Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.cer
File: 6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.cer (raw, json)
Hash identifier: G2NblrT8nfK9/Q2vILIIqBhH1Q2lUgJZ+EMzXl3fI9U=
Subject key identifier: EB:24:89:83:06:20:4F:71:AF:D8:76:34:CC:69:55:BF:42:BB:52:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01997331B89B94DD156DD6EBF29741668D8E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Sep 2025 20:51:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215760
IP: 2001:67c:5c0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:73:31:b8:9b:94:dd:15:6d:d6:eb:f2:97:41:66:8d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 20:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb24898306204f71afd87634cc6955bf42bb5244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:60:ea:f5:18:b1:85:2c:0e:68:ef:47:90:
ee:82:56:1e:a8:45:cb:2a:5f:81:75:b2:20:62:55:
53:50:d2:d0:78:56:b5:7c:16:77:cb:99:ef:58:c4:
5c:b2:91:70:ef:25:e7:33:fc:7b:d8:2c:8b:52:42:
5b:9d:e1:c9:03:6a:75:fb:fd:b7:34:37:b8:1b:4e:
7c:a7:f4:87:1b:5f:20:f9:65:fe:e8:f5:4c:37:cb:
07:32:e7:90:dc:0e:3d:cf:18:08:20:c0:35:f7:88:
65:af:88:bf:08:57:82:00:7e:1a:40:db:d3:10:77:
4b:fb:a0:80:f0:91:57:00:e6:8f:28:a5:07:62:21:
76:de:15:fb:a0:a6:73:2f:43:0d:c3:50:65:37:39:
21:fe:70:98:73:99:91:e5:74:10:d7:be:02:d9:5c:
42:43:e8:32:be:5b:30:d5:d8:43:f3:47:26:3c:78:
2b:2e:dc:d3:0e:38:15:2d:bf:5e:09:d4:26:e8:c4:
8d:f9:f6:f5:6f:40:5a:e8:72:13:22:26:ac:ef:a3:
5e:c3:71:bf:da:f2:aa:e7:96:2a:65:1e:64:2d:da:
b5:c3:99:0e:74:f4:1c:45:7d:9c:82:b5:cf:c7:4e:
d4:4a:49:75:b5:c3:c4:7f:4e:7e:82:18:13:23:89:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:24:89:83:06:20:4F:71:AF:D8:76:34:CC:69:55:BF:42:BB:52:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:5c0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215760
Signature Algorithm: sha256WithRSAEncryption
25:29:d0:d1:09:b1:bf:73:b6:ab:a0:07:2b:61:49:a1:16:91:
ff:f4:49:24:ca:ba:b8:45:95:ff:d0:aa:ea:64:cd:2a:e7:01:
b8:d6:fa:db:12:21:77:a4:98:25:ea:df:60:61:8b:f3:aa:67:
68:23:20:9d:17:06:28:02:90:49:d8:28:d3:bc:d1:e9:d6:12:
2c:25:d1:b9:b4:b6:19:c8:d1:71:7d:13:04:0b:d1:c0:e9:1b:
0d:07:6b:5b:e9:e7:7a:e8:81:2d:9e:36:1e:04:d9:a8:47:f2:
d6:d5:64:37:c3:02:82:26:af:ae:5b:9f:a1:6b:ec:b5:f4:f8:
ce:f1:a6:6a:ca:c2:01:c1:b9:1f:ae:9b:fd:e9:02:9d:a3:e5:
0c:97:4e:88:3f:de:b1:a0:a8:34:72:a9:ee:d0:b1:91:f7:ed:
f0:15:f2:83:21:9d:c8:14:6c:c3:25:d6:0f:20:a4:e0:9f:8f:
b6:c0:35:a8:4a:80:fb:ac:5b:d6:99:f1:c0:06:f5:b4:fb:2e:
f0:73:d3:f2:ca:cc:8c:cb:4c:b5:57:6f:e3:63:e8:a3:6e:77:
eb:9e:f3:b2:d6:0d:c5:b4:da:4b:06:26:10:d6:a1:7f:4a:85:
40:78:cd:2b:7a:7f:2b:76:c0:f4:fa:5f:e2:1f:f7:3e:70:72:
fc:44:29:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:53 2025 by rpki-client