
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
File: 1QylITQTxwqeg7R6gqfEV53UwZY.cer (raw, json)
Hash identifier: 9MLXyeXS02GBKJykwGJl2NGZxO+BCp5LrGi1JoXAuUk=
Subject key identifier: D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198D1F9BCBE88C69325991063AC8BCD00EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 22 Aug 2025 13:31:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43293
IP: 77.93.64.0/20
IP: 2a01:350::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:f9:bc:be:88:c6:93:25:99:10:63:ac:8b:cd:00:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 22 13:31:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:d9:b9:6c:4c:f2:a6:90:a4:0d:b2:16:0a:
5b:26:b0:b6:43:3b:c0:53:2d:d8:2d:43:fc:95:57:
f1:10:7d:1f:ed:fe:67:80:1c:90:6c:c1:b4:76:00:
16:1e:76:f8:9f:98:27:1a:97:a5:59:89:c7:25:af:
0c:22:dd:c8:42:09:32:69:16:29:aa:37:a1:fd:7c:
dd:7c:c9:f0:0a:74:be:98:e8:fa:58:a7:97:2c:de:
5c:53:13:d3:bc:da:ab:0a:79:15:ce:74:a3:bb:77:
81:54:9c:03:b8:70:00:6b:67:9f:e0:10:92:ae:31:
67:2e:eb:61:87:1f:16:01:75:0a:83:ea:0d:7d:3a:
da:da:f4:33:95:e8:59:5b:b0:42:c4:a9:eb:2d:68:
e4:18:d5:2a:11:e9:eb:87:23:07:82:21:14:db:e8:
6d:52:77:91:a8:81:ff:59:40:56:61:84:16:0b:6a:
a9:a2:4c:41:d7:e3:df:63:4f:d4:d6:00:cd:21:f9:
52:97:5a:e6:81:b8:2b:d5:e2:5f:c4:e5:ec:0a:c9:
72:56:63:16:58:af:5f:6b:83:93:f9:4c:8b:2f:2d:
e3:41:50:d7:2d:5d:d8:5c:b2:cd:95:6b:2d:81:e8:
f8:43:15:53:97:15:cb:dc:3b:ac:5f:cf:ef:60:d8:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.64.0/20
IPv6:
2a01:350::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43293
Signature Algorithm: sha256WithRSAEncryption
77:97:cc:1e:30:1c:05:54:65:b2:6a:c7:f2:26:85:45:e9:92:
16:f0:11:c5:c5:57:89:4c:e9:d5:b2:7c:95:f3:a2:24:4b:82:
a1:ed:ed:46:3e:32:89:93:08:30:a7:7b:a9:21:f8:98:7d:f9:
26:92:94:a0:42:55:16:e0:7e:01:c1:01:83:c0:90:0c:bf:3a:
81:eb:4c:3c:27:4a:46:67:00:00:9e:4f:53:bb:90:de:56:19:
27:10:dc:4f:15:fa:e3:45:0d:24:c4:0e:0e:48:b4:39:f4:74:
33:8c:03:03:83:b8:ff:25:a6:16:5e:47:56:4c:9a:04:78:65:
23:7b:69:b8:c3:63:bf:84:d6:3e:4e:af:a7:c6:d3:21:66:68:
ac:a7:e6:65:c5:2e:eb:b5:b4:78:52:55:46:cf:ac:6e:03:7d:
1b:49:1e:33:bc:17:da:e4:67:75:71:f2:3c:24:dc:b1:70:38:
4b:68:96:ef:d1:7c:5f:b1:cc:aa:0d:90:f8:ff:69:dd:3a:e7:
95:bd:69:9d:69:e2:6a:97:d1:77:f8:aa:c5:0a:e3:8d:43:45:
03:dc:84:44:a5:cd:da:94:b2:d5:40:3d:a8:52:56:2e:8b:e9:
c7:9e:55:b1:63:13:62:3d:ab:7a:53:60:70:03:63:2a:a5:bf:
f1:af:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:17:50 2025 by rpki-client