Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer
File: ArVih4aW5ig8TfgUo4tzXFAMr4s.cer (raw, json)
Hash identifier: aw8/sGAjJP+12yjgttZysP7KXHGNDvj3sV+2K92R3io=
Subject key identifier: 02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198932D1A01CD05F4C4C0CCB51AD36835EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 10 Aug 2025 08:51:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.177.241.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:2d:1a:01:cd:05:f4:c4:c0:cc:b5:1a:d3:68:35:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 10 08:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02b562878696e6283c4df814a38b735c500caf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:5c:ab:c8:83:25:0c:9d:29:7a:be:d4:be:
8d:b9:ff:ea:98:49:b2:96:e4:34:f8:55:08:76:58:
48:f1:af:f2:74:83:da:a9:e4:64:06:14:77:78:9a:
9d:47:cb:d1:a4:5b:4f:1d:23:d0:99:db:56:05:51:
f9:8e:66:0a:45:e1:1c:ed:02:b5:91:25:cf:2f:05:
40:37:b6:a4:8e:b9:d2:5e:cc:1d:68:2b:71:60:d5:
e4:a9:64:3c:32:d7:a2:18:52:a3:6c:67:f8:3f:79:
22:8c:47:13:70:89:6f:13:25:74:38:96:21:95:4c:
6b:c8:9c:08:b9:a7:88:5a:6c:36:b8:2e:58:6b:de:
3f:f7:1f:de:e1:9c:e1:42:64:83:82:b1:59:5c:92:
10:5b:08:92:0a:19:ce:d0:0f:d8:bf:da:56:ab:2e:
3b:65:35:ee:4b:2d:d8:b8:07:44:68:24:0e:40:f5:
db:c4:b5:33:a8:1c:80:40:30:3c:a9:83:51:3d:ea:
a5:04:87:a5:c6:04:92:22:1a:4b:92:25:d6:83:68:
35:1f:c2:fa:b2:28:82:b3:21:9d:fa:7e:3f:c4:75:
7b:56:7b:42:7d:e7:68:98:23:af:08:05:1d:4d:fb:
e8:3e:6a:bf:45:cc:9f:97:62:12:e3:a5:2a:34:30:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.241.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d6:4e:a2:64:51:50:68:b6:1e:c9:a6:53:54:6a:01:ff:50:
9b:b7:c8:df:e9:77:ed:90:8d:96:60:62:2b:70:a6:4a:59:3d:
1b:4f:c5:ff:26:bc:90:b6:40:22:c8:e7:ca:af:c1:98:fa:5c:
8c:52:aa:e7:4d:f2:d5:41:c1:8f:2c:5f:a3:c7:93:50:75:39:
92:e6:36:79:b6:9a:f3:b6:44:80:b6:f8:41:7b:b1:d8:b9:13:
0f:ed:ea:7d:7d:79:7b:42:04:68:d7:5a:e0:e5:0e:95:63:55:
03:14:e3:ce:de:ad:12:62:b4:06:0a:ce:0a:31:6a:ac:67:7d:
d0:7e:f6:89:ca:47:fa:ed:b0:5d:90:58:88:a3:b1:73:c8:d0:
3a:b9:91:49:1f:5d:a5:4a:33:0d:2d:e2:06:91:b8:f1:50:62:
02:36:de:d1:0b:82:3d:ef:e7:ff:39:da:96:50:f7:ea:1c:6c:
2d:31:a2:e0:70:49:48:e2:ea:90:70:1e:64:29:ed:90:4b:8e:
63:9f:c3:b0:72:cb:7d:56:85:b1:70:0b:05:62:bf:53:d3:3f:
d3:bd:eb:a7:87:55:b0:05:cb:08:d2:1e:c7:c6:1a:08:f5:22:
b8:3d:42:86:4d:c1:f3:22:34:d8:61:3f:d1:f0:c5:ca:c5:a2:
49:75:b6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:47:00 2025 by rpki-client