Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
File: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer (raw, json)
Hash identifier: azUg+kKtZAEAh2eQBB2XXv/vhCqxlVLA98fiQGkK5SE=
Subject key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01986461B97BB7739D49031A375B49848296
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Aug 2025 06:46:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207173
AS: 207900
IP: 185.160.184.0/22
IP: 2a07:bf00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:61:b9:7b:b7:73:9d:49:03:1a:37:5b:49:84:82:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 1 06:46:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:4a:c4:3c:78:b5:e5:05:8d:96:5b:28:3d:
e2:6b:23:08:24:21:55:02:8c:81:58:8f:d8:cf:ad:
d9:fa:47:bf:3a:de:c2:fe:fa:0e:28:69:b3:1f:53:
68:86:36:7d:28:fa:62:ff:8a:03:62:45:02:79:6e:
f5:82:13:71:d8:15:b4:26:b4:31:87:13:d2:1f:ad:
32:a3:5b:6c:f4:90:b7:26:ba:ac:33:1e:4d:6d:e7:
51:2f:24:77:7b:c6:f8:87:08:a1:3d:83:95:c5:bf:
ff:53:7d:83:43:4a:46:68:7b:89:aa:4e:0f:25:38:
1c:ba:6a:18:8a:8c:12:52:bd:cd:68:43:ac:5e:b3:
20:f7:d9:9e:1a:22:f1:82:4b:d1:44:a0:a3:0a:28:
6d:85:e4:99:1d:76:b8:d3:ca:65:86:a4:6d:c8:5c:
c8:24:c8:3a:7f:ed:78:cd:aa:8a:f3:5e:fe:44:55:
c1:41:45:2c:2f:02:36:24:62:db:2b:43:ca:5f:5f:
58:db:46:d4:06:47:4b:2a:30:93:39:58:14:5f:7c:
20:2e:aa:d3:36:76:88:5f:41:2e:4e:a1:bb:0a:6d:
20:0d:87:9f:aa:59:74:cd:a4:34:f7:10:8f:de:cc:
5e:e0:2f:8c:12:8e:8f:88:94:01:6d:73:ba:67:18:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.184.0/22
IPv6:
2a07:bf00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207173
207900
Signature Algorithm: sha256WithRSAEncryption
4e:e3:3d:fd:04:03:dd:01:7b:43:d1:01:d3:6a:33:68:33:b5:
81:b9:aa:34:28:24:50:3b:62:9a:24:20:d4:11:07:26:cd:72:
7a:ba:ca:59:2d:2c:84:87:ed:26:f3:f0:93:40:5f:7b:59:38:
39:e5:e5:65:66:49:70:39:e1:76:0d:3b:d4:1b:4c:e7:79:c1:
9c:58:cc:2d:f6:17:47:ea:4c:ac:15:a9:29:3f:ce:51:70:10:
df:ba:04:41:ce:f9:60:6b:6c:b6:da:50:71:13:7c:a6:d2:b0:
09:43:c3:5f:cc:a6:4c:0c:3f:fd:d1:c1:41:9c:b8:12:c5:50:
c4:a0:0b:3c:e9:97:6d:f1:8a:0a:a1:d1:e9:b1:43:dc:85:c2:
c4:e8:21:24:fc:0c:f6:9b:ec:f9:63:7b:7a:76:c1:9b:9b:18:
6c:8d:fc:d7:d5:3b:4c:5d:14:77:ea:42:f7:78:c0:cd:f9:0a:
fe:68:16:16:76:e4:18:a5:7d:5d:3d:40:ae:b7:99:cd:fa:8f:
28:aa:37:07:ab:b7:a0:6e:a4:c8:27:1f:6e:8a:df:3b:3c:a6:
7b:93:99:86:b6:cb:41:b6:38:54:60:6e:be:6f:0b:a3:80:f3:
d0:35:7c:b1:0b:49:f6:4f:b3:26:e0:b5:f7:ef:79:53:96:96:
b9:f4:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:55:49 2025 by rpki-client