Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
File: mPTHV2iFwoKEpNZkCz7alOMAtyw.cer (raw, json)
Hash identifier: He8R5hWSyleuk3zQbGNmOs1OC9kYIFpyq0sX0S85kHw=
Subject key identifier: 98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAFC5A63AB0F2A0A815E73D22B0F83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 147.122.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:fc:5a:63:ab:0f:2a:0a:81:5e:73:d2:2b:0f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:46:ad:c2:a5:94:26:de:a2:ec:c7:24:05:
bd:a6:77:b3:b7:f7:89:84:53:c6:aa:b8:8d:66:8d:
d9:ba:79:ac:c6:b4:b6:57:3c:8e:44:81:8b:63:8e:
ee:15:11:22:a3:7d:b8:91:40:eb:06:b3:22:a0:fc:
de:de:07:23:fc:e6:dd:2b:bf:2d:67:5b:74:ad:3a:
9a:07:76:f7:99:01:01:9a:9f:76:e9:9f:bd:7f:ac:
14:9f:04:30:85:2e:5c:3d:3a:ac:41:97:fa:8e:ed:
d3:3f:9b:24:05:46:82:54:38:bf:f3:e2:74:58:58:
26:3c:5d:1c:2e:de:e4:cf:07:73:4d:99:d6:c4:04:
97:6f:dd:db:e1:70:49:c5:b7:86:28:1c:27:93:60:
df:2f:4f:2c:df:d3:82:af:93:18:e8:4b:20:ed:cf:
d3:10:2f:1e:8d:c4:7c:8c:36:47:a3:17:58:6b:28:
15:1b:3f:5b:d8:82:ec:c9:e1:58:56:3b:00:9a:50:
14:3c:71:46:50:24:7a:62:3e:19:06:ef:61:9c:7e:
d5:a8:da:7a:71:f3:aa:d2:d4:76:2c:3a:78:8d:f1:
92:89:99:9e:c6:d5:a5:d3:12:c7:c9:08:f0:ad:28:
b0:8d:18:32:f8:33:41:01:eb:d3:af:55:a6:e4:4f:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.122.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:6c:05:dd:07:c0:ae:93:61:3e:c2:f3:a4:e5:15:52:47:5a:
95:0c:f3:32:dd:f3:5a:ce:3f:07:bd:4e:2e:b3:42:1f:92:ce:
35:85:6e:d9:4f:e0:92:54:d0:03:f8:71:34:d8:53:fb:92:3d:
51:0e:0c:dc:76:c9:cb:8c:6c:9d:9d:f1:01:c7:ba:34:2e:1e:
51:41:58:af:49:9c:fd:47:43:e3:7e:bb:c8:8f:f5:c2:8e:43:
6b:f4:c5:f9:f4:3d:21:f4:e1:f3:ba:e6:38:99:3c:90:c0:3c:
e9:0f:eb:eb:9d:69:1a:61:a3:14:7d:d8:13:6b:7b:48:f1:5e:
9f:0f:11:56:9a:a9:89:01:ab:2b:fd:4b:a6:16:08:8f:d8:b7:
fe:3f:1c:8e:c7:d1:2a:7e:c7:5c:f3:e9:5b:b0:f0:5f:6f:e6:
df:70:59:99:cf:80:45:8f:f9:9c:6c:54:9e:e6:c9:95:fd:e4:
9e:5e:04:52:34:d1:dd:25:ef:3e:77:1d:b1:f4:21:f2:f5:62:
c1:c8:74:e7:22:50:d1:f5:27:4f:17:02:53:20:9a:17:f6:3f:
23:9e:5d:04:1a:0a:03:ca:54:72:29:a8:d1:2f:72:ff:67:17:
fa:a6:7b:06:e8:d0:b3:9e:83:de:48:4f:f8:7b:12:0c:d3:70:
cf:91:d2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:35:12 2026 by rpki-client