Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
File: _6vCNZX9gER9mPXsNRMWG9JHP8Y.cer (raw, json)
Hash identifier: irqhwhjB7l34fBq90h8aELEkenOFhKUe56MmL8wR2B0=
Subject key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199DDAD9EDE9E514891B58E07564E64B2E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Oct 2025 13:06:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208341
IP: 193.222.252.0/23
IP: 193.223.70.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:ad:9e:de:9e:51:48:91:b5:8e:07:56:4e:64:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 13 13:06:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:be:dd:bc:ca:c9:9e:8c:c4:84:e8:d7:b8:9a:
b5:8f:d2:b5:e1:4e:fa:7d:db:95:b9:fc:63:7c:79:
34:c5:6c:68:99:b7:d5:24:8b:5d:1f:3a:4b:2f:d0:
e5:2a:ff:37:3c:a0:95:3d:fc:3a:e3:df:a6:c4:18:
1d:85:c7:7b:45:39:ac:91:99:b6:86:05:89:d2:1d:
54:23:81:cc:20:bc:8c:ce:29:d2:77:ad:a9:74:24:
01:f2:c5:ca:40:87:57:ec:77:18:38:5f:f5:79:6f:
a1:36:f8:45:43:b0:17:83:8a:15:22:7a:76:37:1c:
55:ba:03:8d:51:6e:1d:b9:b1:a0:01:fe:27:e1:65:
85:31:d5:0a:7d:3e:af:37:77:06:3b:7c:63:1e:2d:
bc:92:e6:5d:6d:1c:bb:f6:d4:49:bf:6e:10:e1:4b:
07:0f:b8:fa:89:13:47:13:5c:68:17:5b:f1:59:3c:
f6:45:51:78:5e:a4:37:e1:22:07:aa:bc:e9:dc:1e:
49:72:3b:7e:7e:fb:65:f1:65:f3:ac:88:40:d1:9e:
e5:24:13:9e:05:a7:75:64:80:a5:20:29:7d:bb:bc:
58:09:f0:63:53:1c:0b:e0:c2:0d:ee:a4:1a:31:af:
98:0e:04:e3:de:b4:e1:73:e6:54:e9:41:44:d3:25:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.252.0/23
193.223.70.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208341
Signature Algorithm: sha256WithRSAEncryption
27:1e:e4:43:6a:61:28:90:70:53:95:85:07:df:b7:3c:d9:f7:
be:2e:c7:a5:fc:65:41:8b:80:ae:81:5c:0c:5d:4d:e8:bb:1b:
5a:7f:82:71:41:23:94:ec:0e:1b:05:d8:6a:84:9e:be:fe:1f:
04:e3:dc:5d:5c:8e:b7:ec:80:b5:7f:3c:6c:ec:67:ea:e7:da:
81:79:7a:be:f5:3a:3f:9d:c0:76:9d:55:89:61:51:c8:46:45:
af:f8:9c:75:2c:c0:b6:b1:aa:98:d0:fb:34:f2:d5:d3:d5:37:
f2:47:3f:22:b6:05:8a:58:af:88:e1:db:50:2c:c6:ed:ca:20:
d6:ed:1b:16:86:1a:08:2f:d9:50:f7:bb:4b:88:2d:c8:86:13:
53:b3:9a:b1:fc:d7:08:50:ee:77:1d:59:ce:87:b7:3b:0c:ee:
d4:f0:39:6d:15:7d:b0:b6:6e:d2:9c:ff:8f:9a:7f:66:c6:be:
e2:05:cd:b1:7f:5a:07:fb:ce:0e:fd:6b:01:0f:8a:ee:ec:93:
b5:03:26:a6:1c:e5:61:40:e4:34:03:12:ec:d0:99:79:ff:ac:
62:3d:2d:bc:72:b8:70:ff:7e:55:d7:ee:94:0d:0f:93:97:8b:
92:c1:71:b3:89:9b:cf:f4:21:22:65:51:0d:ca:74:05:9a:e9:
7c:4e:fe:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:25 2025 by rpki-client