Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.cer (raw, json)
Hash identifier: KSG9hf9KvtGlro66dkutVRz/GhwSziXilyGFBwTz7Zc=
Subject key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01995C634279BCCC0D1468EDA84072C0A245
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 18 Sep 2025 10:33:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197415
IP: 62.182.176.0/21
IP: 185.50.84.0/22
IP: 2a00:c920::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:63:42:79:bc:cc:0d:14:68:ed:a8:40:72:c0:a2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 18 10:33:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89703a9823512b18d176e362ea023ca824784d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:2f:41:4b:b6:ba:0f:dc:76:22:84:8e:78:
24:3c:ef:3b:dd:fd:4d:4f:6f:f0:2f:1a:1c:53:ba:
ba:97:44:cf:62:9f:15:fe:67:4d:39:1c:7d:66:ad:
01:70:8f:6a:d7:d1:8c:47:4f:28:45:59:cb:03:50:
0d:9d:ba:46:b8:1f:55:c5:78:ea:ba:f2:e7:b7:52:
d2:d0:9e:50:10:1c:11:45:e6:07:e3:c0:8e:32:79:
96:7d:92:7c:39:14:8f:32:13:19:4b:d7:19:18:35:
ac:34:7a:a6:9d:a0:5e:f4:20:19:66:a1:27:23:a4:
59:72:af:fd:a6:c3:d9:78:74:76:fa:5a:50:e5:10:
93:be:b1:1e:40:d6:32:8f:dd:f9:b8:6b:8c:22:70:
0f:91:40:24:73:2f:7e:a3:22:94:7e:73:7a:c2:74:
d5:5c:12:01:b9:60:07:08:fd:6c:e5:b3:2e:20:f1:
fc:11:93:ce:58:31:68:a4:de:03:56:a2:d7:82:8d:
61:4a:90:5d:b8:31:04:08:47:ea:b1:8d:47:fc:bc:
64:73:b8:a0:cf:03:be:0e:fa:d5:e7:b9:48:d3:52:
24:b3:29:71:8f:0b:f4:95:82:3c:7e:f0:86:35:2a:
dd:49:e8:34:e5:e2:6e:71:03:4c:08:80:64:8b:6d:
74:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.176.0/21
185.50.84.0/22
IPv6:
2a00:c920::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197415
Signature Algorithm: sha256WithRSAEncryption
aa:9f:34:28:10:09:1e:58:3c:a0:96:b2:ee:d1:91:c3:b5:9f:
23:34:1d:6b:3d:8e:74:28:0a:66:a0:10:e1:47:27:2a:74:08:
53:58:c7:1c:30:74:96:99:e5:28:2d:78:d8:44:60:28:ef:57:
90:22:9b:04:74:37:a0:b0:08:9a:00:10:c6:02:7a:a7:f0:43:
1f:b0:b6:20:d0:d0:e3:61:01:57:cd:9f:2a:fd:9a:2f:32:92:
81:56:f0:79:e8:07:f6:8a:56:cc:b1:52:9e:7e:d8:0c:62:b7:
bb:6f:58:17:d4:fe:80:85:5b:ae:4c:b8:8e:5d:96:67:a2:3e:
09:22:6b:a8:58:c1:61:d9:6d:54:30:3c:6f:1f:6a:56:41:40:
8e:04:78:93:43:3f:2a:72:e5:4e:7c:ba:19:b5:85:98:cf:a4:
ec:50:41:40:43:56:01:44:0a:da:3e:73:c9:1b:31:28:05:48:
ff:88:b9:31:71:28:87:12:2c:11:ed:a7:64:61:5c:fb:17:6d:
10:65:a4:44:1b:e0:5e:c7:a3:8f:fc:f5:f0:5e:67:d1:8f:a0:
87:12:ba:4f:23:d8:c0:54:27:68:01:0a:e4:bf:bf:02:ef:0a:
4a:15:c6:c1:95:3f:01:d1:d4:23:0c:2d:f7:93:e4:ef:f6:cc:
e4:47:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:38:36 2025 by rpki-client