Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
File: dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer (raw, json)
Hash identifier: qEsoSk0+hG7gFEH/hmgfuk0P43BAYKqPQR8HykypQ7Y=
Subject key identifier: 74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01995297266D99B0D06EDF05BF36D4520C73
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Sep 2025 12:54:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 87.120.132.0/24
IP: 91.92.176.0/23
IP: 94.156.66.0/24
IP: 94.156.227.0/24
IP: 185.230.208.0/22
IP: 212.87.206.0/24
IP: 2a0d:e880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:97:26:6d:99:b0:d0:6e:df:05:bf:36:d4:52:0c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 16 12:54:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:75:9a:23:eb:06:03:65:3c:3e:91:36:3e:
69:9d:9c:53:c8:d3:a3:97:fc:5b:94:8d:65:33:2a:
ae:72:01:11:cd:0d:dd:6d:ff:b2:f1:18:b8:88:60:
91:42:f3:29:e0:da:5f:19:0d:62:df:b4:80:66:8c:
80:f8:d7:2f:48:9d:17:2e:fc:2e:e6:3d:cf:ad:20:
f8:72:a9:f9:01:26:d4:15:87:d1:e1:98:da:91:ee:
2b:f0:96:8e:d9:a9:12:39:85:56:e7:af:08:88:f1:
0c:6f:a2:1a:5b:27:ac:b3:68:d8:39:17:79:94:f5:
c8:31:6f:0b:1a:91:cc:cb:41:43:c8:63:fc:e7:d5:
db:67:74:56:f0:31:f1:53:30:52:51:9b:7d:b4:4e:
cf:aa:da:24:66:83:22:d3:69:83:2f:4b:d4:ac:36:
fb:a9:de:4b:93:3a:46:33:80:6e:15:db:3a:33:93:
ea:26:ca:17:89:aa:39:b7:0b:6d:ac:b3:fe:ee:ad:
e1:2c:2a:9a:7e:e6:16:a4:99:68:63:11:10:7c:98:
2d:63:33:e6:52:3c:89:ea:4e:b8:f4:1f:9f:0c:12:
48:03:3f:fe:29:b6:17:8a:c4:41:2f:b9:b7:e0:b7:
ae:33:1a:12:6b:07:df:f8:9f:57:c7:c6:41:b6:9e:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.132.0/24
91.92.176.0/23
94.156.66.0/24
94.156.227.0/24
185.230.208.0/22
212.87.206.0/24
IPv6:
2a0d:e880::/29
Signature Algorithm: sha256WithRSAEncryption
b1:2b:8d:a3:db:c4:1b:2b:b9:6e:a2:c8:c9:73:85:02:be:a3:
d1:f4:8a:da:41:ba:24:f2:ff:61:6b:31:51:3a:b2:e5:e9:3a:
4c:5a:dd:3e:2e:03:f1:99:6c:ab:54:ca:4b:bd:76:74:67:f0:
ba:e1:7c:c3:f8:7a:17:74:db:eb:6b:9e:39:45:2b:4f:f4:78:
e3:89:f4:a4:a5:2e:69:86:3e:d0:fe:1d:e8:64:25:4d:42:9f:
f4:62:1b:8c:a2:4a:21:03:d4:6f:87:e2:5e:9f:e6:34:26:51:
dc:5b:42:a6:99:b6:88:41:0e:fb:cc:e1:38:22:b5:cc:fd:6d:
f8:9d:0d:16:a9:d8:3e:d5:2a:ec:65:f6:82:94:f1:1d:c3:b3:
5e:04:b9:be:53:36:02:fe:b5:3a:e1:94:00:91:dc:9c:3b:5a:
c2:78:cc:a6:c2:d7:f8:85:e3:de:d1:d1:2c:0a:9e:2c:ab:d2:
32:e4:69:93:ec:a2:af:6b:95:27:c3:8e:fd:2d:78:b8:42:ee:
6c:15:61:4f:e2:2a:a9:4a:c0:0b:eb:e1:cf:38:00:ec:18:37:
d4:b4:8a:38:c7:86:be:a5:08:ab:11:c4:be:8a:16:e2:35:45:
aa:a0:80:7b:7f:25:61:75:c9:6c:bf:a2:4d:55:c9:d5:3d:8d:
64:28:a9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:58 2025 by rpki-client