Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
File: mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer (raw, json)
Hash identifier: cZAECTAK3R6oydpBhwtWnSMeeU6FGgGx+bsbw2auWps=
Subject key identifier: 98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA620354943635DA75C076CF80EBCD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.135.219.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:62:03:54:94:36:35:da:75:c0:76:cf:80:eb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=983750f247069679b83eedfd7bd565ea46789a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:c9:bb:d4:56:09:34:a7:a3:ad:fb:41:08:
43:36:fc:fd:ad:cb:d8:1a:59:a2:12:7a:c1:95:68:
31:66:15:38:ac:99:9a:c9:05:19:e3:81:0a:17:2d:
26:22:af:89:63:b1:0e:6b:dc:a9:c8:45:1a:48:85:
7f:39:56:e8:8e:ba:96:43:f5:3d:5d:42:c6:43:19:
44:33:c0:94:6f:66:8e:81:15:30:ac:50:d5:87:37:
a3:20:12:0d:0f:8f:32:d6:56:c5:55:d2:8a:ba:4c:
3b:4c:e4:4d:86:6e:ad:81:7d:f8:7b:64:c3:db:09:
fd:be:ee:51:d1:ba:f3:f5:14:cc:72:6b:e8:eb:68:
66:10:9e:54:04:c5:91:c5:b2:af:4d:d3:8f:8e:58:
be:74:0b:df:73:34:16:65:b1:ca:64:38:fc:4e:60:
3f:47:b0:8a:54:2e:cd:50:ab:75:35:00:fd:8e:32:
b4:eb:68:4d:fc:94:01:9c:11:00:0f:8f:1f:38:9d:
58:7d:4a:46:51:79:54:76:b7:a5:c3:c4:8b:fa:ed:
ec:fa:87:52:7b:15:5f:5b:77:0e:e7:8c:9b:cf:23:
e7:aa:a7:b7:9f:b3:ce:63:af:60:ff:08:da:9b:00:
a1:30:63:44:c1:af:e7:3f:5b:c7:e6:53:b0:20:dd:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.135.219.0/24
Signature Algorithm: sha256WithRSAEncryption
14:80:24:3c:cb:f3:dc:d6:73:b8:a8:5c:00:2c:73:e1:64:08:
b8:e5:ef:91:d2:35:98:4b:25:3d:72:9e:4e:23:44:4b:92:e8:
0f:43:1d:a1:d2:24:4f:2d:ab:42:1f:e1:c5:7a:e0:56:57:61:
2c:6e:d8:ce:dd:24:19:e3:b7:43:a4:52:66:02:80:a2:8d:ec:
c9:64:6a:6a:ad:9f:db:4e:dc:65:8d:01:69:23:a4:8f:6b:56:
98:3b:08:23:b0:9b:d5:ae:fa:f6:10:95:4d:03:48:2f:6b:53:
18:1a:ab:30:27:23:72:be:39:74:84:54:a7:a0:e3:15:ac:50:
ad:88:27:e9:fd:bb:43:c1:87:ea:1e:c1:bd:c4:d0:ba:31:c6:
0e:02:9f:ae:e5:6a:f4:75:44:46:fc:83:5f:d2:68:9c:ca:96:
29:20:19:45:ab:87:1f:c7:c7:28:1f:29:69:b4:8f:53:3a:b8:
00:e3:ea:0b:a1:61:32:1d:6a:96:29:6f:b7:8d:00:b9:c3:98:
b4:7c:50:be:75:ac:2d:98:e2:9c:45:a8:05:da:a5:af:e9:43:
b9:bb:0a:87:f7:d0:26:9a:71:cf:4d:2a:49:61:71:5c:2f:73:
b8:cd:cc:69:27:4d:4e:0f:7b:e5:91:d8:d9:f9:9d:83:d8:c9:
1e:54:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:26 2026 by rpki-client