Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
File: 8-hh3LY0GJOsTmMm723kNEHmaUM.cer (raw, json)
Hash identifier: 1htYP7j/YsSpiYGJqtqOT5qYz5fWPinXE4PLozFe/Ok=
Subject key identifier: F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01997AEF85C93E173B8CE4C97AA54F2B40BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Sep 2025 08:55:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21061
IP: 193.110.8.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:ef:85:c9:3e:17:3b:8c:e4:c9:7a:a5:4f:2b:40:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 24 08:55:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3e861dcb6341893ac4e6326ef6de43441e66943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:a1:de:98:4f:28:e4:12:b1:01:bd:4c:72:
5c:b8:b1:56:6a:08:55:2b:20:e6:be:25:df:8a:b6:
e2:ef:e8:c9:a2:6c:b0:16:b9:21:b3:25:9c:b6:6f:
f6:d4:c4:b4:40:89:91:9c:8d:65:bd:3a:bf:6b:70:
df:3c:cc:b3:94:97:36:dc:e7:32:eb:96:11:07:73:
ca:13:ac:ca:f2:1c:2c:ba:8a:cc:66:6f:e9:80:6e:
49:ac:98:03:ba:a0:d2:5f:14:f1:08:43:a1:7e:2d:
9d:db:97:22:84:94:2f:02:47:a3:da:79:28:f7:5a:
60:f1:5d:a3:0f:f2:22:56:eb:1e:d0:ac:ee:d3:72:
85:ec:e0:61:f5:ad:ef:c9:28:4b:db:b2:ef:d4:81:
2d:05:bc:54:75:d7:cf:90:3b:12:8b:45:5a:4d:bb:
6b:35:8a:12:6b:02:d3:38:1a:54:27:14:1c:b6:78:
fb:cd:b4:8b:89:ae:5b:4f:96:cf:83:ee:6b:78:c5:
50:14:34:57:50:1a:2a:7d:a0:3f:53:c9:98:59:76:
ff:40:57:a3:59:c1:3b:0c:5c:9f:97:29:5d:7b:bf:
be:97:6d:f6:29:0a:3f:52:25:79:0d:34:49:6f:43:
de:58:a7:10:46:a5:a6:7f:9f:94:ff:cf:f2:51:01:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.8.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21061
Signature Algorithm: sha256WithRSAEncryption
2e:f1:42:93:7b:a1:94:40:94:d6:75:c9:e4:3e:4b:90:cd:0f:
54:8b:12:aa:33:94:6b:2a:42:d6:57:99:9b:77:11:74:80:fa:
b3:f0:3a:18:cb:b8:c3:f8:a4:53:0e:c2:b9:d7:ec:64:52:37:
f4:4a:f5:cd:a2:13:cc:b9:6d:9f:64:76:7c:ea:ba:77:cb:24:
d7:23:c6:fe:9a:cb:a9:02:1e:1f:c0:ee:ea:36:4f:d2:06:75:
58:b1:c0:81:93:dc:67:c0:d3:0d:61:49:c5:05:e8:fc:01:f3:
66:36:60:93:11:27:5f:42:9b:d8:64:dd:52:9c:6c:87:76:51:
6f:ca:93:d8:af:b8:e6:8d:e1:3b:34:87:0c:97:7a:a4:6a:39:
ec:7b:1b:fb:00:c0:2d:fd:13:e1:b3:43:bc:48:ff:63:7a:41:
7c:8d:fd:ff:42:7c:12:67:3c:91:e4:d3:8f:b1:a7:ce:5a:4f:
54:a3:5a:77:69:c8:90:90:71:9a:6f:c1:57:4b:e7:a8:77:b6:
40:f6:e1:5c:65:2a:f1:57:4a:b7:89:2d:cf:a9:1a:2c:9e:a4:
6e:ec:3b:7d:b0:18:6c:d6:fc:0f:71:21:48:51:5a:9f:93:d5:
e2:26:96:ca:33:ba:bb:0f:6e:a8:6d:50:6f:26:b3:df:c2:52:
58:ed:b6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:49 2025 by rpki-client