Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
File: rc47owvQQ0BmFuIx-DHAO8cN_sM.cer (raw, json)
Hash identifier: 1iIilE0ubE7iuIY9LRZZQW+5yHlLQmSRv9LcCkUE4zM=
Subject key identifier: AD:CE:3B:A3:0B:D0:43:40:66:16:E2:31:F8:31:C0:3B:C7:0D:FE:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA2CB18191E2366A4772417DC392D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.242.97.0/24
IP: 2001:67c:18a0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:2c:b1:81:91:e2:36:6a:47:72:41:7d:c3:92:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adce3ba30bd043406616e231f831c03bc70dfec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:fb:92:30:be:98:b1:57:db:bc:f6:c6:79:
5b:39:b8:2c:02:f6:37:00:88:64:26:0f:62:16:c2:
0e:a6:5f:1e:a2:15:5a:3a:2b:2a:b8:b1:b2:7b:06:
93:9b:83:f8:7b:81:e6:bf:03:99:cb:88:bb:5f:a0:
07:48:30:fe:71:21:88:f3:4d:f1:27:2a:fd:ab:5b:
91:64:c7:e6:38:e1:41:64:6d:6a:da:04:7d:37:34:
c1:d3:f5:46:1d:71:9b:f0:de:a0:70:1e:a6:40:50:
ab:86:b1:79:da:fd:c2:05:f0:c6:69:d2:11:6f:77:
fb:39:22:a6:d3:e2:73:35:be:6e:ab:d8:77:5f:ad:
e0:50:25:b4:bc:97:21:63:2e:c8:ca:1d:a6:a7:7d:
97:22:7c:cf:6f:ad:65:a3:a2:e8:2c:02:58:5e:16:
5f:a4:e1:25:8a:d1:5a:4c:09:40:ed:66:97:57:04:
c4:ff:59:53:99:68:55:85:b0:51:5d:0d:0a:98:c1:
9a:a6:b1:05:68:c6:c5:30:92:67:23:0b:72:96:67:
5e:39:da:9a:b6:93:d2:d1:ff:e7:f2:c6:64:ea:8d:
57:c0:96:1e:f4:9d:ec:2c:a4:78:79:f1:c8:2c:92:
b9:79:05:6a:29:5f:7a:a6:44:1c:49:61:8e:88:56:
46:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CE:3B:A3:0B:D0:43:40:66:16:E2:31:F8:31:C0:3B:C7:0D:FE:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.97.0/24
IPv6:
2001:67c:18a0::/48
Signature Algorithm: sha256WithRSAEncryption
60:1b:99:23:c7:49:63:17:24:11:84:63:39:04:44:8c:1a:f6:
29:95:c1:77:27:04:cf:f5:80:84:2d:cf:2d:40:0b:0e:73:0b:
e4:7a:5a:2c:7b:d3:cd:ef:73:e5:28:0b:c7:37:b5:ae:64:03:
7f:33:cd:05:55:de:64:b2:27:f1:84:14:1c:6b:ce:1d:4a:b7:
0e:f2:6f:35:d8:4a:cf:36:65:10:71:6c:76:aa:57:d0:77:08:
95:54:af:bf:01:73:f3:5f:93:58:c7:89:79:5d:2a:4e:91:6b:
c5:31:90:ef:04:22:01:7b:fa:4e:da:fc:71:e2:5e:17:78:3d:
2d:3b:90:44:99:7d:be:30:37:91:77:ac:24:f3:ad:fd:60:c1:
12:55:12:09:55:aa:47:93:f9:29:ee:53:75:05:c0:a2:94:1e:
45:18:a5:51:a2:be:79:cc:f1:b9:88:6d:40:d0:d3:f0:7e:f4:
3a:40:6e:1b:07:be:59:0a:36:90:67:17:6f:16:39:da:44:fd:
f1:40:4d:c7:19:4e:ae:55:83:a0:cf:a7:0e:ea:f0:44:28:19:
c0:9c:12:25:3e:77:50:91:2d:be:06:38:c8:80:dd:47:68:d4:
11:45:f4:de:d9:8a:cd:73:1a:7b:16:c8:ee:6f:0d:1b:6a:31:
fa:cb:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:20 2026 by rpki-client