Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
File: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer (raw, json)
Hash identifier: vilInsmprNF9hFdGCa8UPlx07wEWOL3ZNLvPke8iALY=
Subject key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199E334829F3BA8D3D953A9580303FADE63
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 Oct 2025 14:51:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215261
IP: 94.156.37.0/24
IP: 2001:67c:fac::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e3:34:82:9f:3b:a8:d3:d9:53:a9:58:03:03:fa:de:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 14 14:51:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e35607a494200ff1f3d599e25fc013f38640cd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:78:dc:87:f5:84:41:16:b8:37:3c:78:f9:24:
b0:0c:d7:43:44:ed:bc:a8:58:1a:33:5e:08:90:7e:
a3:cd:fd:b0:f6:16:94:70:cd:43:e8:57:0e:6b:97:
db:b6:bd:96:15:e6:9e:ac:35:61:8c:50:2f:1f:24:
55:d1:73:23:df:06:25:e6:84:fd:19:10:6f:0a:74:
ac:68:1a:08:7f:1d:7b:ae:0a:65:ba:e2:80:49:23:
0a:64:4e:10:a7:82:07:7b:79:10:90:04:8d:65:eb:
3d:b9:75:75:17:03:98:03:4c:44:f4:83:ed:49:a2:
7c:77:a0:44:de:44:20:93:93:e5:33:cb:c3:5a:7c:
77:d4:48:b8:dc:06:37:19:45:0b:fd:63:4c:38:8d:
b7:75:30:01:ea:64:bb:97:de:85:62:4c:37:43:ae:
d3:e0:01:57:b1:f3:03:7c:c5:f5:a0:b0:d0:a2:ce:
eb:9b:ac:2d:cf:25:9d:89:f2:9b:a5:6a:0c:a7:56:
cc:92:05:4f:7e:b1:fa:e8:14:f9:00:7f:5f:39:f2:
a0:5d:f7:85:06:05:c3:63:a6:f5:ac:b5:ed:41:6c:
c0:b7:11:b8:55:85:67:a4:a7:a1:6d:85:0a:95:82:
03:11:85:cf:72:16:40:5d:6a:3f:d0:01:56:1a:fd:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.37.0/24
IPv6:
2001:67c:fac::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215261
Signature Algorithm: sha256WithRSAEncryption
ab:c0:a8:5e:8d:c9:27:b4:ff:8c:60:99:68:e7:e8:61:63:b5:
f6:81:98:d1:ea:04:ce:9e:6b:2c:5b:d0:35:99:d7:5f:3d:56:
0f:ce:bd:bb:e5:bd:a9:2e:7d:ea:d8:c9:c3:62:64:03:90:95:
68:22:cc:58:51:4e:20:e9:96:1e:87:d5:aa:9d:fc:2c:40:b1:
59:26:9e:7d:d9:f6:d7:2f:1d:cb:8b:8c:b6:7a:fa:67:e2:0a:
9d:ca:aa:e4:f7:df:23:aa:5f:1b:77:b7:2a:34:fc:ac:ef:57:
ee:4a:20:f6:46:81:72:7f:74:86:1b:08:81:b7:b9:cd:94:cb:
03:ca:c3:6b:5e:16:57:bb:bd:ab:15:49:22:9b:01:a2:c7:25:
45:50:00:f7:11:cf:3e:39:21:81:9a:bc:2e:a8:3a:bb:ea:01:
29:14:97:35:c7:28:8a:df:2d:74:a6:8a:01:34:a4:49:47:72:
f9:c5:24:4a:1d:dd:81:94:c5:bb:9b:98:06:1a:a7:f8:86:ba:
c9:fd:4e:4a:6f:46:14:54:09:dd:c9:e1:3d:d4:5e:96:b2:a4:
83:78:ce:28:ca:cc:99:83:52:e9:c2:92:72:c1:01:33:ad:6c:
f4:f5:aa:5d:48:e1:fa:35:9e:ed:ed:fb:80:77:4f:bb:5b:4e:
04:0b:5d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:02 2025 by rpki-client