Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
File: f1Eig3R0LfVEqpMFjFo709FkIZk.cer (raw, json)
Hash identifier: S0Hfgs7W/O0kX450/wzC+PbE6jsk0uObFkgiAwqGsCk=
Subject key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199A4FB3374EAD14FF7BC122EA140822A19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Oct 2025 12:52:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42699
AS: 62310
AS: 201014
AS: 212820
IP: 77.220.224.0/19
IP: 185.88.224.0/22
IP: 185.228.144.0/22
IP: 2a02:2878::/32
IP: 2a05:cf00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:fb:33:74:ea:d1:4f:f7:bc:12:2e:a1:40:82:2a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 2 12:52:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f51228374742df544aa93058c5a3bd3d1642199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:a1:b2:7d:f7:3b:2c:d2:69:cc:f6:38:45:
9f:e6:6b:5b:6f:d8:c8:58:31:a6:46:ad:94:e4:cc:
41:37:81:95:84:e1:40:b7:14:b2:01:18:80:42:14:
85:4e:3f:a0:ab:06:82:88:80:a1:5b:16:40:f5:d1:
90:35:16:b1:ce:3c:68:0e:25:60:67:eb:e4:9a:ee:
4d:ff:d3:00:ce:25:14:91:f7:5f:a9:1c:71:48:db:
8f:e2:d9:cc:db:fe:d4:97:a4:e5:4a:66:7c:a2:04:
78:20:e5:c2:81:19:19:99:d4:e8:0f:3e:63:49:89:
be:e4:40:5c:f2:07:9a:fb:d1:c7:0b:69:fc:a7:2f:
5d:0f:72:d9:b9:2b:48:11:63:49:6d:86:31:44:9b:
9a:64:b2:dd:f0:f5:05:8f:2c:9b:6a:12:a7:34:84:
0a:3c:08:f9:e2:19:aa:03:30:97:5a:4b:3b:8b:12:
ee:92:2e:de:fa:7f:4e:45:a1:1d:18:35:5c:b9:ef:
3f:6f:1e:9a:be:1d:b7:f7:dd:d4:6e:38:f7:b4:69:
92:64:88:45:6b:d7:d3:e0:0a:67:ae:90:bc:f8:78:
6d:e1:3e:28:e3:9f:06:4a:b2:52:3e:44:ac:76:45:
59:a4:ec:cb:dc:35:db:92:5d:c9:53:2c:cb:03:f1:
2c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.224.0/19
185.88.224.0/22
185.228.144.0/22
IPv6:
2a02:2878::/32
2a05:cf00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42699
62310
201014
212820
Signature Algorithm: sha256WithRSAEncryption
6e:50:10:5b:70:3e:de:39:b1:dc:fc:ba:a8:d3:f6:95:0c:7f:
ef:fb:3b:bf:31:ae:4d:3e:a0:dc:b3:b9:00:ee:cd:f5:97:e8:
80:f8:e3:20:d5:69:dd:1d:ac:60:26:a1:ae:c2:e0:0c:e6:7f:
f6:90:fa:cf:38:1c:5c:59:61:41:86:1e:29:1b:07:b8:59:af:
74:e7:71:d8:7f:da:52:ae:94:03:a1:95:d5:d6:6f:d9:78:ce:
9c:87:d8:a6:2b:aa:7b:50:d4:0e:cf:a7:7f:0d:c5:c4:86:49:
9b:34:f1:4c:3a:ba:ab:81:08:c0:53:fd:59:c7:ea:cd:49:b1:
c4:98:8f:e7:a8:87:8e:c3:59:8a:f4:dc:c9:b7:4a:56:65:42:
df:85:19:da:92:13:74:83:38:1e:01:12:60:1f:ff:95:95:c0:
c7:81:49:91:12:60:d4:91:ca:e0:f8:c2:0c:6e:c4:15:c3:90:
3e:93:83:27:ea:1e:89:35:25:c6:6d:92:8a:74:99:1b:e5:95:
a5:a9:c3:b8:36:34:3a:96:e1:4f:ac:35:b5:b5:bc:ce:2f:d6:
88:d2:8c:10:57:9e:fc:ff:45:8a:70:9d:b9:e0:84:97:31:8e:
6d:36:58:a5:ce:41:7f:dd:85:93:b5:f6:95:fb:64:05:d2:31:
c4:b2:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:41:58 2025 by rpki-client