Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_uXfTWBHvAq-eZp3LAhSusWN9Dg.cer
File: _uXfTWBHvAq-eZp3LAhSusWN9Dg.cer (raw, json)
Hash identifier: vXvhgFOWDUb22qTLQQH7gJnLXQ3BPedzepUHn7F2AwM=
Subject key identifier: FE:E5:DF:4D:60:47:BC:0A:BE:79:9A:77:2C:08:52:BA:C5:8D:F4:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198988E813727DD4540F69224F5A3025187
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 11 Aug 2025 09:55:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207272
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:8e:81:37:27:dd:45:40:f6:92:24:f5:a3:02:51:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 11 09:55:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fee5df4d6047bc0abe799a772c0852bac58df438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:c0:4b:83:e3:7a:19:5f:e1:29:c3:56:b1:
d6:e2:cb:89:ca:9f:fa:32:a1:d8:10:9a:6d:c0:d3:
87:63:52:38:15:12:db:cb:df:59:b7:ea:7d:77:51:
09:70:7a:c3:92:8f:20:7f:bb:d7:a9:b5:2d:e7:37:
6b:d9:ca:b4:86:eb:b2:98:e4:a2:ae:fa:77:2e:2d:
79:92:3a:06:b7:be:ed:86:56:20:2d:24:13:25:93:
de:b6:0f:e3:6c:ce:5b:8f:3c:35:b0:ea:4e:82:1b:
36:52:9b:43:cc:67:36:b9:37:39:2f:04:00:56:d8:
d1:33:b5:a0:22:b0:e9:16:9d:23:ed:6e:b4:d7:6c:
81:00:80:7a:f2:7a:92:af:06:59:04:d2:3b:e1:b7:
35:a8:f3:c8:29:ac:65:4f:f0:4a:de:e9:c3:d9:4b:
47:17:11:99:d3:26:90:f2:93:05:e5:c3:58:d3:8b:
e4:07:83:a7:c4:c2:2b:04:7e:20:99:f3:9a:5b:05:
e1:7a:4d:4f:ac:9e:3a:7f:a7:79:d3:de:ed:b1:e8:
54:c7:84:28:30:17:cd:35:69:65:50:1b:bc:36:f6:
ef:48:d6:76:33:98:8c:33:40:d1:06:97:e5:77:8a:
37:60:79:5f:db:fb:ce:f0:5c:52:45:5b:6c:cb:c8:
bd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E5:DF:4D:60:47:BC:0A:BE:79:9A:77:2C:08:52:BA:C5:8D:F4:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207272
Signature Algorithm: sha256WithRSAEncryption
23:19:7a:7a:b7:97:79:d8:f8:d3:0a:e7:19:24:7a:22:fa:ba:
33:86:90:93:eb:c2:ad:31:1e:53:a4:0b:b6:75:71:4e:fb:12:
97:0e:36:9b:25:14:db:c8:e8:e2:1b:5b:c5:3b:85:73:e7:1f:
28:5c:f5:0a:94:d6:e6:2b:d5:93:23:43:d9:51:b3:b9:51:ea:
24:b3:3f:0b:e9:bd:e7:ef:bf:89:6b:0f:be:ca:59:25:d0:18:
7a:8a:59:21:a6:10:0b:e9:6b:28:2a:e3:80:7f:ff:76:ea:05:
07:97:0b:80:b6:d7:40:cd:ac:ff:c9:d0:45:6e:a9:d8:48:0d:
15:5c:f7:b0:8b:30:cf:82:a2:07:9f:6b:fb:24:92:5e:29:90:
e4:e4:59:3e:f4:d3:4a:09:86:7b:55:10:19:90:e6:3f:d0:0a:
44:13:73:8f:23:07:cc:68:63:db:e9:63:88:c6:82:ec:5a:fb:
24:e8:d4:af:92:51:64:f5:91:5a:6d:de:52:9d:8a:f1:2c:1c:
34:a1:a6:73:b5:14:2b:59:45:b9:bb:08:91:5e:20:b6:9d:4f:
9e:8c:5b:e0:da:87:41:ea:52:eb:ff:18:a6:eb:d6:d6:18:9c:
47:7f:7a:76:0c:c7:52:48:f1:9b:0e:d1:38:04:21:ac:ee:d1:
59:42:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:28:32 2025 by rpki-client