Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
File: IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer (raw, json)
Hash identifier: zel/xo2+JYxdSUPVUrKP3ehIjeC1oA1ClRNz47525sA=
Subject key identifier: 21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01992D78C7B471D635A39B77E50CCFDA47CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Sep 2025 07:55:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197156
IP: 46.255.88.0/21
IP: 178.255.48.0/21
IP: 185.60.156.0/22
IP: 2a02:21b8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:78:c7:b4:71:d6:35:a3:9b:77:e5:0c:cf:da:47:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 9 07:55:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2e:a0:08:78:58:87:28:f7:66:f5:00:4e:8f:
b8:03:af:50:48:f3:88:c3:c5:13:16:e7:e3:08:64:
dd:f1:28:7f:d5:2d:e5:0e:ff:70:2c:15:8f:a9:74:
86:91:ee:20:2c:a2:ea:ca:7b:a1:16:e9:53:b3:c6:
ff:c5:4d:06:f9:5e:9b:47:eb:b2:a7:ac:bd:2d:f2:
de:36:ab:dc:97:7c:ff:fb:05:e0:35:20:10:0a:1a:
88:52:ab:d8:1d:7b:93:13:df:8f:d5:a3:89:2d:70:
29:06:ce:66:0d:ab:47:0c:aa:60:35:f8:79:56:84:
3a:4f:0b:be:8d:4f:27:82:c4:13:96:ca:4b:6c:ad:
e9:e3:8a:10:1b:e2:ae:18:b3:d1:b9:46:70:24:27:
53:1f:16:3a:40:d2:c8:22:1d:80:a7:6a:7c:64:b2:
00:e3:8f:f2:97:98:9c:c4:e8:ba:a5:83:23:f1:e9:
8e:84:e7:03:6a:9b:cd:68:22:74:74:fd:3b:aa:7e:
92:8e:8b:9b:40:29:78:46:a4:e0:bb:45:c8:47:ec:
53:d2:5d:6c:42:2f:7d:67:98:9d:db:8e:ed:81:58:
2d:73:eb:32:5b:bc:e3:bd:2b:e4:ca:8d:bc:e7:64:
be:18:68:72:b8:1a:4b:40:d9:b6:37:2d:31:d7:69:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.88.0/21
178.255.48.0/21
185.60.156.0/22
IPv6:
2a02:21b8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197156
Signature Algorithm: sha256WithRSAEncryption
6e:89:d1:5b:fa:0c:5f:43:87:60:0f:23:59:70:3b:bf:e0:ad:
f2:5c:94:bb:11:29:6e:82:72:96:da:ab:26:50:8c:0d:d9:6d:
8c:4b:4c:35:fa:46:2e:2b:67:d9:2c:69:cd:6f:eb:60:8f:d7:
e6:27:ac:43:39:3a:1b:7f:ee:01:96:74:6a:29:bf:93:ba:2e:
d2:7a:72:c7:18:d7:f8:8a:55:dd:13:b0:6d:35:d1:b2:db:46:
75:c1:37:2f:9f:9e:95:c7:d8:e5:a9:f3:96:26:59:c0:24:28:
5d:1b:54:e4:36:19:af:32:c8:98:44:12:d9:cb:f0:9d:3f:d2:
e5:c7:9a:04:b5:27:30:d9:57:d5:3c:5e:e9:7f:1d:d9:76:10:
f5:30:b4:58:c6:0b:b7:1b:4e:6e:bb:e6:19:38:77:be:e8:d2:
3b:82:5d:f1:5c:51:57:1c:bc:2e:0b:db:49:c6:f5:4e:f2:42:
21:45:7b:96:8f:5c:3c:f2:0f:f0:99:11:c3:2b:dd:19:0e:50:
65:a9:22:49:36:be:54:d2:18:03:a6:52:ae:b7:41:79:c1:6b:
e3:57:ed:c9:c6:15:52:dd:f2:4b:8d:10:ac:e8:b0:8a:54:c9:
fe:0a:5e:b4:9d:49:6b:28:d7:5d:d7:7d:45:d6:de:e5:6b:15:
37:e9:38:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:47 2025 by rpki-client