Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer (raw, json)
Hash identifier: MWxFdXhxotsIx960dPGIfU/w2G6n6Uxa+8gi2tGoUh0=
Subject key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01975E177B5AA57854FB362A5250ED20A5FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Jun 2025 08:24:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.198.255.0/24
IP: 193.36.34.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:17:7b:5a:a5:78:54:fb:36:2a:52:50:ed:20:a5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 11 08:24:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:27:40:81:9d:20:60:85:0e:2e:a0:df:12:
7c:84:80:41:f4:43:7a:51:1f:7b:dd:e8:1d:ee:75:
62:07:f3:e0:d5:00:2a:58:1a:ed:a9:23:f8:5f:25:
16:f0:c4:c1:f5:ae:19:f6:72:4e:b7:2b:ae:5c:9a:
8a:7a:6a:de:9f:4b:a8:2e:fd:38:68:a3:a1:56:d1:
2a:cb:c4:88:17:24:db:b1:d6:b2:2c:33:0a:89:d0:
32:ac:55:3d:b9:22:ca:2f:cb:cf:e8:e9:da:5e:83:
25:83:f4:a5:50:7a:10:d3:f8:31:fd:77:fc:40:4f:
e1:15:c6:68:64:ac:79:df:8c:af:7e:12:81:7d:70:
c5:37:22:9d:bc:b8:fc:09:6b:89:fd:3b:3f:c0:a8:
be:86:10:7b:55:4f:17:9a:e0:ec:b1:f5:99:39:a2:
e3:5c:34:d4:fd:17:b3:ed:ac:ee:01:25:0a:cf:5a:
fa:19:b1:33:b4:c7:61:d8:20:ca:a6:fd:93:69:d6:
95:b2:72:1f:3e:0d:e3:9f:db:a5:f3:5e:ff:40:02:
f2:0b:d7:ef:64:5f:cb:de:a1:b1:6e:86:71:91:f0:
c1:03:21:3a:c3:34:ea:b6:49:34:3e:f1:e0:ad:1f:
86:61:d7:5c:34:32:fa:d4:c8:18:4e:30:a6:fe:05:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.255.0/24
193.36.34.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:61:a8:73:4c:47:76:ce:f6:03:b5:a9:81:cb:05:25:aa:3d:
aa:aa:9d:34:c8:09:7c:38:f8:55:66:c7:f8:91:78:8d:5e:40:
b4:e9:6e:48:42:a1:7f:4a:f9:1a:d9:2a:9f:d9:b3:2e:a8:d6:
03:48:8b:74:00:1a:ed:be:8b:e4:50:62:cf:24:81:3a:ed:2a:
b0:09:7b:9c:d0:4a:0d:9f:33:62:c5:7e:df:ce:0e:9c:da:49:
1e:92:03:78:a0:21:41:3e:36:88:86:a8:93:f6:28:ad:72:4d:
17:41:c6:78:63:f9:e9:56:1b:10:29:e3:8c:79:45:21:ac:6f:
ff:07:6b:6f:69:48:0c:26:9e:4e:4b:b5:e4:db:aa:6b:3c:66:
de:27:21:b9:6d:b4:76:8c:7e:17:1b:de:56:83:e6:c4:34:78:
15:ad:d5:ed:5d:2d:60:5d:bb:4c:ed:95:9b:cb:1f:f7:fd:cd:
2b:8c:94:0c:50:bf:63:7e:c5:6a:47:ef:61:f2:3f:d1:52:fe:
de:f6:66:60:61:43:f2:3e:5f:22:0b:c8:15:73:95:ab:75:44:
7a:34:0f:37:61:76:08:52:7c:cd:cf:bf:4f:fa:c6:60:1b:87:
0b:e8:59:b2:b9:00:a9:06:ee:a7:64:6e:f5:1c:ea:c1:d0:06:
50:99:16:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:45:40 2025 by rpki-client