Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
File: DUxrauUAB3adKNmJcNJPvO4bo5A.cer (raw, json)
Hash identifier: dS2JZ5Of9JFtHoO3ywf3NqPPmLUInqn1Oqwmd/jibzQ=
Subject key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198BC3B96DE1026B29ED93639D6F9B7D826
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Aug 2025 08:11:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 171.25.217.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:3b:96:de:10:26:b2:9e:d9:36:39:d6:f9:b7:d8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 18 08:11:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:45:80:e6:27:2e:bb:30:5b:14:1f:35:fa:60:
91:69:e7:03:c5:da:b8:9d:9e:29:e5:32:4b:1c:b1:
a3:5d:b5:f1:f3:ce:7b:58:cd:4b:0e:89:56:57:ea:
05:86:75:de:05:7c:9b:85:62:3f:46:a6:9a:3e:3b:
8f:22:e5:15:d2:cb:b0:2d:4c:e6:d0:e3:52:4e:86:
ab:e7:e6:10:33:92:49:b3:04:7e:48:97:61:e5:b9:
81:bf:38:ab:0c:f6:29:2f:0d:7f:ee:3e:06:42:7d:
db:25:57:81:05:92:b1:8b:26:7a:36:df:a9:db:b4:
eb:09:49:6e:bf:78:4a:d0:59:81:0c:9c:38:15:56:
a3:ac:9e:a5:f6:64:6f:d3:47:55:b2:65:d8:6d:76:
90:73:09:8a:5e:58:9b:77:80:30:08:49:f1:88:3c:
6c:f7:fe:0e:39:7f:60:76:12:69:8d:bb:ec:a3:37:
a5:b7:b4:67:e3:24:b9:56:15:11:5c:b6:17:f4:6c:
a2:87:da:67:eb:d9:41:0c:6a:16:d8:27:96:f2:02:
85:10:0c:7f:6d:de:b3:44:c4:32:62:36:39:8a:47:
89:47:12:ac:0c:c6:65:ee:5b:da:19:0c:82:05:3f:
5f:90:1a:e1:1e:77:35:ef:1a:5b:32:ff:86:b7:7f:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.217.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2a:70:d7:95:dd:23:db:e1:a1:0c:77:59:29:69:49:87:67:
bf:ba:ac:5c:5f:7c:b4:c4:b8:ce:88:c0:cb:d5:b5:ed:d3:2f:
ed:b1:ff:96:82:73:40:db:f2:60:b1:bd:1c:14:14:e3:6f:74:
50:1e:d3:17:45:70:db:a4:9c:eb:11:cb:1e:6b:06:a8:18:cb:
4f:ba:f6:df:6b:2e:a6:69:85:b7:41:0c:fc:0f:00:eb:42:41:
bd:f0:d7:2b:23:15:d4:28:b4:8d:17:fd:56:5b:5c:dc:1c:2b:
11:40:7a:33:2d:fb:a8:73:b0:c1:3f:8f:e6:a0:4d:80:1e:a4:
13:1b:da:82:47:c8:eb:56:9d:a0:d7:75:fb:6b:1a:a3:0e:ab:
00:53:b2:64:96:98:48:d8:6d:fe:f4:be:45:5a:06:89:0d:5d:
d6:ff:19:4c:8e:31:e3:45:98:61:0b:78:af:63:47:70:01:9a:
f2:b3:62:8c:f4:c1:e0:90:a9:78:f1:83:4a:30:b4:bb:e4:09:
1e:75:2a:65:f4:94:75:f0:a5:0b:42:71:02:3c:8d:77:6c:f8:
8c:00:57:1e:4d:27:87:c6:e8:b3:8e:fd:37:67:6f:fb:dc:ab:
fa:e0:3b:6e:1f:84:fd:1f:d8:0e:0e:ca:85:67:24:97:19:18:
f8:d5:65:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:16:17 2025 by rpki-client