Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
File: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer (raw, json)
Hash identifier: FR8tAkXOuVcDeoA0jWdZni9Y1wQlBH4O5cs3k1OzQTQ=
Subject key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01987F5623586300CB3965C1366A8D44F3FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Aug 2025 12:23:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.117.106.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:56:23:58:63:00:cb:39:65:c1:36:6a:8d:44:f3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 12:23:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:e2:17:2e:cd:38:28:d0:7f:44:97:5f:98:
88:d4:00:cd:17:a6:56:d5:2b:de:15:a5:05:7f:79:
0b:c0:a8:e5:f2:2b:22:a4:c0:5d:c4:8c:8e:33:03:
af:7e:2d:35:0f:1c:d2:fd:7b:38:3e:9b:95:f0:d9:
2a:da:f2:e6:3c:63:d1:cc:ed:f3:5b:85:cc:95:ab:
20:ba:54:fe:24:91:2c:2d:23:e4:18:a9:47:2a:2e:
92:1e:e9:31:f1:34:43:46:ed:88:3d:db:46:3a:6a:
c7:78:73:34:47:8e:6f:2b:90:c3:3d:0f:3a:96:6f:
eb:30:3f:3b:d3:02:68:72:00:95:39:64:14:0b:99:
6b:1d:67:24:28:f1:75:8f:bc:50:2a:27:0b:c7:c7:
63:7e:9d:bb:89:94:f6:cd:40:75:5b:f7:e4:c9:48:
b4:ea:58:ca:5c:92:0a:9b:42:de:b1:e8:14:0f:30:
55:d6:42:1d:95:a9:53:e4:61:95:48:b0:55:7d:38:
4f:1a:ff:11:c7:06:2c:68:08:ec:5b:93:a3:f7:67:
92:da:b7:d8:d9:09:66:f9:81:dd:d9:b8:9c:50:32:
1f:1b:dc:07:8b:42:ca:89:2c:9a:94:4d:d5:1f:aa:
3b:78:21:5b:a1:e3:95:3f:2d:ff:e9:dc:b9:67:6c:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.106.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3d:6c:c5:4e:b7:4f:2e:a8:66:b1:ff:1a:f6:96:6d:c7:f9:
23:ea:9c:7c:5d:79:08:61:f6:70:f5:8e:2c:2f:23:3c:87:2c:
38:8e:76:2d:da:dc:09:9f:22:3e:ce:12:53:17:53:66:c4:b2:
23:c1:de:53:aa:f8:5b:66:f1:a1:43:51:cb:f8:8d:fc:e2:92:
19:55:81:93:3b:c5:8b:21:23:ba:27:ba:f8:43:9c:71:36:87:
4d:82:6f:d9:0a:5d:0c:4e:01:35:51:fe:f6:2c:83:7c:0f:af:
58:de:ff:34:03:bf:e3:fd:3b:a2:80:f5:07:a7:72:f1:d2:c0:
da:02:da:a7:10:c4:7d:6a:6a:86:34:a0:6f:0f:35:2b:c0:ca:
64:24:da:c4:d1:54:fe:d1:af:55:f2:d7:94:c5:c0:98:ea:2a:
8e:72:db:15:67:b9:bd:29:ff:68:c9:18:58:3a:d4:d6:a0:18:
7a:b1:e5:b8:ca:ba:9c:99:bf:f9:4a:c6:36:e7:55:bf:c8:f0:
aa:6e:97:4c:47:b0:b2:3f:05:e1:8e:4a:65:8d:c4:55:b9:dc:
b2:d2:5f:05:dc:8a:cb:f7:11:00:19:0a:d0:37:80:a8:8f:f2:
f4:ae:bb:8f:91:77:b8:f3:e0:f0:8e:45:c1:16:f0:2b:e6:16:
89:75:39:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:05:11 2025 by rpki-client