Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer (raw, json)
Hash identifier: 6bGVE6xjxZEOryE193xEycLxo5WsvujFdvHc5Xn/yvw=
Subject key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019876F9336EBAC6E6E530B5D551AF311C43
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 Aug 2025 21:24:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 109.207.101.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 13:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:f9:33:6e:ba:c6:e6:e5:30:b5:d5:51:af:31:1c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 4 21:24:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=209faf93524bb80774ffce9341f495a8fb318f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:5c:f7:aa:cd:a7:18:97:17:a2:f1:ae:5f:
50:35:bb:1f:38:a8:35:08:7d:38:08:50:8a:53:08:
26:91:2b:63:90:cc:e1:94:a3:79:48:f3:15:c6:a5:
68:1c:19:77:d0:87:7c:4f:88:ee:7a:8e:d2:09:f0:
bf:49:fb:05:40:52:67:6e:5e:93:f8:d1:cd:5c:42:
cc:3f:df:19:a1:c6:64:6d:5a:98:4d:ea:74:d4:dd:
0b:7e:dc:ea:49:89:5c:0f:fd:e7:bb:0a:35:19:1f:
ec:96:74:2a:50:b9:20:16:8f:20:04:86:25:9d:20:
50:ab:96:61:dc:22:d1:6e:70:40:af:83:3e:23:cd:
ca:0b:b2:8a:5b:ee:75:ec:bc:f3:d4:3d:0e:12:e1:
0b:9c:68:63:42:6e:37:8d:b0:8d:45:bc:61:aa:0c:
a9:80:a2:06:ba:2d:64:9b:13:ee:46:3f:b8:dc:a4:
8d:98:c1:27:1f:15:78:29:16:64:89:34:4d:5f:e1:
9c:22:3c:b5:e3:2c:04:bf:ea:f2:0a:28:c9:9a:2e:
4e:61:d3:1a:b0:fa:b9:bb:45:37:83:3b:ac:c8:5c:
ed:27:d6:07:5b:b3:12:52:f3:ff:f8:df:fa:89:aa:
f9:53:21:98:85:4c:97:bc:65:bd:64:70:a1:09:4a:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.101.0/24
Signature Algorithm: sha256WithRSAEncryption
18:11:b0:12:f4:82:53:50:ef:0a:97:1e:43:ec:58:b1:68:82:
df:88:09:4b:08:cc:8c:12:0f:bb:4f:0b:4a:2a:e8:06:4c:c0:
f8:2d:92:46:76:96:01:e5:19:c7:26:3d:a6:2b:dc:25:92:48:
fc:1b:60:a2:8d:03:74:37:c2:6a:19:0a:59:1e:c0:79:12:db:
c2:35:ac:0e:cc:5f:58:05:01:36:37:e0:88:49:f3:5f:a2:af:
25:e7:b0:c3:be:4d:ee:0d:f8:6f:a2:7e:96:8e:7c:f3:80:b0:
a8:2f:1f:fc:e3:a1:3c:4a:c1:1f:10:49:ee:14:83:c1:1f:1c:
1c:e5:f9:f4:a4:b8:02:37:4d:0d:54:2c:e9:01:8c:2d:6f:fe:
46:59:28:6c:b3:12:93:59:dc:55:56:c5:da:90:c6:8b:77:2b:
5e:40:06:eb:ec:1f:ec:d3:b2:85:2f:39:01:5f:4c:7e:1b:d5:
34:e9:78:6e:7f:20:0c:b2:70:84:94:2d:6c:c6:f4:fa:1f:5d:
66:42:b6:20:cc:fc:d0:b5:bb:e3:9a:b9:0c:e7:d1:a0:e5:34:
ca:11:20:b2:fe:2f:e4:31:d2:01:3b:9a:8b:48:ad:9f:74:ba:
1f:c8:6f:8c:05:4f:0f:23:28:de:ea:f2:03:d9:8f:af:65:c5:
95:32:d5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 15:48:13 2025 by rpki-client