
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
File: 8dBXL-cpkb0yhUuscWZ269rSKs4.cer (raw, json)
Hash identifier: F8eVedXDDhM6PpXNZGWr36Mg8uoyXLN1hBR+ta4InP4=
Subject key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199C86F6D3F8D9A55303FBD91808799ECA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 09 Oct 2025 10:06:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48280
IP: 91.207.13.0/24
IP: 2a13:9640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:6f:6d:3f:8d:9a:55:30:3f:bd:91:80:87:99:ec:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 9 10:06:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:7f:d1:8e:19:39:9e:7b:c4:68:de:24:a3:
a0:ef:80:1b:1c:fd:14:50:ee:0b:ae:e9:d5:3c:47:
81:6b:18:75:2d:03:86:21:8b:43:4d:51:7c:f9:9f:
90:68:28:b3:fa:3d:d9:34:78:a4:fe:a9:bd:62:2d:
04:de:39:b5:5d:0c:5e:41:d7:76:d6:d7:55:fa:96:
1d:1b:1f:8a:02:b2:b7:7c:71:ca:78:75:1d:b0:2d:
ad:74:e9:ac:05:00:65:af:15:98:7c:90:f0:a5:a7:
6f:33:ea:b8:de:c3:4d:a0:a0:3f:d1:ee:66:99:08:
45:21:96:ec:54:5c:17:97:b7:63:e3:2d:0f:83:a7:
cb:7b:ea:1e:6a:1e:e6:5d:e2:17:1b:a1:48:4d:65:
5e:07:75:eb:83:ff:43:2d:72:76:87:21:45:54:38:
a3:cb:f8:8b:63:f5:d2:b1:cd:dc:3d:13:25:87:54:
70:d5:05:e5:ef:52:17:05:29:ed:58:7f:2c:9d:db:
fd:d3:78:ff:3c:1f:d4:fe:32:e0:47:4c:02:5e:00:
9c:85:49:01:2e:db:47:2a:76:63:d6:71:d8:b6:9f:
81:3a:b2:7b:b3:53:2f:bb:c0:ca:cb:b1:a4:4d:0b:
21:92:e8:ad:c3:71:c3:73:f3:bb:7e:2f:bd:04:25:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.13.0/24
IPv6:
2a13:9640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48280
Signature Algorithm: sha256WithRSAEncryption
87:9c:7b:6c:e9:ba:d3:88:d9:25:68:c3:db:ee:4c:93:fa:fe:
16:13:7d:5e:80:00:14:e8:e5:12:4c:94:c2:5d:53:a3:74:8d:
2f:cb:60:25:3d:1f:a2:3c:09:89:7d:a0:1b:00:f7:f0:80:a7:
fb:8b:07:13:ef:0e:15:15:51:0d:23:d2:04:a7:59:04:ce:e8:
bc:63:10:c9:ca:3c:b9:6b:bf:8c:b6:dd:d2:2b:a4:31:fe:4e:
9f:27:6a:b1:2e:d8:4e:18:78:3a:a1:a7:d2:52:28:a3:d4:c7:
40:ce:35:48:af:63:ab:ad:44:dc:36:3e:75:8f:c7:2b:4b:78:
c5:44:1c:02:8d:24:36:82:72:a8:d0:4b:ee:ad:5a:f5:75:0f:
1f:06:be:ac:85:46:b2:0e:c0:56:a9:71:de:01:7d:b5:1a:99:
55:cf:e8:89:ec:f5:de:6d:c8:67:30:55:82:e5:27:3a:27:aa:
58:dd:a1:19:a8:20:7b:9d:22:29:15:1e:78:c9:76:db:dc:2c:
6b:33:c1:7d:81:a0:29:64:76:1a:4d:10:ab:01:e1:b0:e3:64:
65:d4:b4:fe:e8:3a:2d:4e:c3:a5:e0:31:b9:b5:8f:d0:8e:36:
75:82:75:ab:45:ee:16:2c:d4:b1:0e:63:13:76:37:0f:86:39:
b1:e9:2b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:44:39 2025 by rpki-client