Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
File: nla1Ht856_BmKyyDTWXRvR3oJSI.cer (raw, json)
Hash identifier: a55Ia+eXijqKMtpAbp4aRc6oQGFi8Tg8ieIH95OyPgU=
Subject key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A11E1FD0D4B898A12C03476EF7CBBB9F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Oct 2025 16:23:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.18.10.0/24
IP: 2a0c:2200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:e1:fd:0d:4b:89:8a:12:c0:34:76:ef:7c:bb:b9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 23 16:23:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:55:d9:0d:15:96:ec:53:62:35:56:df:65:64:
15:7c:35:ea:8d:b4:8c:60:37:a7:25:a2:9e:cf:0c:
32:a9:04:fc:2a:e3:33:94:a7:51:c5:fe:40:90:05:
aa:1b:2c:b5:19:b9:d9:dc:98:04:31:ba:b1:32:4c:
54:4b:dc:e7:4d:66:ed:f8:9e:6c:19:b8:f5:0f:18:
3e:a8:56:11:3f:36:42:33:07:67:f3:ac:ff:c9:30:
ef:d8:a9:da:ae:fb:9a:22:31:7c:9f:2f:1b:e9:92:
31:a8:55:11:a6:9f:4f:76:77:07:67:a7:cf:9f:a2:
fd:01:d3:72:55:10:0a:02:fa:3d:9b:94:d4:50:fa:
54:96:25:f9:00:a7:1e:4e:a4:8f:38:13:3f:44:cf:
1e:00:2c:f4:1a:6d:e0:fd:d6:9a:56:98:a4:33:29:
0a:13:20:ac:b2:b0:a0:ef:33:8e:4a:e5:ce:22:53:
e6:be:a6:28:b8:16:f9:a5:ac:6c:bb:b8:45:02:91:
b7:72:f5:cf:5a:76:73:0f:9f:c7:c2:4a:05:72:48:
e6:a5:5d:49:a6:0b:b7:88:f1:94:a2:b1:36:a3:54:
a5:15:ff:8b:ca:e1:51:98:53:62:3f:96:e3:a2:d5:
a5:a4:33:16:21:c8:90:e2:86:55:31:8b:59:89:4c:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.18.10.0/24
IPv6:
2a0c:2200::/29
Signature Algorithm: sha256WithRSAEncryption
62:b6:41:19:8c:b1:79:fe:0a:75:0d:83:bc:5c:cf:85:67:52:
29:3c:8e:22:91:3b:df:1f:4a:a0:3c:4f:68:1f:3e:f5:de:1a:
55:4b:f3:3c:36:e6:f3:a8:ed:1a:28:d6:62:57:2b:a2:e0:bf:
34:d1:9a:a3:27:68:d0:b9:52:80:55:eb:a7:07:31:f9:c0:6f:
da:c9:00:dc:35:96:46:55:7f:4b:3b:72:c8:f6:ab:ef:51:15:
28:e2:d5:82:96:9d:6f:d8:fb:bc:38:87:1f:a2:5f:26:9d:b6:
4e:78:61:c1:ee:bc:71:03:f7:ac:d3:56:b1:61:6f:c2:8f:ca:
d5:29:01:d1:a8:a5:75:04:7f:37:5e:e2:eb:e3:54:73:ca:ed:
00:b4:5f:4c:77:f9:0b:80:69:c7:25:36:67:8a:7a:b3:69:af:
78:2f:cc:06:1c:eb:39:2f:39:a2:ce:d0:1d:54:02:d2:26:33:
2c:b8:4e:fd:40:ea:11:a5:91:01:f0:71:85:0b:3c:50:2a:5c:
20:59:e4:22:6a:d2:3f:4b:e4:36:60:9a:66:b4:ea:45:b7:c7:
25:da:a5:7e:d0:60:7f:91:14:64:0f:c8:b4:20:5d:9c:0c:82:
0a:f5:bd:b3:f9:94:8c:e6:a2:ae:7b:34:a3:1f:cc:8a:6d:a7:
6f:e6:9b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:14:47 2025 by rpki-client