c:3e:de:ea:40:
e8:53:44:b4:83:78:2e:51:a8:7f:62:4a:11:49:ec:14:c2:d0:
b9:88:fd:81:7f:0e:59:2a:d1:82:e2:ca:20:65:84:a7:5d:1d:
41:71:d7:bd:90:d3:52:ce:74:4f:92:9a:b5:df:b1:2b:c3:5d:
f9:6b:a3:6c:e8:38:58:13:df:c5:51:ba:62:6a:72:34:8e:6d:
cb:97:aa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:06:33 2025 by rpki-client