Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer (raw, json)
Hash identifier: shMrtockd+giarMvpKCAQGqPuMjQ0qVk5D4B+Z+QbXY=
Subject key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199CA55A5258532D65A2BBAB0CBE66A299E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Oct 2025 18:57:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 92.42.203.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ca:55:a5:25:85:32:d6:5a:2b:ba:b0:cb:e6:6a:29:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 9 18:57:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:91:62:91:53:9c:56:e2:14:20:2c:ee:64:
54:57:2c:f8:a0:35:30:0a:d5:cd:32:32:13:63:42:
ff:72:0a:f1:d7:b3:8a:d9:4d:18:e2:6b:0e:22:94:
77:19:1f:df:12:eb:03:5e:99:0f:55:69:60:8f:71:
ce:a4:8d:d9:9b:14:2a:14:e3:2f:69:ca:a1:2c:b5:
eb:d8:56:82:bf:82:a0:c6:b7:af:e3:fb:b5:c8:e4:
32:00:1f:1b:60:c6:ce:0b:a8:09:19:28:9b:fe:ef:
fb:7e:6a:02:de:85:21:6e:9c:b8:b5:e2:1a:0b:7c:
f6:ad:c6:f9:18:a4:e9:0b:15:3a:09:5e:72:66:de:
ae:a5:e6:98:d8:e7:65:ee:ab:74:bf:a1:ad:5d:53:
6a:77:f8:50:9d:28:86:fc:80:0b:9f:e2:e8:b0:db:
19:f3:3e:ff:ba:b5:0a:22:02:4f:ed:27:bd:37:0f:
59:35:75:54:58:d8:7d:8e:7b:a3:2a:5e:87:50:c5:
2c:74:a9:4e:88:26:08:a0:10:6c:18:59:aa:88:24:
ed:0b:f0:a9:f5:43:0a:e3:59:d1:c6:9c:35:30:38:
e7:c1:7c:d1:55:24:87:13:cc:51:3b:97:2a:0f:16:
0b:f4:55:47:a3:f6:54:40:c1:0a:e5:c7:fb:bc:db:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a2:7a:33:ef:58:93:a2:78:ac:01:0c:2d:e8:41:91:5a:b5:
bf:d6:4d:10:af:2d:a9:a7:fc:98:aa:f3:bb:83:90:62:1b:d3:
02:9e:ce:1a:a3:5b:4d:28:ba:db:1f:8b:3a:49:50:ae:04:c0:
7c:79:b7:b3:2c:3b:09:3a:3f:16:e1:3c:16:10:24:9b:8e:4c:
87:e9:ae:92:25:72:44:94:2a:e1:45:11:f5:55:91:e8:12:5a:
01:b6:69:ea:35:34:07:ce:c0:e0:fa:c0:73:3b:b3:81:4d:30:
23:d9:5f:65:48:1e:35:eb:8e:13:7d:da:10:67:49:c1:a8:8a:
b3:88:4a:4b:5f:a3:67:ec:df:03:0c:3e:c9:2d:0a:d9:1a:b6:
9f:52:49:c1:e5:ff:81:2d:1c:5f:4d:26:80:64:4d:71:1d:42:
3d:f5:36:6c:64:fb:cf:e6:54:ff:77:22:19:23:90:bd:93:32:
ac:1e:eb:e1:48:ed:26:6d:e0:30:76:22:2e:28:b7:91:52:9f:
f0:d8:2f:33:d5:6c:d3:f4:bc:a6:42:4f:42:e8:14:82:0a:90:
b5:1e:df:27:b6:5f:2d:20:be:77:d7:a2:57:bc:bc:9b:b2:9f:
00:ba:e4:d3:c0:dd:5d:29:47:0e:22:4b:13:36:89:18:2f:43:
c5:eb:a9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:59 2025 by rpki-client