Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer
File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer (raw, json)
Hash identifier: LzzWKXU5b0CAZdnPPshYCvqwnBhsDS0TcdzXuw4cqZg=
Subject key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198A86241B1C4FCC5920F277203BDAC7470
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Aug 2025 11:41:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.172.4.0/22
IP: 193.105.36.0/24
IP: 2a0a:f900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:62:41:b1:c4:fc:c5:92:0f:27:72:03:bd:ac:74:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 14 11:41:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a07318a1314233f5623c0f835fae18f9126412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:2b:8f:5e:e5:4d:e9:a9:cb:30:10:e5:f4:
14:c0:dd:3f:b2:c0:46:a5:79:da:3d:4c:d2:41:61:
e3:0c:1b:a1:5a:f2:ea:81:5a:64:84:35:76:13:32:
4c:32:68:5a:86:b4:e2:f4:09:5f:b5:da:0c:b3:24:
0c:d2:88:3c:4d:aa:fe:60:8e:70:76:7f:5e:06:1e:
97:4c:eb:0e:c8:1c:89:75:e8:85:7a:18:02:cd:5f:
c9:f2:96:fb:fc:55:8a:77:8d:8e:05:45:9d:c4:74:
38:86:e9:4f:23:00:58:9f:7a:a0:55:37:fb:77:28:
32:16:78:9e:70:76:7d:de:66:39:37:45:7a:74:5c:
27:cd:09:41:6e:7d:7b:e9:c5:65:a1:dc:f3:19:6f:
7a:a3:0b:d9:98:1e:2d:30:bd:5b:80:57:f2:d3:c5:
2e:d5:59:70:f3:ec:9d:70:49:3e:c7:ac:9d:7d:05:
07:cf:8c:4d:75:34:74:02:78:4b:7f:27:a2:5a:91:
7a:80:bb:a9:5c:2a:1b:50:b7:fb:c4:1a:7f:49:17:
27:95:f9:fe:b2:e2:70:1e:32:47:b1:7a:7e:aa:2b:
80:74:9a:37:64:82:b4:c5:03:d8:a7:90:b8:01:8b:
cd:14:a1:7c:06:11:59:a1:b2:2d:51:d3:e4:c3:ec:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.4.0/22
193.105.36.0/24
IPv6:
2a0a:f900::/29
Signature Algorithm: sha256WithRSAEncryption
81:ea:c9:c6:08:b0:47:5f:04:90:ce:2f:a5:b5:68:3b:96:29:
b4:9c:45:de:fb:af:1a:2e:1f:61:ab:8f:40:27:1a:51:b9:19:
c1:2d:f7:2d:4a:91:dd:78:53:1b:3b:42:31:2d:a2:6c:50:6d:
d7:c1:c4:3f:4f:33:dc:e0:b4:b0:99:c0:41:64:7c:21:a9:37:
09:29:9e:79:39:8f:78:0a:a3:de:ca:28:d0:3e:f5:a4:c9:68:
de:ef:b7:3e:a4:d8:ba:33:81:d0:79:76:9b:46:21:f7:cb:0b:
11:eb:f9:5f:78:31:95:b1:f4:52:8b:70:d6:a4:fd:28:33:7d:
b0:7a:31:dc:47:9c:6d:e6:04:6a:e9:3d:2c:a3:8b:3a:8a:9e:
26:e1:40:75:03:c5:13:c2:d7:d4:af:1f:41:6e:02:4f:62:e3:
6c:05:1b:58:ba:35:da:50:31:aa:2d:68:d6:0c:cb:2b:bc:90:
af:2a:85:a8:bc:71:3b:9f:c2:56:ac:c0:a3:13:79:7b:1d:05:
96:70:5c:e7:91:3b:69:42:cd:32:05:6d:a9:9d:17:a6:7a:b8:
86:e4:51:b4:bb:75:7b:15:4f:d6:65:2c:63:f1:b4:87:7b:45:
02:57:b0:8a:40:ed:3d:9b:58:d6:bb:e3:41:72:04:66:97:fb:
27:d6:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:49:30 2025 by rpki-client