Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
File: pnac0wPoTc03o3XW52tgKfzDZ7Q.cer (raw, json)
Hash identifier: hzcmcnKLR+R3GPf7A6HTJ/8rBBfZBloNUH1n6TqF75g=
Subject key identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01992D91B43AB892FCD3396108EC3F9CF5E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Sep 2025 08:22:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.45.151.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:91:b4:3a:b8:92:fc:d3:39:61:08:ec:3f:9c:f5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 9 08:22:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:72:80:25:a3:21:22:cf:3c:5e:a3:b5:1b:
d5:82:7a:36:f9:95:2b:73:6f:c6:7d:da:0e:46:52:
3a:9b:e4:64:b6:f1:10:45:a0:7b:6c:ff:17:8c:fb:
31:26:c6:86:ab:7e:5c:8d:29:b3:bc:94:b2:a6:a9:
c5:a0:7d:69:e2:01:6b:f4:d8:d7:2e:fb:3f:6b:38:
bb:57:75:51:e6:90:1c:5e:d4:b7:b8:84:b8:30:2f:
93:45:b3:82:95:cc:30:4d:15:d4:61:98:d1:81:95:
95:25:b4:b3:c1:c5:8d:2f:ce:79:4c:68:e7:0b:55:
e0:21:eb:11:e0:e0:be:cb:ee:0c:27:58:f6:77:46:
1b:b0:8d:96:7d:49:f7:99:ce:20:e3:b2:56:c3:4c:
a7:02:d9:6f:6e:90:f6:ad:b2:ae:06:ba:e3:41:58:
30:e7:48:67:fa:59:28:e0:62:2d:6d:c2:7f:b7:7f:
a0:7b:af:c8:e0:a6:b0:bd:1b:d7:fb:0b:d0:cd:cd:
55:73:00:3d:95:48:28:6b:31:16:b9:31:b1:35:23:
26:0e:49:3d:68:2a:8d:4a:13:3e:74:0c:27:84:2e:
7f:e5:e7:4b:4c:b5:7e:cc:0f:5a:c9:bb:21:6c:92:
4c:95:de:0e:bc:e3:bf:00:e4:41:12:14:cd:1f:2f:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.151.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:76:20:21:77:6f:0b:82:94:73:bb:b4:32:b6:a7:50:f9:8f:
90:a1:64:e6:d9:6d:c2:1f:95:e4:09:de:99:8e:4d:2f:d7:55:
3b:88:bb:53:c7:39:10:da:1a:76:6d:aa:e6:b4:53:69:99:5f:
56:97:b9:12:f2:57:87:f4:33:ef:b2:ad:ec:e4:cb:f7:f1:4c:
c7:1e:42:bb:bf:19:d4:d0:22:90:5f:95:a1:8e:ba:da:b9:8d:
c4:31:01:75:55:c7:0a:f9:5b:69:01:e2:a4:29:26:77:9a:34:
f6:81:0e:eb:3c:e5:6c:25:0c:ab:98:d1:b9:56:dc:a2:f3:77:
08:d8:28:26:6d:d8:5b:6e:52:34:89:2d:c7:61:26:6a:57:e9:
23:59:b7:36:b5:00:d4:c6:4f:30:32:0d:03:28:cc:08:ca:9d:
65:bf:ec:c3:9a:2a:56:34:09:65:7a:ee:a0:9a:3e:0a:7c:c3:
52:dd:01:2e:bd:aa:0d:de:34:d5:18:5f:20:b6:84:5f:5e:f9:
7a:41:86:ec:db:2f:3a:db:b7:cb:37:3b:33:7e:8e:41:bc:e9:
53:c7:35:39:81:02:6e:4d:39:b2:ad:79:05:3e:60:b3:11:64:
4a:71:5c:5e:99:9f:e6:67:3a:62:85:fe:c8:b2:54:29:db:59:
d3:0d:f0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:06 2025 by rpki-client