Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aVHTpo9AAIrYxSB0XKDzCeqB6WU.cer
File: aVHTpo9AAIrYxSB0XKDzCeqB6WU.cer (raw, json)
Hash identifier: G377d7aKGlf2+ruU8nh8EkFJ+T48tW31h+6W72/NkgA=
Subject key identifier: 69:51:D3:A6:8F:40:00:8A:D8:C5:20:74:5C:A0:F3:09:EA:81:E9:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019980462C362B082259944841B2628694F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Sep 2025 09:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a04:b100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:80:46:2c:36:2b:08:22:59:94:48:41:b2:62:86:94:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 25 09:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6951d3a68f40008ad8c520745ca0f309ea81e965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:21:9c:96:50:f7:f5:6e:08:f1:1e:e5:1f:
d9:6e:c6:e6:d9:28:2b:96:e4:a3:8c:a4:90:bf:58:
76:9c:12:f7:15:98:d9:0f:42:2c:49:a6:87:ff:8a:
b9:64:c7:d9:d1:03:77:c0:45:1a:4f:4f:3c:ad:38:
16:0f:47:40:65:62:17:84:d1:d6:d4:bd:64:25:a6:
e7:78:26:8a:c9:81:8b:88:7d:f2:05:73:45:fc:0a:
4d:69:32:97:20:37:52:72:d9:5e:42:0d:6c:e1:ff:
cc:d5:ce:37:90:5a:8b:f9:7a:aa:f9:1d:a8:25:eb:
aa:30:99:ff:fa:21:8d:42:47:07:6e:fb:36:30:ac:
3b:ff:06:f8:e8:84:34:3b:b3:29:a1:3d:ef:62:7b:
96:b1:4a:40:48:bc:fd:f0:49:03:39:6d:44:95:59:
05:8c:0a:e7:fc:7b:a5:9d:70:bd:17:3b:7b:9c:1a:
54:c2:47:5d:80:b6:f8:af:0f:7e:d1:0c:5f:06:b7:
fa:d5:f2:05:d1:12:cf:06:88:7f:99:48:5f:03:44:
15:43:4e:d4:da:44:1e:2a:67:5f:56:b7:de:9c:e5:
44:2e:b3:e9:34:e4:3e:f8:8d:cb:17:db:e8:bb:a6:
b8:e0:86:83:14:9a:ee:60:d9:af:e1:65:b7:9c:88:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:51:D3:A6:8F:40:00:8A:D8:C5:20:74:5C:A0:F3:09:EA:81:E9:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b100::/29
Signature Algorithm: sha256WithRSAEncryption
44:b2:98:ce:d4:ba:2c:7c:f9:2f:f1:8c:00:41:07:90:4b:5c:
23:d1:d6:15:0d:f2:a9:99:cc:ef:24:5d:57:19:2c:80:61:c6:
79:25:ac:40:08:9c:21:d1:48:5c:36:b8:37:50:ee:11:9c:38:
f7:de:31:4a:23:e4:82:3a:0e:1e:8a:cd:86:8e:c7:6f:37:b2:
c8:5d:b0:c9:f6:f5:63:fa:86:e5:3d:68:ae:77:09:3b:3c:a9:
e8:34:3a:f2:22:56:35:71:c7:2d:27:40:2f:e9:d9:2c:40:ad:
4c:0a:96:84:43:db:dd:aa:b5:4a:d7:e4:20:fc:41:34:45:bd:
ce:70:d9:db:9c:7c:23:73:d7:09:31:f6:9a:94:2e:6c:2f:b5:
53:29:54:2c:f3:d9:ea:45:b5:19:c4:eb:76:3e:83:9b:ce:53:
ba:9d:df:79:30:43:07:9c:21:60:22:1b:16:da:cf:ce:73:c1:
15:7d:29:1e:63:60:44:b3:46:c3:3b:b8:f4:56:f6:fb:c9:9d:
b3:03:5d:83:35:d0:01:d4:cc:4e:3b:9e:8d:41:09:24:fd:09:
fe:ac:06:3d:74:be:84:96:4f:b7:99:2c:16:84:59:82:0d:29:
0a:e8:c4:da:41:db:a2:ee:55:45:7e:fe:7f:c3:84:d5:07:e6:
74:e1:59:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:00 2025 by rpki-client