Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SRodzN7JXOWDRq33ARJj1k6TtNE.cer
File: SRodzN7JXOWDRq33ARJj1k6TtNE.cer (raw, json)
Hash identifier: mvtTq5E7tckn0wzTthYTbDf2UT+N4kWE8RALklqgynY=
Subject key identifier: 49:1A:1D:CC:DE:C9:5C:E5:83:46:AD:F7:01:12:63:D6:4E:93:B4:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199599CE4E6C3889DE4DDE7BA493D6C41E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 17 Sep 2025 21:37:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210338
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:59:9c:e4:e6:c3:88:9d:e4:dd:e7:ba:49:3d:6c:41:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 17 21:37:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=491a1dccdec95ce58346adf7011263d64e93b4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:db:b8:ee:0d:7b:a2:0a:3d:ae:06:79:07:
d9:10:1b:79:c5:20:cd:85:80:34:02:4b:16:e8:0b:
0b:7a:5e:0f:e2:59:bc:00:62:69:04:17:9b:5e:53:
16:1c:b0:11:84:1d:81:a4:8f:86:22:54:6b:25:89:
42:88:5c:52:6f:42:3f:7c:3f:f1:09:c6:77:25:e3:
78:22:7f:36:a2:10:42:de:a5:3c:af:26:62:f5:0d:
31:5e:43:fa:15:55:ad:29:82:f7:cd:2a:0c:d3:00:
c1:55:f1:aa:36:39:35:e2:8c:9b:c8:08:20:48:e0:
d0:f6:86:22:fa:1b:da:f7:af:64:25:6a:0c:a6:f6:
0f:a6:7a:69:ee:20:61:71:4d:a5:31:94:a8:8b:d3:
47:26:cf:8b:7c:2b:32:38:e4:29:83:8a:24:37:68:
39:97:21:33:7b:44:4c:70:f0:4e:5c:c5:f3:ca:14:
1d:48:6e:9f:a1:82:fd:a5:d9:8c:04:92:af:7d:5a:
51:16:3d:63:96:8f:8d:f9:ef:64:c9:75:ae:cf:11:
d5:00:8f:26:18:b3:bc:70:49:1b:67:d0:3a:28:d2:
72:50:21:73:99:e0:e7:3d:2d:5d:22:a3:9e:82:89:
1e:9b:61:49:d0:a9:a3:b5:da:71:ef:f2:ae:9e:1e:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1A:1D:CC:DE:C9:5C:E5:83:46:AD:F7:01:12:63:D6:4E:93:B4:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210338
Signature Algorithm: sha256WithRSAEncryption
6b:3c:17:30:60:54:93:0c:e2:b9:85:9f:ef:e6:33:8f:67:e6:
3d:af:60:34:74:89:59:52:01:6e:d1:6e:62:fe:4b:15:33:04:
d8:ec:e1:18:36:2c:22:9b:51:59:76:5f:0a:e9:18:9c:1b:83:
16:c2:ac:68:50:58:95:47:c0:5e:33:92:81:93:cf:e1:78:4e:
c5:08:59:f9:3a:83:59:a3:1e:02:58:9e:b1:f6:6d:c9:62:25:
a4:2d:5e:78:4b:23:44:41:e5:d0:36:25:2a:d7:29:24:82:81:
89:6f:8d:27:a2:c9:ce:1b:d3:99:a5:30:21:20:3b:28:ac:91:
ad:4e:96:e6:0c:b7:82:92:87:7d:51:89:de:f2:98:6f:98:89:
a4:48:69:a5:f4:2f:96:b5:a8:48:2d:77:3e:ea:e1:b3:ac:93:
35:81:a4:5f:29:08:a5:93:41:fe:f1:ba:2e:ab:4d:71:8c:90:
d3:2e:fb:21:fe:64:2a:11:5a:6c:0e:cf:5c:d8:99:d4:7e:e4:
41:6a:a4:a0:8a:86:40:89:98:cd:8e:21:87:e0:66:6b:2d:32:
22:ed:e6:54:ac:34:0c:20:c7:79:40:b6:9b:2b:a8:f6:6c:65:
94:e3:b3:4e:15:5e:9c:ad:cd:52:b8:7f:dd:52:64:17:7d:9c:
79:ce:49:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:48 2025 by rpki-client