Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer (raw, json)
Hash identifier: y9ih0ZFpklUcYSNbEIijsLDPn5Rp3nz9xWLOsObuF5Q=
Subject key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198843AB45ED28FFF3C37D4E5880E475989
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 07 Aug 2025 11:11:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.239.21.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:3a:b4:5e:d2:8f:ff:3c:37:d4:e5:88:0e:47:59:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 7 11:11:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:76:5e:e8:3a:9b:8f:c4:4f:92:ee:c1:6a:
4c:14:fe:9c:a2:9c:46:4b:21:eb:c0:c4:fe:1c:00:
a3:36:43:9c:1b:06:ab:4b:58:2b:d4:ad:ab:cb:91:
44:ba:0e:a9:28:17:4c:6e:0e:a5:3f:a1:a3:aa:74:
a0:70:c2:e4:d1:58:cb:56:2b:e1:46:27:ea:01:ab:
57:a2:37:ea:97:25:34:90:34:fa:ae:6a:ae:d4:63:
79:d3:35:36:41:1a:8e:cb:78:cb:f1:bf:cf:26:09:
71:8c:4a:3b:86:67:87:94:8a:f7:37:01:81:a0:29:
72:15:5d:c6:eb:87:8e:84:e7:d9:b8:93:c6:39:db:
41:02:71:15:f7:36:da:d7:86:97:59:04:d7:08:db:
8e:ee:30:19:97:0d:fb:8b:80:e6:97:c5:48:da:9d:
50:18:b9:bf:3e:5d:42:fd:5e:6b:59:27:ff:74:35:
78:ae:1d:2d:ea:d9:ea:1f:92:1b:f8:87:c1:cb:0a:
05:4d:2c:1b:e3:b0:cd:53:b7:67:25:08:f0:6a:16:
d9:fc:f5:23:3a:65:45:6b:e5:2e:a9:6f:17:1a:78:
64:74:5f:73:b5:ba:e8:59:08:b4:af:92:cd:09:0f:
b8:4f:3d:3b:ef:3f:07:db:f3:ae:00:41:93:d6:09:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:cc:20:e3:d2:31:1e:4f:42:24:3a:ad:6d:c4:4d:c8:0c:13:
f5:33:d7:93:03:ac:07:50:d7:fb:cb:4c:4c:00:99:b5:a9:46:
a6:65:e2:8e:74:08:da:4d:9d:0d:43:5a:7e:65:74:51:0d:1e:
29:ef:0d:10:ab:7f:51:bd:25:07:fe:a5:27:72:93:2f:4c:0e:
8a:15:47:06:63:7f:6a:4a:a0:14:6b:29:c5:9e:0f:8a:bd:12:
4b:0b:42:09:22:3a:8d:31:97:07:8a:10:3c:7c:2f:bb:51:40:
23:7a:ad:e8:81:a6:6d:57:0b:43:c3:d8:3f:63:1a:88:b9:1d:
5c:d0:16:18:c1:2c:a4:b1:8c:e1:25:5f:0a:28:2b:be:ab:c4:
fb:55:f8:05:86:22:5c:b6:b4:02:3d:01:67:13:f0:d4:3e:9c:
1c:72:83:66:1a:ae:e2:0d:68:49:90:4f:04:a1:d2:4f:40:93:
dd:4a:c1:d9:77:08:e6:c3:9d:45:b7:43:7d:30:19:d7:b8:ca:
57:a5:64:1f:63:43:6e:c5:5f:c4:45:88:e3:28:84:60:1f:ae:
bd:0c:18:22:20:a1:c3:7b:3b:fd:6d:62:4e:85:94:88:84:d0:
58:4e:78:1c:22:78:b0:67:40:9e:b8:f2:34:df:4b:a7:6b:5d:
1e:06:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:13:35 2025 by rpki-client