Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer
File: El8g0e9f8vAdgiSGvZ7or01la38.cer (raw, json)
Hash identifier: 7h1mTZY2DicTl4T8BbwXTe+RToi8/jMrbwfxrOwSfwk=
Subject key identifier: 12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01997AEA305EC28023F18756C2A5AFE9BD29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Sep 2025 08:49:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49667
IP: 91.213.106.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:ea:30:5e:c2:80:23:f1:87:56:c2:a5:af:e9:bd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 24 08:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=125f20d1ef5ff2f01d822486bd9ee8af4d656b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:ac:3c:a3:2f:99:75:4a:d2:3a:23:8b:fc:
a0:06:e6:41:dd:8a:1e:8e:64:f6:85:39:2f:97:d7:
0e:a3:cc:c0:f2:f0:ad:d8:47:2f:98:8b:67:ca:6a:
19:17:88:06:91:9d:de:90:51:ab:73:07:cc:9d:99:
4f:dc:e6:48:04:7e:93:c3:bb:8d:b8:9d:fb:11:99:
b4:2b:17:b0:5f:3d:bf:d0:2c:e0:d4:6f:2b:25:db:
5e:c8:53:a3:4f:37:17:60:eb:3a:c6:af:7d:f3:e0:
2c:0f:ca:a4:16:bf:ca:eb:50:4c:e7:76:41:40:b6:
f2:69:28:67:47:8a:66:02:a4:65:57:ba:91:95:15:
49:1f:6e:1b:0e:af:83:0d:c6:91:fe:f6:07:c1:36:
6b:25:ae:ce:83:d6:81:ed:63:07:5a:94:50:02:a7:
a6:f3:e3:2e:1e:23:c6:39:96:0a:4b:2b:86:72:d6:
0b:bc:6a:e2:96:c6:f2:50:9a:74:d1:3c:2c:d6:d9:
8c:68:9d:84:72:a5:39:59:19:fc:7d:db:ad:6b:51:
01:33:b3:b7:37:59:7e:5e:90:56:c1:0e:40:80:04:
74:25:40:42:3e:ab:63:c5:c9:50:82:50:d1:81:b8:
c3:1d:47:e2:23:d1:52:f5:9a:51:ac:c3:72:63:7e:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.106.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49667
Signature Algorithm: sha256WithRSAEncryption
54:0a:d3:48:66:8b:0f:8e:44:7b:97:76:10:bd:76:4a:ee:37:
e2:e3:f6:ed:6d:96:4a:45:1f:c6:58:88:d4:b2:56:02:a0:a8:
97:4a:b5:f5:fd:63:4b:66:9a:09:e4:fa:aa:b0:2d:f8:29:ae:
3c:2f:94:f9:c4:75:fc:8c:99:01:23:8a:a7:50:e7:fd:e0:13:
ef:fb:f2:b8:f9:67:d3:f8:04:87:5d:da:6c:41:68:1f:01:7f:
29:50:d6:12:a1:56:84:38:8b:f9:a6:6e:71:9e:46:93:66:a5:
b4:ce:14:33:06:0b:b9:a3:81:0e:2e:de:a2:77:c0:81:af:f2:
a6:6b:9a:1f:7c:2e:17:0e:c9:e6:3a:99:05:91:92:04:98:95:
5e:79:bc:f5:49:f8:3c:2e:f4:df:28:c9:07:54:8f:b8:25:12:
7b:b3:37:b2:ca:72:c0:6b:ba:89:8c:b1:8a:e7:a5:59:73:c7:
74:02:27:e8:bd:42:d5:6d:3c:67:47:99:29:f2:b2:8f:eb:a8:
27:40:4f:38:29:e5:5c:35:b1:59:ba:00:f7:5c:0e:89:85:c4:
8c:a9:27:9e:7f:c1:6f:71:b5:6b:b5:2e:84:e0:1a:05:bd:cd:
5c:a4:2b:27:10:1c:19:d8:30:c3:03:76:40:f7:6c:5f:06:87:
35:23:65:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:31 2025 by rpki-client