Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer (raw, json)
Hash identifier: XjiTbXTmI/5ql1julxZL7QL1GZKke4dCCLTa8G/w4/4=
Subject key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7758BD735992B1CE77D727095F7F137E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:17:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.8.140.0 -- 193.8.142.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:bd:73:59:92:b1:ce:77:d7:27:09:5f:7f:13:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:54:5f:ad:a1:e0:f7:75:8a:c2:ff:69:1a:
0d:5b:b1:e7:2f:8a:d7:db:f5:57:f6:ba:75:e7:20:
9c:4a:25:33:29:8b:52:cc:34:ce:b1:d0:13:4d:67:
76:8d:dd:02:ae:3d:b6:85:f5:d4:3e:59:ed:5f:e9:
42:82:2d:2f:a6:52:22:19:48:15:df:74:d8:36:e3:
70:7d:b0:0f:d2:ae:ef:1b:6f:4d:bb:be:9c:49:3e:
ea:7e:aa:6f:6a:ed:70:b7:44:00:82:6d:24:fb:c0:
11:a6:29:29:d3:12:d7:8e:34:89:44:ad:88:38:10:
e3:7d:f5:a4:dc:fa:eb:da:75:65:94:eb:9a:a9:69:
2c:ea:dc:54:00:11:84:be:dd:aa:d8:dc:04:49:18:
a7:0a:07:56:72:84:e1:34:c8:ea:57:89:0f:0e:cd:
2c:64:ca:0d:8d:e7:0d:b5:42:a9:d8:1e:7e:24:8e:
57:68:d8:1b:f2:8c:1d:ce:75:97:dc:e2:9c:41:65:
09:54:6a:7c:9d:91:29:57:e1:b5:9c:3a:fd:50:40:
3e:7d:1c:72:de:fa:09:46:11:7e:64:b3:dd:18:5d:
04:02:02:db:70:00:db:ba:36:c4:7e:79:e2:a4:2d:
03:46:5d:73:c1:b7:b2:96:11:e8:98:29:3c:88:dd:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.140.0-193.8.142.255
Signature Algorithm: sha256WithRSAEncryption
0c:0d:8c:77:25:1f:2c:3e:de:7a:b8:35:dc:51:77:e3:89:f4:
06:b3:41:66:d0:46:48:eb:7c:ce:d1:e4:62:73:64:e6:6e:17:
e8:8c:d1:57:0c:6f:c3:b6:0c:b2:61:4a:cb:89:d5:69:92:ba:
d6:f8:8c:6f:70:65:00:9f:60:c2:53:02:a7:d8:ba:49:68:7a:
be:58:74:08:43:c0:1e:03:63:ab:9c:78:d9:7a:ff:46:7a:9b:
f9:23:73:6b:e6:91:b2:f1:07:61:91:6e:72:16:54:86:8d:9c:
4c:2c:0b:c7:c3:a2:90:bf:c7:94:47:cc:c3:ec:bd:0b:c8:ce:
74:2e:0e:b5:1f:36:8c:6d:f4:b3:6d:26:db:86:b8:eb:6b:82:
4a:78:81:93:e6:20:b8:53:c0:9a:1f:2b:03:e8:52:c4:3e:25:
c8:c6:ea:1f:72:31:3d:d5:ed:75:06:eb:22:54:f3:ac:a2:c4:
7f:6a:72:e9:92:4f:13:02:5f:5b:94:c3:10:55:47:1c:50:b3:
12:9d:0c:4a:2a:e3:9f:fb:ab:33:cd:0c:dd:5c:7d:38:1a:99:
c5:1d:98:a0:ff:3b:8e:bf:46:1e:c6:bb:1c:1b:d2:1d:92:df:
f1:21:01:d6:6e:74:80:33:f5:1a:25:f2:5e:df:38:e8:94:d1:
b6:e8:4c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:09 2026 by rpki-client