Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
File: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer (raw, json)
Hash identifier: TQ48pOjJha1QhtsDLnxDo5sJ1SBpQEMK3vqaMbMqR3o=
Subject key identifier: FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198C059CB34EC5776700D4DF07C0F3C46A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 19 Aug 2025 03:22:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205648
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c0:59:cb:34:ec:57:76:70:0d:4d:f0:7c:0f:3c:46:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 19 03:22:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:b4:3c:9f:13:45:2d:35:90:ae:2a:57:89:
b4:0b:39:4f:03:e0:43:9d:a9:99:07:3d:b5:73:99:
d6:32:aa:eb:d3:53:fd:42:d3:eb:01:46:1f:2d:13:
e8:71:1b:5a:c4:62:f6:f3:0b:da:2a:38:cb:64:eb:
74:88:e2:13:2f:4f:00:28:ce:0b:ad:a6:80:8f:2b:
5e:31:50:51:4b:da:fe:b2:04:90:8f:1c:82:db:1e:
99:59:e4:b3:e6:fe:92:5f:d3:7f:a5:f8:9b:12:21:
77:b1:e6:4d:d4:30:5e:45:10:d1:69:b5:a4:5a:c6:
45:ce:ab:b0:c8:ca:33:ba:3a:a2:56:a5:47:72:74:
45:d3:d6:dd:0c:0b:4d:17:44:5e:00:5d:c1:77:0f:
f5:7c:36:ce:af:5f:0b:89:78:80:1b:e9:4f:82:4f:
bf:bb:8d:f4:db:a0:de:85:c1:18:cb:27:f9:76:52:
c2:87:32:fc:66:8a:c4:62:2f:7b:fb:2a:fc:38:9c:
a7:d7:d4:9c:53:84:69:ea:8d:89:b3:bc:8a:6d:fe:
88:12:60:a8:23:ea:88:05:81:da:a0:dc:85:2e:15:
d6:a9:02:4d:c7:c0:61:a6:c0:ac:ba:ab:fa:c8:de:
5a:fd:b8:52:51:00:a7:3a:f9:16:3e:cf:ac:f6:e7:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205648
Signature Algorithm: sha256WithRSAEncryption
1e:9b:36:59:91:53:db:87:d7:a9:c9:40:b2:62:bd:33:50:50:
3b:13:f8:99:8b:5d:18:44:00:38:64:e1:99:a2:2f:a7:c2:1c:
5a:c2:8a:b9:ce:de:8a:9d:3b:10:64:97:84:53:04:7c:d9:e8:
13:9c:9d:e2:cc:8e:e7:2e:28:ec:60:bf:5d:67:bb:77:a8:eb:
b8:44:3f:57:f7:a0:f1:2f:2f:92:6f:05:7d:dc:44:95:a1:7f:
44:ed:bc:ab:9d:ca:49:2f:e2:91:c1:95:71:71:43:db:b2:d2:
72:6c:de:c4:43:95:06:5c:18:15:b4:69:34:88:28:f1:c9:f9:
cb:d8:92:06:e9:4e:1d:7b:4d:79:a0:20:c3:98:6f:a1:f8:43:
57:1e:2b:6f:b2:82:5f:5d:d2:a0:f5:24:82:c3:29:cb:30:7e:
66:6a:dd:0a:cb:fa:6e:84:ec:4f:cb:96:b8:92:b4:55:35:1a:
01:0a:e7:1b:7d:c1:6e:4f:e5:97:4b:c7:04:46:fd:e5:40:ef:
13:f9:76:58:58:94:50:7b:f1:82:0f:84:0b:a9:11:24:5a:b1:
0f:4e:41:04:25:e4:27:72:47:2f:b3:48:47:80:3e:c5:e3:a3:
e0:59:55:a4:b3:a2:90:65:4a:d5:c7:6c:03:39:38:65:e7:8f:
42:86:32:f7
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAZjAWcs07Fd2cA1N8HwPPEanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwODE5MDMyMjQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWViZjEwN2YwNWZiYTlkNGU0Y2E2MWFlYTBjMTc3MjUxOWY1ZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXm0PJ8TRS01kK4qV4m0CzlPA+BD
namZBz21c5nWMqrr01P9QtPrAUYfLRPocRtaxGL28wvaKjjLZOt0iOITL08AKM4L
raaAjyteMVBRS9r+sgSQjxyC2x6ZWeSz5v6SX9N/pfibEiF3seZN1DBeRRDRabWk
WsZFzquwyMozujqiVqVHcnRF09bdDAtNF0ReAF3Bdw/1fDbOr18LiXiAG+lPgk+/
u43026DehcEYyyf5dlLChzL8ZorEYi97+yr8OJyn19ScU4Rp6o2Js7yKbf6IEmCo
I+qIBYHaoNyFLhXWqQJNx8BhpsCsuqv6yN5a/bhSUQCnOvkWPs+s9uc1WQIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFPrr8QfwX7qdTkymGuoMF3JRn144MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzA2OTYy
OC05N2RhLTQwZmUtOWEwOC02OGVmODgyYmM5NzMvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvMDY5NjI4
LTk3ZGEtNDBmZS05YTA4LTY4ZWY4ODJiYzk3My8xLzEtdXZ4Ql9CZnVwMU9US1lh
Nmd3WGNsR2ZYamcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDI1AwDQYJKoZIhvcNAQELBQADggEBAB6bNlmRU9uH
16nJQLJivTNQUDsT+JmLXRhEADhk4ZmiL6fCHFrCirnO3oqdOxBkl4RTBHzZ6BOc
neLMjucuKOxgv11nu3eo67hEP1f3oPEvL5JvBX3cRJWhf0TtvKudykkv4pHBlXFx
Q9uy0nJs3sRDlQZcGBW0aTSIKPHJ+cvYkgbpTh17TXmgIMOYb6H4Q1ceK2+ygl9d
0qD1JILDKcswfmZq3QrL+m6E7E/LlriStFU1GgEK5xt9wW5P5ZdLxwRG/eVA7xP5
dlhYlFB78YIPhAupESRasQ9OQQQl5CdyRy+zSEeAPsXjo+BZVaSzopBlStXHbAM5
OGXnj0KGMvc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:10:25 2025 by rpki-client