Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lv-mtXElVDEKD0zlQJznapqwRP8.cer
File: Lv-mtXElVDEKD0zlQJznapqwRP8.cer (raw, json)
Hash identifier: bxH7M3HBQhZyYl9C0nFKxEN+O0XYQ9yGzAqoFbhQkzQ=
Subject key identifier: 2E:FF:A6:B5:71:25:54:31:0A:0F:4C:E5:40:9C:E7:6A:9A:B0:44:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9E89B0CD65C812D17A87C998BD9D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/Lv-mtXElVDEKD0zlQJznapqwRP8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.48.220.0/22
IP: 2a01:9ba0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:e8:9b:0c:d6:5c:81:2d:17:a8:7c:99:8b:d9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2effa6b5712554310a0f4ce5409ce76a9ab044ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:aa:af:4b:02:53:f3:c4:30:74:56:c0:f2:
f4:31:b8:c5:5b:5a:39:a5:38:87:93:fb:8b:99:35:
50:32:0a:0e:06:0b:ec:e1:60:43:b9:49:3b:a2:d9:
cb:8a:95:d1:93:2f:91:2b:7d:75:bb:35:5f:4d:8c:
b3:d0:a2:35:e4:87:d5:ae:f8:93:25:e6:32:8b:3a:
8a:7f:f9:9d:da:43:c2:61:14:99:79:81:b3:fd:ec:
6e:b7:17:6c:5b:f3:8f:14:19:cc:42:d3:9c:b3:a7:
e9:da:05:03:8a:c2:c5:0f:e1:cf:04:dc:82:f2:67:
0a:4f:7d:39:1c:d9:93:c3:a2:b2:27:1c:fe:9e:2c:
f7:19:3a:4d:87:24:64:63:24:97:19:b7:bf:e5:b7:
35:e7:1d:8b:61:bb:07:3b:eb:1d:b5:ec:e1:c3:42:
92:a5:bc:00:fb:69:4f:2b:02:b5:73:46:40:cb:f6:
6d:6d:c4:c6:ea:55:8b:81:2d:75:57:6b:47:cb:a6:
67:9d:c9:51:1e:71:12:5b:6c:85:db:fb:05:fb:b8:
81:4d:5b:43:c9:c4:ab:f5:8f:cf:1a:4e:3c:cb:11:
0b:64:19:25:44:ee:df:85:6f:b5:8c:18:b0:34:36:
66:75:ac:2e:d4:ef:be:36:55:f7:97:16:da:2b:4b:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FF:A6:B5:71:25:54:31:0A:0F:4C:E5:40:9C:E7:6A:9A:B0:44:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/Lv-mtXElVDEKD0zlQJznapqwRP8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.220.0/22
IPv6:
2a01:9ba0::/32
Signature Algorithm: sha256WithRSAEncryption
b1:86:7e:31:60:b1:d1:ae:e0:e6:75:3e:b3:ba:a6:db:6e:3d:
df:7c:82:6e:04:99:4f:19:74:d4:6c:6e:38:b2:e3:d9:b6:4f:
a6:80:85:95:bf:70:65:44:c0:93:d8:a7:35:57:7a:41:ff:0d:
7c:25:41:ad:e6:91:26:79:f3:26:0a:85:a4:b0:ae:21:cb:13:
18:97:7e:e6:da:28:5f:3d:c9:07:b7:7f:31:35:77:38:8d:ca:
97:79:7a:9b:a5:7d:af:6d:87:b9:cc:9c:3a:5b:69:af:14:03:
51:24:1b:66:f8:d9:dc:0b:e5:91:24:9c:cf:a0:26:d9:ec:08:
5c:ac:c7:cb:45:17:c2:d4:0d:2b:5c:26:8c:20:89:9c:56:55:
83:be:3e:ef:88:59:c4:38:2e:69:c1:7f:40:58:25:14:bc:96:
39:00:e6:c5:e5:ac:ca:8d:9d:9e:f8:ff:cf:9c:7a:50:e8:46:
3a:55:02:5c:1e:c1:e1:97:3f:52:a8:f4:3b:b2:a3:e5:4a:d5:
27:56:ad:5e:0b:bd:99:4f:63:db:1c:bb:2a:ff:ff:7e:3a:f9:
bf:33:60:2c:23:26:8d:8e:1f:76:11:fd:99:5a:96:45:1e:38:
71:04:81:e0:b4:a9:14:ee:7a:3d:3b:2e:00:e2:23:1a:a8:b0:
69:45:11:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:47:58 2026 by rpki-client