Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer (raw, json)
Hash identifier: 2f7RlpWN2kHp6djVdOh8kPAGBN/AqRYO1jdOOX1DIo0=
Subject key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01992914C74F4319A1F7B9E2DA504C26A212
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 08 Sep 2025 11:27:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 178.216.10.0/24
IP: 2001:67c:818::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:14:c7:4f:43:19:a1:f7:b9:e2:da:50:4c:26:a2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 8 11:27:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:cb:5b:40:a7:0d:35:32:81:17:12:4e:48:
94:8c:8e:6d:f2:a7:96:a5:ce:68:3e:9a:dc:f6:6d:
44:27:f4:f9:ed:ed:0a:a1:5b:a1:ea:b5:6b:f6:0e:
7a:8c:1f:ee:97:0a:7f:86:e3:c6:e2:3c:9c:9b:b7:
0e:16:e0:63:34:35:ee:24:5c:0c:9d:21:02:54:0b:
d9:21:1c:e9:79:f1:da:78:b5:37:65:a0:19:46:07:
d4:1e:16:3b:29:95:9e:4b:f8:50:53:87:4f:99:c5:
c1:61:f5:57:da:36:52:4a:19:eb:e2:ff:2f:41:35:
49:0f:48:2d:93:3d:75:c9:36:6e:44:ff:0e:4f:0b:
d6:d1:c0:fc:80:83:7e:28:09:84:75:f9:30:a5:18:
da:28:d0:6a:3d:6d:bc:a3:f2:6d:c7:a4:26:18:6f:
61:c1:10:39:2a:b2:ad:92:a8:60:22:d8:a4:2e:14:
c1:0f:3c:37:27:8b:b0:b2:7c:1d:98:d9:6d:57:16:
ce:99:14:b5:1c:e2:25:7f:1c:3e:3f:65:75:70:0d:
ed:62:5a:ae:d0:57:5d:9c:0d:62:f9:bb:7c:95:d7:
9c:51:cf:c1:9f:a1:85:6f:6f:b1:67:56:bc:d0:78:
51:c5:2e:df:83:de:8c:18:56:37:5c:d0:35:cc:97:
23:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.10.0/24
IPv6:
2001:67c:818::/48
Signature Algorithm: sha256WithRSAEncryption
05:d6:05:d3:96:92:50:bd:0c:26:ee:f7:6c:ed:c0:e1:a0:dd:
a8:a9:e0:84:31:d7:65:45:38:95:0d:03:c1:24:86:4a:15:4d:
3c:09:e7:fc:98:a1:db:08:84:fc:04:cc:7b:47:bc:6d:a4:5f:
de:50:10:74:01:dd:e1:9f:ab:97:91:39:1d:68:80:e9:df:35:
90:fc:67:28:b7:74:36:c5:94:11:5e:cb:6e:0a:38:8f:71:98:
be:c5:78:ac:c2:f2:61:c5:ac:ff:39:ca:87:9a:fd:da:ee:cc:
75:6b:c9:ed:81:64:da:80:5a:38:72:40:4e:35:d7:4f:48:8f:
96:35:44:eb:68:a7:89:65:79:56:91:57:4b:49:19:4d:3b:91:
20:14:10:dc:1c:d3:62:c3:6c:67:fc:2f:16:71:1e:25:1b:6c:
18:9d:d2:1c:56:97:4b:6f:8f:70:e0:00:72:bd:bf:a4:a1:59:
56:40:32:f0:7d:48:6a:59:d1:56:ac:b4:96:de:08:31:ac:7f:
23:e1:20:24:e1:58:35:42:de:90:15:2e:1c:df:b7:92:55:2b:
6b:c8:c4:66:cc:e0:c9:62:dd:62:6f:e1:45:c9:34:a1:e0:ef:
2e:89:1a:71:2e:84:26:36:5f:24:16:d4:93:f3:25:0d:c8:3c:
9e:c8:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:56 2025 by rpki-client