Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66AaOmQRSwG_h52Kib6dFTF3bjs.cer
File: 66AaOmQRSwG_h52Kib6dFTF3bjs.cer (raw, json)
Hash identifier: jIw5rgOaogt7xJWFNeEVuZiUG+Z1IFf8vT923a4QI8M=
Subject key identifier: EB:A0:1A:3A:64:11:4B:01:BF:87:9D:8A:89:BE:9D:15:31:77:6E:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019888D59F5CB36F35A6840BF284DE43D6D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/66AaOmQRSwG_h52Kib6dFTF3bjs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 08 Aug 2025 08:39:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39182
AS: 44893
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:d5:9f:5c:b3:6f:35:a6:84:0b:f2:84:de:43:d6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 8 08:39:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eba01a3a64114b01bf879d8a89be9d1531776e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:45:40:55:22:c1:87:62:08:10:2c:5e:39:53:
45:b5:48:70:33:4a:19:d9:47:74:9f:5e:b4:fe:bc:
7d:f8:fd:d2:a7:68:09:fe:2d:10:93:ce:1c:be:a0:
53:30:ca:0f:91:f4:c3:ab:4c:ef:39:80:8c:28:0c:
b0:9a:a6:5e:78:8b:da:51:11:08:cd:76:4e:f2:2b:
b9:dc:cd:30:c4:e1:47:ae:ae:2e:3e:70:28:89:d9:
1a:fb:30:34:6f:ee:d2:c8:ab:99:02:f1:fe:db:a7:
f8:d2:34:31:9f:f0:9b:26:e3:3a:82:e4:b9:1f:65:
f2:6d:79:e8:94:a3:85:34:1e:43:bc:60:f3:a6:70:
48:b6:00:8f:80:d5:28:16:b0:5d:75:5e:6a:ad:2a:
c4:03:08:88:7b:03:76:b0:ce:ed:19:24:b4:e6:21:
3c:dd:33:c3:b7:64:6d:d0:03:8f:d4:67:31:f5:c8:
3b:8e:f1:e4:1d:45:c0:0d:14:cb:3a:78:29:40:3e:
2a:07:fc:57:ed:e0:47:4a:5a:7d:41:7a:ed:b8:e4:
fc:fc:ab:a2:bc:9c:cf:aa:2c:b6:ed:45:f9:10:30:
9b:90:bf:a8:4e:12:75:8d:6f:fb:04:d9:bd:b1:f2:
9f:5e:4b:94:42:74:64:ba:43:98:a5:03:1c:36:67:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A0:1A:3A:64:11:4B:01:BF:87:9D:8A:89:BE:9D:15:31:77:6E:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/66AaOmQRSwG_h52Kib6dFTF3bjs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39182
44893
Signature Algorithm: sha256WithRSAEncryption
33:d9:0b:a6:7a:b2:b3:38:fa:e8:15:d7:ad:f8:c4:88:69:af:
e2:17:e9:ea:77:be:bd:cd:0b:99:b2:7b:50:80:bc:67:f2:f1:
3b:47:20:ba:90:3e:e6:7a:02:03:6b:ea:c0:ca:af:12:6f:59:
9a:8a:f0:3c:fe:b7:d7:b4:17:ff:d8:ed:65:39:57:ec:7b:1e:
54:e6:7e:c4:a0:91:f1:f9:e2:9d:3e:94:43:8b:3b:11:29:81:
f4:04:db:5e:eb:8d:76:fd:53:68:db:ba:12:89:83:c2:34:e5:
90:2a:69:eb:4d:e4:e8:75:0c:ec:2a:c4:47:6a:e7:69:dd:a2:
ae:07:43:f7:0c:0b:7d:74:0e:5c:97:e2:bc:5c:59:71:d5:07:
a8:61:a1:2f:1e:40:02:30:f1:a3:98:8e:4f:0d:d5:3d:ea:84:
c2:fa:36:bf:aa:87:81:b0:1e:37:ce:54:97:f4:15:9d:90:24:
91:2e:9d:7c:b2:01:ce:73:05:96:83:3b:74:ad:9d:25:ae:1e:
83:cc:59:95:36:d5:34:51:bd:b8:dc:5e:4a:92:29:ee:13:47:
d9:12:0b:14:ef:1d:e3:fb:4e:cf:1d:81:98:91:7a:84:4e:c7:
6f:f6:c3:ed:e4:35:1a:8a:f2:d6:6f:50:d6:28:85:1f:31:c6:
6a:71:ca:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:39:13 2025 by rpki-client