Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8sKCiWoz5444MrqwG8cbLbf098.cer
File: e8sKCiWoz5444MrqwG8cbLbf098.cer (raw, json)
Hash identifier: j+TXTPitdkCf/2Re97iZyofzVDT/xCmhi9RIcHji6Vg=
Subject key identifier: 7B:CB:0A:0A:25:A8:CF:9E:38:E0:CA:EA:C0:6F:1C:6C:B6:DF:D3:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A168DBA8E7814E4EEA2B9DFC99C2044897
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/e8sKCiWoz5444MrqwG8cbLbf098.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 23 Oct 2026 13:03:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 147.127.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:db:a8:e7:81:4e:4e:ea:2b:9d:fc:99:c2:04:48:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 23 13:03:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bcb0a0a25a8cf9e38e0caeac06f1c6cb6dfd3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:2c:45:a6:6c:0b:c9:07:10:d0:a7:f0:38:
a7:12:34:4d:5e:45:f7:72:3c:06:26:65:c7:e0:29:
d9:1c:a0:7c:57:ad:a3:ae:74:46:ed:08:5c:e7:09:
f9:f4:ca:49:3c:c8:47:e7:bb:9c:be:40:89:23:14:
cc:87:38:f5:d6:bb:08:65:b9:75:0f:df:f2:95:81:
7e:e9:3d:df:76:e3:d8:35:ea:d8:4b:d3:12:c8:f1:
b8:5b:b1:2c:d0:37:ab:bb:20:d2:ad:99:e0:09:37:
a4:c2:b0:40:cb:13:c9:45:52:66:7e:6f:e9:2c:16:
b6:71:53:da:c5:8f:24:03:20:27:41:fd:f6:6f:d7:
58:b5:47:ed:a4:6a:97:c6:ea:ec:c6:c1:02:5d:fc:
4c:65:eb:b7:d4:53:5e:5b:04:60:76:3a:3d:5c:df:
c1:e2:2a:50:52:38:0b:42:2a:b2:24:4d:72:48:41:
95:08:69:b2:c9:06:7f:81:a1:c9:94:94:95:60:29:
0d:57:5c:75:5e:4e:85:2f:5a:b1:c9:55:f1:46:eb:
ba:20:b8:86:69:d6:6d:90:92:b6:00:fc:58:e4:6c:
95:a0:25:44:8e:82:c1:eb:88:c4:05:2c:fb:71:73:
d1:e4:a4:cb:f6:55:07:14:83:0c:8d:51:e0:97:b9:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CB:0A:0A:25:A8:CF:9E:38:E0:CA:EA:C0:6F:1C:6C:B6:DF:D3:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/e8sKCiWoz5444MrqwG8cbLbf098.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.127.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:80:43:fc:7b:ec:d6:94:fd:da:2e:1a:47:09:8a:ad:10:be:
c9:0b:f7:f7:bb:0d:82:77:3e:7c:0a:bf:e4:bf:d7:1c:d8:ba:
4a:99:22:fe:6c:44:89:2c:93:01:55:70:d8:a9:42:a0:d3:79:
21:b6:db:64:e6:87:67:29:53:fa:5a:e8:5c:d5:1c:c2:72:f5:
5f:cc:cf:80:d8:f0:15:72:98:dc:a2:86:a9:89:67:72:c7:ce:
f5:de:16:f5:d7:1d:b2:32:38:e2:0d:c1:17:f3:9e:ee:72:f2:
89:25:2a:d8:44:f6:30:12:0d:65:1f:d8:e3:1e:14:c8:2f:83:
4a:ee:e4:8f:37:97:2f:7e:4a:9b:4b:35:73:41:fc:c0:87:75:
d4:a6:11:6f:52:a6:43:ff:d5:f9:f2:46:f0:5f:cd:9f:0e:01:
bd:18:e5:e9:00:d8:5d:3f:7c:70:64:ed:1d:2b:91:53:09:06:
14:82:5b:c3:eb:43:72:7d:c5:45:63:7d:20:df:c5:22:c1:12:
75:0a:06:b6:e0:71:83:8a:3e:4c:fd:91:56:c9:d9:37:ba:ff:
cf:a6:fd:ce:05:9e:df:62:e9:09:4b:08:0c:ed:99:c2:8e:8c:
b2:7d:e2:90:75:be:fd:7c:4d:86:53:83:f3:a9:7d:b0:96:ea:
cf:01:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:39:26 2026 by rpki-client