Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/V2is7v0e6ahf2pTII-EeSkJrkek.cer
File: V2is7v0e6ahf2pTII-EeSkJrkek.cer (raw, json)
Hash identifier: mG9m5dXYi7zapgmdUAiuZCCui5sePJwy0mthCXJDX1Q=
Subject key identifier: 57:68:AC:EE:FD:1E:E9:A8:5F:DA:94:C8:23:E1:1E:4A:42:6B:91:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A08C1CCD4D87D8BD35C4B59ABCD8443284
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/V2is7v0e6ahf2pTII-EeSkJrkek.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 10 Sep 2026 16:18:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.32.180.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:1c:cd:4d:87:d8:bd:35:c4:b5:9a:bc:d8:44:32:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 16:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5768aceefd1ee9a85fda94c823e11e4a426b91e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:af:3b:51:f3:61:ae:cb:f5:ce:ec:7e:64:
81:79:37:99:75:53:0f:0a:e3:47:d3:99:58:1b:16:
3f:1b:2a:1d:bf:7d:35:72:46:21:0d:ef:cc:4c:6d:
78:ae:61:40:0a:f3:9e:c1:ac:44:e3:19:a2:a1:f3:
73:b7:be:89:97:3c:5a:6c:e9:ed:c8:d6:25:f0:04:
2b:ff:11:b1:0c:ad:15:7c:a6:9b:06:85:4e:51:c9:
99:2e:34:da:81:a5:21:ae:b0:26:70:40:79:61:8b:
2b:36:2d:e8:6a:24:81:c1:89:94:30:bd:c5:2c:b5:
c2:e0:88:e2:de:71:91:7c:76:7c:8c:78:fa:46:2b:
95:4a:4b:e5:6a:eb:5f:d9:2f:a1:22:a2:3d:9e:0a:
3b:f7:4f:a5:78:3b:c3:7b:8c:95:cf:4b:4f:5d:71:
fa:21:27:d4:40:67:06:af:4c:9b:cf:b1:14:84:f9:
6c:1c:44:c7:e2:d6:07:59:a0:52:f9:ff:3d:f3:7e:
ba:a7:33:e0:93:04:15:63:9a:c2:df:53:bf:bc:cf:
e9:78:24:41:0e:93:cf:08:8d:3a:e6:58:a0:eb:5f:
eb:9c:14:5d:cf:6d:49:20:79:84:d3:60:75:76:59:
6b:1a:ca:6b:e2:80:d9:6b:74:f7:c1:fa:0b:55:3c:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:68:AC:EE:FD:1E:E9:A8:5F:DA:94:C8:23:E1:1E:4A:42:6B:91:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/V2is7v0e6ahf2pTII-EeSkJrkek.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.180.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:59:78:16:fa:ea:db:fb:57:5d:99:d1:36:5f:b0:e6:d1:8e:
45:00:29:37:70:6d:16:3c:78:83:7d:86:36:e2:9e:86:34:6b:
2b:c4:8f:98:06:ad:c5:50:0e:9e:af:7a:f8:a2:81:cc:d3:11:
be:ba:a3:1d:4c:73:43:f5:41:63:8e:37:00:aa:0f:9c:4c:35:
dd:7f:42:a7:c0:55:57:bc:61:e1:2c:3f:38:4d:b0:5e:6a:b8:
13:7f:c6:c0:e9:77:31:ab:f6:77:b5:f3:84:70:a0:bd:cc:5f:
49:3a:84:fd:d5:4b:8e:2e:1a:06:e0:5e:46:7b:04:c9:63:98:
fb:d9:51:72:8b:dc:1d:cf:b8:37:d4:15:47:f4:26:bc:c2:ec:
8d:a5:16:80:23:5e:a1:d6:14:ce:50:f7:50:b9:20:62:c2:a6:
fd:f4:c6:19:71:5e:e1:06:d7:70:32:f3:f5:b0:a5:f7:ee:a6:
c0:70:ec:1e:39:2f:54:80:e5:03:12:40:d9:aa:c5:66:cc:17:
d5:3e:a4:e9:27:1e:19:7b:62:12:76:9c:26:e6:cb:ff:47:95:
aa:b0:0e:14:9e:cf:a1:1a:5b:11:d4:7d:5a:be:b4:75:f4:9d:
b2:1a:4b:f7:53:72:70:97:1a:49:24:18:36:de:27:59:43:ed:
a0:a2:a8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:39:38 2026 by rpki-client