Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.cer (raw, json)
Hash identifier: 85zOK0V+N44htOK9zW87ww1dd2uERrUN/22nze8/S1k=
Subject key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198601C9968D2E70957630270F93DD86E23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 31 Jul 2025 10:52:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.158.200.0/22
IP: 2a04:c980::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:1c:99:68:d2:e7:09:57:63:02:70:f9:3d:d8:6e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 31 10:52:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:ea:ac:4e:ba:fd:f3:ab:d1:7d:22:4a:29:
25:ff:62:25:0e:76:85:c6:40:c4:2c:a8:7d:eb:3f:
23:f3:98:10:35:88:68:f6:e7:4e:9f:9a:de:a6:01:
9d:e1:a9:64:5a:8e:96:15:38:b7:41:bc:92:40:a9:
a5:d2:d9:ad:cf:0e:a3:23:dc:6d:c1:e2:29:43:26:
7d:ee:b3:35:17:32:3b:61:54:d1:26:7a:12:9e:86:
89:0f:5a:dc:20:09:fe:bc:6b:4d:20:4d:8d:61:a2:
9b:1c:a7:17:ac:5b:89:5e:03:a3:7c:7c:87:5c:08:
39:aa:b3:63:21:ed:fa:ad:6a:45:3b:b7:ce:15:e6:
df:da:07:09:bc:1c:81:c7:2b:22:95:09:c0:ea:0f:
8f:40:56:e9:21:68:d7:eb:03:1d:77:67:49:0c:ff:
0f:06:c7:2f:7a:c5:38:76:5a:f3:eb:99:62:fd:04:
3f:15:47:df:bc:90:c0:40:9c:73:e0:6b:61:a5:98:
a7:bb:53:f6:8e:63:9f:8f:52:28:e0:65:49:f6:4f:
bb:81:5a:90:66:68:b0:b2:f4:55:f8:7e:61:03:86:
4a:96:e8:66:1a:27:79:54:38:1b:78:0c:34:ad:77:
f8:51:31:e4:b1:ed:4c:87:9f:18:0d:2d:ac:13:1d:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.200.0/22
IPv6:
2a04:c980::/32
Signature Algorithm: sha256WithRSAEncryption
af:9c:31:f2:cf:d7:a2:1b:62:ca:fc:2f:3f:06:79:3f:4e:0a:
41:96:6b:e1:7b:de:62:dc:4a:06:50:96:3b:51:18:8f:bb:ff:
87:ca:64:04:95:5b:4b:93:88:e5:b4:cf:5c:dd:cb:0f:eb:19:
08:34:26:7a:26:54:df:14:72:2d:03:f4:28:db:b9:56:21:97:
a6:7c:17:c2:5d:b3:2e:06:f2:82:ea:01:2e:c6:85:36:5c:0b:
52:7c:65:e9:ce:d8:63:c6:99:65:e8:93:cb:e4:d1:2e:03:6a:
f6:9f:fb:3b:61:11:57:38:93:4e:59:02:db:f8:60:9d:e2:14:
0c:05:2f:a6:3c:11:96:f1:b5:74:1f:19:cb:cf:53:e4:2f:e8:
89:0b:0f:d1:c4:07:04:95:10:97:36:da:44:1b:66:68:1d:50:
7d:b9:22:9e:b2:a5:6d:a8:6f:4d:1b:f4:7d:7e:45:8f:f7:e7:
6c:6e:6f:9e:31:15:41:46:a5:3a:17:ce:60:45:5f:2f:1f:58:
a4:a2:c1:d7:d9:ef:e3:d7:71:9d:88:1c:df:5b:80:fd:08:ea:
df:09:f2:79:d3:a6:37:e9:a7:da:bf:24:59:54:0d:8a:b8:ee:
30:cd:64:27:17:01:cf:65:67:9a:e7:93:98:e5:53:60:6a:c9:
3b:65:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:07:33 2025 by rpki-client