Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F9elKrbseLxKdZt8RmMqo-Jgsug.cer
File: F9elKrbseLxKdZt8RmMqo-Jgsug.cer (raw, json)
Hash identifier: wR7SpfK6CwqiDPHo54GYZTlIOZuLkgv1eWqrt2AQ4O0=
Subject key identifier: 17:D7:A5:2A:B6:EC:78:BC:4A:75:9B:7C:46:63:2A:A3:E2:60:B2:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198BDEE6251116D0D52512DA194DA5675AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Aug 2025 16:06:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215511
IP: 185.159.90.0/24
IP: 2a07:940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bd:ee:62:51:11:6d:0d:52:51:2d:a1:94:da:56:75:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 18 16:06:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17d7a52ab6ec78bc4a759b7c46632aa3e260b2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:3e:e4:a4:73:66:d9:e1:9f:67:5e:ed:ca:
ee:93:e2:0c:88:35:62:f8:72:2e:fb:37:53:20:23:
2d:85:00:68:94:e2:21:51:c1:12:67:01:db:8d:fb:
e5:6f:d3:07:fd:c9:67:7b:6d:b6:ed:b2:6a:ca:d4:
67:58:ad:28:cd:9c:dd:77:b6:56:ea:c8:48:ef:9a:
68:6b:d9:a7:27:6c:1a:4a:27:78:e6:8a:42:6c:7d:
d3:bb:65:6f:3b:bc:cd:e8:54:85:57:c1:80:a2:48:
cc:d0:39:1f:c3:71:49:bf:77:e1:a6:89:04:47:12:
d2:96:d9:84:62:37:33:ae:57:f6:56:45:d8:55:17:
80:e8:97:62:2a:27:f0:7c:19:8a:b1:1a:08:42:a1:
cb:4b:77:da:db:e4:32:28:c8:04:5b:64:d6:72:b1:
07:9b:22:9c:b8:52:01:6f:19:35:5b:3b:c8:20:c4:
55:32:be:32:27:bd:81:40:c0:c9:57:d0:4d:53:62:
3f:20:e9:61:f3:35:a8:f7:1d:21:f2:70:f4:f0:65:
a1:a7:4d:6b:c8:4f:9b:99:c8:72:93:f7:30:c8:af:
59:5d:ba:0c:a9:33:28:3f:61:e8:05:26:93:23:c5:
68:78:8e:f2:33:ea:f5:6f:65:7e:50:24:8f:74:f8:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D7:A5:2A:B6:EC:78:BC:4A:75:9B:7C:46:63:2A:A3:E2:60:B2:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.90.0/24
IPv6:
2a07:940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215511
Signature Algorithm: sha256WithRSAEncryption
4e:22:dd:05:8b:21:4c:d3:0a:f2:44:7c:ca:91:61:d9:5b:e0:
35:d5:aa:b9:aa:de:05:75:78:91:56:f4:95:99:8f:d4:bd:d2:
aa:ad:b4:09:2a:53:43:6f:7b:93:ce:f7:2e:76:5d:49:ba:96:
59:1c:c0:db:16:7c:55:aa:c1:65:37:2c:1b:3f:1c:ec:78:95:
01:c0:0a:30:69:af:e9:bb:50:ef:de:f6:29:b5:f6:24:f7:84:
9b:82:96:69:58:1a:4c:cc:2b:45:62:99:5a:89:30:33:ae:5e:
b9:c6:34:fd:e8:7b:fe:72:46:bd:f0:28:40:89:90:93:62:c9:
24:af:31:5f:9b:41:b3:db:31:54:93:07:26:20:9f:5d:e3:15:
31:f7:55:07:fa:6a:a3:32:ae:db:04:89:4e:7c:6f:f9:ec:f2:
69:e6:29:4e:78:7b:25:f3:b6:1f:f6:5d:3f:ea:bf:03:2f:71:
d5:9c:d3:e2:94:1f:ac:a4:83:28:9d:08:b7:1a:00:07:fd:c6:
3b:00:48:69:fc:2d:48:a6:53:cb:e2:99:2f:6c:9f:e5:c0:e0:
7b:4d:a2:61:c0:a9:52:39:12:fe:33:c3:6d:df:a2:2a:ea:ec:
bb:ec:e7:6b:f5:1d:5e:c4:71:ea:be:25:a0:14:3a:59:bd:d8:
33:9c:4b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:54:36 2025 by rpki-client