Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L4IFe98YT8Q6GjsF492Z_-KgvmA.cer
File: L4IFe98YT8Q6GjsF492Z_-KgvmA.cer (raw, json)
Hash identifier: uv7dfz7NA28pPUaMDhnyme1Ri04NJlV1fTRY1jP/hrE=
Subject key identifier: 2F:82:05:7B:DF:18:4F:C4:3A:1A:3B:05:E3:DD:99:FF:E2:A0:BE:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019933B2C939B90125A8BC2E0B96B200DC86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Sep 2025 12:56:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29607
IP: 2001:67c:1ec::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b2:c9:39:b9:01:25:a8:bc:2e:0b:96:b2:00:dc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 12:56:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f82057bdf184fc43a1a3b05e3dd99ffe2a0be60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:bf:6b:71:75:30:73:d5:db:25:4a:35:fe:
93:3f:e0:5e:6a:28:b5:4c:f5:08:28:b6:8e:51:bb:
ef:fe:dd:d8:54:a8:57:18:0c:fd:00:88:6f:8a:66:
ae:cb:d5:45:22:78:61:d1:e8:93:08:6e:17:a7:4c:
9c:2d:8f:d3:7d:68:d3:60:90:88:84:2b:26:6d:59:
ca:1a:a0:82:34:7d:50:2e:df:44:d3:89:cc:1d:a8:
11:aa:a1:35:ad:b1:70:a8:02:c6:ad:2c:6f:83:48:
b4:d4:ff:4a:04:59:2b:a2:47:54:5a:53:20:14:36:
44:4f:7f:03:fb:7b:f7:d2:55:04:7d:ea:d6:3a:a3:
d3:2a:7e:2e:ff:9e:67:3d:1d:64:af:9b:94:df:c1:
86:c6:01:2c:16:6c:92:65:01:f6:dd:bf:47:61:9d:
22:4e:6a:64:4c:37:ac:f8:c9:f8:84:8a:8c:b0:43:
e4:b1:0a:52:b1:e3:fc:16:b4:cf:c5:b4:d0:d2:d3:
80:d1:a6:ab:90:76:b4:82:de:1c:60:10:b0:ad:0a:
50:c6:0d:30:72:13:f5:9c:53:74:bd:25:43:12:b1:
3a:4b:15:51:55:31:65:15:f8:58:f4:fd:f2:55:1e:
51:2a:8d:15:20:b5:7b:36:22:6f:46:63:6a:c0:bb:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:82:05:7B:DF:18:4F:C4:3A:1A:3B:05:E3:DD:99:FF:E2:A0:BE:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1ec::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29607
Signature Algorithm: sha256WithRSAEncryption
29:19:f7:1b:96:8f:38:6e:d4:17:d8:fc:47:28:8b:d0:31:3a:
8d:87:8c:e6:8a:f0:37:05:4f:f1:91:73:f4:84:02:2a:ca:c1:
b5:54:fc:17:f6:d1:c5:02:4f:bd:6f:4e:67:cb:47:8a:fd:ef:
d4:74:5b:48:40:62:28:23:43:32:44:7d:00:bc:a4:e5:fb:37:
5c:51:15:87:9b:d3:90:c0:41:4d:4c:0b:f6:b8:a0:66:8b:3f:
b0:87:8d:6d:02:3c:3d:15:5c:a5:a3:01:04:c8:8e:d4:10:10:
d1:49:25:78:1c:64:5c:dd:16:6a:57:06:21:82:26:4f:3f:6f:
7b:ae:b9:f3:fa:3f:5e:7d:85:b6:9b:02:0d:4b:51:ff:b8:94:
60:05:ea:79:46:11:dc:3a:6f:56:01:a3:1e:22:7b:ef:96:61:
3e:32:74:a0:a5:95:6f:65:3e:2d:77:dc:30:3c:e4:94:db:ab:
d0:ed:ad:09:28:1b:e0:0e:16:a2:66:14:4f:ad:31:c7:82:6c:
19:7f:e0:bf:01:a5:b6:08:52:c2:2d:fa:3e:0e:7d:b4:f2:52:
be:64:da:7b:72:67:bf:7f:d0:b5:37:87:8c:c3:14:57:07:d0:
19:0a:b0:b2:75:7f:f2:56:5a:a8:4e:04:d0:29:40:a9:85:93:
d5:75:a7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:55 2025 by rpki-client