Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer (raw, json)
Hash identifier: nuNBRTj7QbewwRoQUAfRG+AImFKE7WfcXxg5xcCFwGQ=
Subject key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198AD1F377220C6784B535969C3D8D86C27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 15 Aug 2025 09:46:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 5.153.240.0/21
IP: 83.219.112.0/20
IP: 185.74.140.0/22
IP: 185.74.152.0/22
IP: 2a00:d2e0::/29
IP: 2a00:d560::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:1f:37:72:20:c6:78:4b:53:59:69:c3:d8:d8:6c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 15 09:46:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1492a20754c9a7650b8279b9390689c469d73595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:57:54:2a:9f:b0:9f:e0:5b:5b:bb:39:98:
58:78:bc:e0:c0:10:81:23:cb:ca:67:76:07:04:22:
81:78:ef:93:f4:67:12:e0:80:b3:5f:44:32:db:cd:
3d:58:3b:af:3d:b3:8c:68:ea:ac:fa:39:78:3e:ed:
88:3e:d8:21:a1:fb:c7:b4:b7:ce:0f:34:e4:aa:06:
71:9b:cb:01:48:b0:a8:94:12:03:d3:35:bc:2a:ba:
13:9f:15:eb:7b:8c:6f:88:1c:18:8b:90:26:8a:16:
87:a5:89:0c:f2:0b:7c:9d:e0:0e:38:ee:dc:2b:f8:
33:c0:1d:2f:1a:5a:84:03:20:b4:dd:7f:91:70:6c:
38:fc:29:76:f0:a3:3c:2a:c5:5d:0d:bd:1e:07:4f:
ce:08:0a:1f:c2:56:36:6f:e3:19:b6:ef:11:1b:15:
31:21:53:2a:a1:1e:96:ac:bc:b8:8b:89:97:0f:5a:
96:d9:9e:f1:47:f1:2c:2b:6c:d5:23:bd:c5:14:96:
74:97:72:48:5e:90:b0:f9:1a:d4:02:50:fb:f7:81:
9d:18:88:fb:89:ac:2b:29:7b:f2:19:3c:0b:24:01:
da:91:a4:fa:b6:62:cb:7c:1b:f5:90:f8:84:9f:ba:
88:25:50:87:ce:c1:e9:86:51:4e:4d:5e:0b:6e:61:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.240.0/21
83.219.112.0/20
185.74.140.0/22
185.74.152.0/22
IPv6:
2a00:d2e0::/29
2a00:d560::/29
Signature Algorithm: sha256WithRSAEncryption
43:45:7b:a3:f6:b1:3d:c4:d4:e4:7c:42:a8:e1:bd:0c:d9:1f:
b4:19:76:95:b9:59:29:fb:4c:cb:aa:44:46:a7:84:65:b3:e0:
d7:7a:2c:4e:6f:30:0d:37:5e:65:5a:6d:11:05:ff:80:dd:67:
8f:28:e1:9e:8a:ba:54:fe:09:8f:25:b5:18:05:ad:6a:bb:d2:
c6:7f:60:78:4d:2d:a4:39:4a:9d:a1:58:d9:fb:3d:75:bf:d6:
e3:1c:03:a0:0b:fa:ba:73:3b:15:19:20:29:8c:5c:cd:ae:54:
f4:df:da:7f:18:58:94:bd:b9:ad:e0:60:19:55:64:b5:4e:89:
0d:ea:42:3f:f3:6c:b8:1b:e0:79:35:4c:33:5d:1f:f4:4b:a1:
81:09:6f:f1:6c:d6:0f:95:4b:fe:85:89:c5:8e:de:2d:ff:c6:
97:74:b9:4f:a3:fb:15:88:ce:89:1f:49:21:97:54:2d:13:3f:
81:68:a0:0b:04:b8:a9:0b:95:6f:73:95:95:17:ba:78:23:27:
b3:16:79:d6:d5:2d:ae:6a:00:b0:62:99:62:8e:2f:62:b0:25:
18:22:83:14:66:2f:4e:6c:1c:ee:bd:1f:43:62:0b:02:22:98:
c1:24:4e:8a:6d:94:16:8b:7f:2f:aa:c9:14:9b:48:ca:05:8e:
ea:36:39:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:06:20 2025 by rpki-client