Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
File: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer (raw, json)
Hash identifier: XLMShm9KHzDL1htD6hkQwsLcyVXsKfu0Z7FHlzsj3vU=
Subject key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198656B979524C5A7DA790EA32CB49C32A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Aug 2025 11:36:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 46.175.130.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:6b:97:95:24:c5:a7:da:79:0e:a3:2c:b4:9c:32:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 1 11:36:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:b1:bd:ea:14:47:fb:15:84:19:d1:94:44:
c6:2b:a9:c5:45:3a:75:bd:a0:f4:5c:f0:c6:cf:e0:
29:42:ec:67:04:99:e8:1e:20:0c:e9:df:35:82:04:
20:f9:49:59:63:da:78:fa:e2:de:c4:13:c9:b0:1e:
3f:6d:c1:b0:cf:ce:06:e6:30:4a:fb:6d:20:66:38:
35:b4:c3:36:d2:2e:b9:43:a4:a0:66:27:a1:ce:e0:
fc:27:c5:fb:5a:bf:44:09:21:a2:e0:92:ec:6d:d2:
d3:91:28:b3:f7:a9:35:fc:d3:9d:4e:45:87:84:61:
66:9f:68:0f:cc:49:28:68:25:b6:b3:85:23:8d:65:
e0:e9:9f:7b:ca:8b:c7:ef:53:2c:70:5f:d9:94:74:
9d:74:bc:4b:06:23:7f:40:23:59:7a:ee:dc:c6:16:
e5:4f:f0:61:bf:32:b4:12:73:a6:62:49:fd:b0:32:
35:9e:c0:43:65:ac:3a:ac:66:18:80:cf:38:48:1f:
23:0a:24:b5:2e:e4:f9:3b:8e:a9:2e:a6:d2:88:ae:
fd:e3:ff:01:83:ec:46:43:3c:c5:aa:7e:60:66:ea:
a7:bd:ae:2d:ed:5f:67:5c:9a:45:54:e2:1b:17:be:
a7:62:03:d2:f9:4a:47:3b:46:68:51:bf:f1:2b:64:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
Signature Algorithm: sha256WithRSAEncryption
63:f4:de:e1:9c:92:5a:64:c4:b3:9c:3b:41:75:54:39:77:61:
35:e3:8a:f3:ca:1e:7b:45:53:b2:25:8c:f1:e5:2b:16:6a:39:
8c:db:77:a0:50:43:24:70:af:39:d4:c9:7f:41:c2:50:b8:fd:
1c:61:b9:61:79:4f:2f:0a:bd:77:a2:3c:87:3e:b8:52:06:9c:
a4:61:f5:63:77:34:d1:35:a4:07:23:15:61:65:6a:65:eb:ea:
72:5f:20:bf:8c:84:e2:be:ce:7d:bc:1f:3d:95:c2:b7:e8:c6:
b8:d2:ae:99:52:36:f3:ed:3b:4a:8f:d3:36:3b:59:ef:c5:8b:
d4:7f:80:6b:34:7a:0d:73:0e:98:4b:2f:8a:ed:6a:e3:59:69:
09:a4:98:ca:6c:4b:57:c4:ca:d9:fe:5e:a7:cd:26:c9:d7:45:
c1:bd:71:26:9d:4f:2c:6a:99:ff:24:86:ba:17:c6:11:4d:66:
37:08:95:41:4f:24:78:c1:3a:08:ad:d0:9f:9e:a8:ad:7b:81:
93:34:ef:24:89:8f:3e:38:49:23:23:db:0f:b2:80:30:7c:cc:
07:ea:a8:7e:b8:76:f7:62:98:c8:6b:60:67:6c:9f:42:5e:a8:
9d:0b:7f:80:e1:9c:d8:1e:de:c2:2b:c1:99:52:bf:e6:d6:ed:
70:e1:f7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:27:22 2025 by rpki-client