Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MV3KddscDCcsCIvLF-dqTQ7tNNM.cer
File: MV3KddscDCcsCIvLF-dqTQ7tNNM.cer (raw, json)
Hash identifier: vYX4Paxd8Gl4BLvFHm/Cfwx8co/64yu0ApmAwSWkTME=
Subject key identifier: 31:5D:CA:75:DB:1C:0C:27:2C:08:8B:CB:17:E7:6A:4D:0E:ED:34:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019985E3A15D032602233CB29E9CFA659640
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Sep 2025 11:58:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197926
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:85:e3:a1:5d:03:26:02:23:3c:b2:9e:9c:fa:65:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 26 11:58:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=315dca75db1c0c272c088bcb17e76a4d0eed34d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:80:d6:f7:9a:a3:4f:57:76:0d:08:02:39:
02:ce:29:57:11:d5:36:b3:e8:d5:13:49:d4:58:50:
0c:8b:f0:69:a7:3e:3d:d2:84:59:75:b7:ec:02:95:
b8:7c:d0:2c:d4:93:2e:70:64:c5:ef:95:4a:17:33:
d7:70:80:3b:16:b6:a6:31:a8:bd:38:c1:9a:be:c9:
70:95:34:12:69:ed:a7:f9:db:2d:04:db:f5:23:6d:
ef:4f:58:3c:bd:46:fe:fd:4d:82:fc:4b:df:f6:2b:
44:00:08:72:a6:01:6b:2d:58:4f:99:86:09:1f:9b:
45:bb:35:5f:e9:6a:61:a9:68:a3:65:af:c2:b2:74:
b2:f9:d2:97:d6:81:1a:11:f3:df:20:7a:c2:c6:3d:
87:9d:1c:64:7c:b1:b9:fa:5f:ea:e3:5f:38:e6:c8:
20:67:0e:88:98:7f:93:f7:b2:a1:70:d2:cb:c8:8b:
cc:26:31:6d:9d:ef:a5:4d:77:f0:94:98:f0:71:2b:
6f:1d:47:56:52:79:13:86:c1:83:1a:c2:f1:4f:42:
01:7b:77:bc:ae:c4:d3:59:9e:2f:2f:59:68:ef:f2:
de:d5:84:fb:0a:af:b0:93:e9:35:60:c3:e3:be:59:
9f:b7:e5:81:c8:90:6f:39:c9:92:19:44:56:bc:ca:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5D:CA:75:DB:1C:0C:27:2C:08:8B:CB:17:E7:6A:4D:0E:ED:34:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197926
Signature Algorithm: sha256WithRSAEncryption
53:dc:02:4f:a5:f9:db:4b:8e:17:b3:ef:2c:87:af:70:e5:bb:
67:41:f6:ed:3e:b9:3d:7c:4f:db:73:3f:29:1e:83:5b:f3:b8:
82:1b:b4:6e:26:b9:50:e7:c1:c5:3d:2f:96:18:da:fe:44:94:
51:34:91:8d:4e:8a:a4:b1:90:a4:1f:ba:9e:37:5e:8f:19:c7:
a5:2e:e6:42:c8:ff:36:8e:b3:50:9c:bc:68:cb:02:6d:4e:0d:
23:78:0e:40:19:40:1e:78:71:56:b6:10:f0:d3:a5:b1:ad:75:
42:91:83:fb:77:7c:26:a1:99:e1:f0:e7:cb:15:53:25:bc:a9:
8c:e9:a1:06:3f:72:6b:f4:9c:0f:1e:49:f9:22:75:f7:f6:14:
c5:7d:b9:99:c4:67:f8:54:5b:21:66:1d:9c:66:33:e8:82:03:
53:02:34:57:83:3c:ad:ae:1e:fa:09:51:30:86:fd:e9:cf:de:
57:95:e9:b5:57:41:0b:93:b5:92:ee:87:63:e3:c0:62:ea:0d:
a7:b9:eb:bd:72:1d:58:d8:e9:17:48:67:b0:0d:13:52:83:3a:
20:16:cd:dc:4d:4e:7a:ed:f8:34:08:4d:82:e1:ea:42:d0:60:
17:50:01:b2:7f:84:e6:0a:0a:ca:5f:07:00:2f:ac:d7:97:51:
8e:7f:bc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:04 2025 by rpki-client