Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
File: pPTBZVXW8DttbI0KjMvhrx6uxDo.cer (raw, json)
Hash identifier: mnnZ2g1Hms+wBGXTry1643+61LXqLCkQVISNSlLUoJo=
Subject key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01987E559AC8D410E4EBD0232E071964AE93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Aug 2025 07:43:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.104.113.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:55:9a:c8:d4:10:e4:eb:d0:23:2e:07:19:64:ae:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 07:43:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:53:ea:a4:ae:85:fe:e9:77:c5:99:cb:99:
9c:60:54:b0:86:4d:cd:1d:50:0b:90:13:9a:13:07:
c8:56:83:43:67:9c:9b:94:2b:9c:7d:ce:f0:41:ff:
09:a6:54:83:b4:34:44:4f:df:21:cf:84:04:44:7b:
97:c8:6d:d6:d3:cb:f0:32:59:28:7e:f5:7c:f6:c4:
8f:25:20:9f:3e:c5:9c:a2:af:c2:cb:a3:96:7a:d2:
b2:93:0e:0f:2c:2b:b8:22:94:2a:7a:af:91:cd:54:
b1:b1:3d:38:c8:10:4d:1e:f2:95:f4:9b:6e:36:0e:
ee:14:06:47:af:bf:4b:83:d0:8c:21:22:36:73:bc:
99:0a:dd:a8:f8:d0:d3:ba:86:1d:75:31:ac:a3:33:
5c:c9:c6:fc:39:43:68:a2:85:2f:70:70:e9:f0:84:
97:04:e2:3e:a9:b9:f4:55:72:e5:32:54:bb:22:07:
6a:7a:9e:c8:e9:f3:fd:14:e8:55:2e:9d:1d:fe:13:
a4:00:5f:97:1c:34:07:cc:5f:2f:18:d4:67:fb:6e:
98:c7:54:04:45:af:cc:d7:cc:61:f9:38:32:4e:16:
e6:99:9d:03:ff:cb:a7:40:cc:8d:22:ea:49:a7:dd:
5b:be:8f:76:1d:ce:4d:15:08:07:eb:68:83:d2:03:
ce:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.113.0/24
Signature Algorithm: sha256WithRSAEncryption
95:59:b4:1a:cd:90:0a:2e:ca:f7:7f:62:86:33:68:64:9a:9e:
f6:08:95:33:2d:dd:91:fa:c5:7c:0b:fd:5c:d6:a1:a4:09:e9:
c2:66:f0:d1:fe:e9:53:46:fa:4b:b9:a2:c4:f2:81:63:1d:38:
fc:52:15:bd:45:1e:9e:fe:6c:e2:66:dc:12:5c:e1:80:d5:b5:
c2:d9:69:ad:c4:26:8e:aa:79:c3:5c:11:6d:b5:57:05:19:96:
d1:3f:da:ec:65:4c:52:d1:a0:d2:d2:f4:f1:b5:23:60:d7:5c:
77:da:7f:28:85:dc:dd:67:dc:60:00:52:3e:bb:6d:bb:e5:88:
22:b0:d4:80:13:db:ba:e7:37:10:a3:a3:81:da:bf:9b:93:18:
3e:87:28:29:15:4c:1e:b5:b0:0d:ab:f2:08:19:37:b2:8c:f8:
01:8f:77:30:74:9b:11:27:ca:bb:b8:31:04:5b:64:64:13:a3:
71:cf:fc:dd:94:f2:fb:25:7d:ed:95:2e:45:2f:82:81:2b:3d:
c0:03:04:95:b5:ac:1d:7c:8d:76:d8:aa:66:51:ff:d1:98:b4:
76:ba:02:14:19:37:ab:49:0e:9d:48:6b:af:c4:f2:e0:94:ec:
85:5f:d2:d3:ba:b1:d7:1a:84:d5:1b:bd:c1:0e:57:c1:54:d8:
5a:41:2f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:08:06 2025 by rpki-client