Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
File: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer (raw, json)
Hash identifier: ho1sXy5tAgsa3sNm25PoBSCQQ0U8qqHArYLQmfhkQkE=
Subject key identifier: 66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199C896B5DAD57C075817ED816866365576
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Oct 2025 10:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62165
IP: 193.163.52.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:96:b5:da:d5:7c:07:58:17:ed:81:68:66:36:55:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 9 10:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66d1233f112a4a3435575a3a219dccc021068d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:6b:fa:b5:61:99:e5:11:fe:4b:86:b3:be:
37:12:5e:76:3b:61:17:b5:8d:16:e0:03:ae:9b:5c:
1c:d0:02:d8:54:91:31:a7:21:cc:1e:84:02:a8:73:
86:f0:a2:c9:65:0a:6c:76:9a:23:14:c0:7d:d4:aa:
05:81:73:68:d6:fd:05:77:3f:cf:dd:f6:70:c2:68:
01:40:3e:3b:bb:6c:94:ad:ae:a5:0a:64:d7:33:a2:
05:46:d7:09:be:f1:ab:9e:85:0e:cd:21:1b:d5:00:
74:a7:b0:cc:34:a6:a2:5f:62:c6:52:27:59:08:7a:
8d:82:16:85:f9:03:ff:6d:eb:50:84:b2:dd:a9:7b:
aa:65:13:34:3a:b8:df:a7:a0:33:f5:b2:37:6b:0d:
b2:1d:09:66:de:eb:5e:da:b4:71:5e:c0:1f:f7:98:
9f:5b:47:a2:39:1f:5b:bb:48:a4:b5:dc:86:9b:7f:
0d:b7:2d:59:58:8d:6b:96:29:5b:5d:25:62:0e:30:
41:c3:36:97:a3:88:7c:7d:6e:4a:2b:17:9b:7e:a3:
ac:aa:95:2b:68:2a:2c:db:c0:85:24:56:ac:be:3a:
c1:43:17:c6:73:8c:42:ba:f9:b0:cd:c7:1c:5e:97:
b5:cf:2a:36:1a:5b:05:2e:62:5b:62:2e:d2:4f:47:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.52.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62165
Signature Algorithm: sha256WithRSAEncryption
27:07:74:1b:a9:3f:bb:95:4e:61:ee:9e:ae:68:ba:00:40:4d:
0c:4f:f1:9d:a7:d5:c9:75:e9:4b:fa:2e:b2:09:02:ae:31:89:
ad:85:ce:c8:0c:4e:33:a4:bd:bb:b9:6e:dc:86:46:d7:4f:70:
d4:a2:2c:24:b3:0d:48:84:70:f2:0c:9d:71:02:fb:2a:96:11:
53:d5:83:cb:19:33:23:81:aa:8e:2d:d6:69:ed:b8:e2:35:20:
11:76:36:22:ba:88:0d:97:97:67:df:b6:11:93:36:1c:bf:de:
ea:a2:3b:6a:41:b3:5b:0a:5f:35:6e:51:49:68:73:a5:45:c6:
4b:d2:b1:c8:d7:47:b4:18:c1:7f:5c:85:02:ef:32:1b:fa:60:
79:a4:d6:a2:c3:d0:79:71:6d:5e:89:02:4a:83:cf:49:f2:be:
55:13:bd:0f:da:d1:32:a1:b6:5e:54:fb:bd:f3:4a:bd:78:c4:
f0:ae:fd:6b:55:30:c9:78:83:c0:24:9f:3e:59:2c:41:4e:2c:
88:ff:e8:16:9d:39:cb:41:91:2f:c6:f5:08:65:ed:c0:5d:ba:
2b:cf:ba:74:ed:b2:cd:01:d0:bb:ce:41:74:a5:10:37:b2:a6:
00:65:8f:54:ab:32:b1:93:a9:aa:b5:a0:ec:15:cb:0c:9b:dc:
7e:22:b5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:48 2025 by rpki-client