Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
File: 1-v3j2ZJau-IPw8bZGEx99nBH-54.cer (raw, json)
Hash identifier: CT2Pmt2ECTZZCmK/6gwXf8x2c07tPqYPoAUqy/AwYhE=
Subject key identifier: FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01999830F54D8B38A30EA9ED3E306FFA3816
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Sep 2025 01:16:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216276
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:98:30:f5:4d:8b:38:a3:0e:a9:ed:3e:30:6f:fa:38:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 30 01:16:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fe:1b:df:25:d9:98:a2:69:29:35:ee:5f:13:
38:2c:13:9a:aa:95:e3:15:98:cd:b0:dd:48:b9:24:
3e:bc:1d:97:cb:34:8c:f8:99:98:96:9a:05:7c:06:
4d:dc:e9:90:a6:cc:8f:f2:5f:95:27:56:b8:f4:bb:
6a:e4:f5:47:af:94:e2:72:4f:6c:70:50:0a:dd:53:
e8:f8:9c:95:f1:47:ec:cb:ec:b4:a5:05:dc:aa:3e:
24:f9:11:97:5c:aa:5f:7d:e9:6a:d4:2a:66:fe:fc:
6a:99:e6:2c:b7:ea:7a:f5:ae:5c:7e:69:eb:80:33:
ea:0c:2f:49:e0:67:12:f6:18:6e:8f:1f:46:c5:12:
e2:48:f5:c7:a5:41:d9:fd:83:e9:8c:f6:43:e9:cc:
3e:43:88:ad:b1:9f:64:f9:62:28:41:dd:6c:81:6b:
2d:6c:e9:c0:14:4b:3d:e4:56:07:92:98:8a:8f:48:
75:3e:90:90:1b:d9:1d:88:d1:66:a1:f4:c0:03:f5:
cd:ea:25:f4:5d:98:aa:d8:5a:be:50:8e:2c:94:c8:
72:6c:9b:60:eb:f4:ce:8a:62:c6:db:3c:6b:eb:df:
0c:40:f8:2d:28:03:1c:1b:30:b2:af:68:b9:7a:f7:
80:f9:18:78:e9:61:f9:ea:33:be:6e:69:88:50:21:
1a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216276
Signature Algorithm: sha256WithRSAEncryption
88:92:b7:61:fe:c8:3a:d2:0a:e1:10:02:99:49:c7:e6:87:a1:
06:91:a6:8c:01:5f:cc:98:cd:14:9f:20:73:d9:84:8f:fa:3a:
69:8d:2c:d8:90:65:f7:9a:cd:9e:6e:11:fd:31:86:70:c4:61:
fd:b2:59:a0:2a:ef:30:73:a8:a4:04:10:fb:70:70:89:74:f1:
a9:b8:66:c7:05:68:3d:54:4b:b9:4e:22:f8:05:d5:79:75:6f:
21:67:3e:b1:33:1c:e2:e7:ed:8e:b0:72:0b:32:27:50:af:7e:
48:2f:de:83:72:c7:f1:5e:20:c2:f6:d7:1f:13:01:4d:a5:d0:
98:cb:b9:90:f9:da:79:de:01:e8:15:5d:00:aa:8b:02:74:86:
9d:81:99:0b:eb:1c:9d:ab:d7:a9:5a:a1:20:e8:89:5c:b0:a4:
81:e9:13:e9:3b:9a:5b:6e:2b:7f:78:6a:a1:82:c9:0a:cd:65:
c2:39:0c:05:17:27:17:0c:83:54:5d:b5:3a:7c:a8:ab:22:65:
20:ca:9e:5e:4e:c2:fd:c5:ee:d4:db:39:ec:00:cc:f2:b0:15:
0e:f1:f0:c4:9a:81:bf:f2:7b:22:7a:fd:68:41:49:8e:07:17:
ef:54:64:41:2a:aa:45:dc:79:3f:e4:f7:85:ec:12:c6:5a:80:
c6:2e:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:05 2025 by rpki-client