Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bJCmPMNLfxpxRwHVFoNbneKf0Og.cer
File: bJCmPMNLfxpxRwHVFoNbneKf0Og.cer (raw, json)
Hash identifier: ydUK4sxZoPAKC91cdJl3RS4XFJiv0Rk7oklEnLKxsM0=
Subject key identifier: 6C:90:A6:3C:C3:4B:7F:1A:71:47:01:D5:16:83:5B:9D:E2:9F:D0:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198CC1955B6AF1F096DE373BC44C792CF87
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/6C90A63CC34B7F1A714701D516835B9DE29FD0E8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 21 Aug 2025 10:07:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205941
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:19:55:b6:af:1f:09:6d:e3:73:bc:44:c7:92:cf:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 21 10:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c90a63cc34b7f1a714701d516835b9de29fd0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:ce:dd:45:cd:65:4c:f9:04:01:79:cb:91:
7f:95:00:ff:c8:3a:4a:43:43:10:41:5d:ba:07:56:
d6:09:69:5a:b4:8c:70:b4:b2:6f:ce:00:51:c1:21:
eb:8b:02:8e:8b:70:da:d4:f4:a8:4f:2b:79:ea:03:
a2:06:1c:b7:de:a8:36:c1:64:0f:e7:0c:7d:88:bf:
a8:c1:a1:df:de:69:72:f8:18:76:41:41:9b:8b:d0:
41:a9:c5:71:38:61:50:45:f8:78:94:d5:fa:6f:5c:
6e:88:ba:3e:51:5d:d7:7e:2a:88:a9:59:50:24:a5:
28:92:b4:7c:bd:45:22:b2:bf:da:b5:14:ac:e5:f0:
3b:4c:9d:3f:85:c5:45:1f:ca:ee:41:42:10:09:75:
1d:57:33:65:bc:2b:6f:0e:56:5b:5d:92:b2:61:76:
9c:8c:cc:26:a6:de:43:ee:7d:46:16:61:a0:df:a6:
fa:ab:43:da:29:4f:4d:53:0d:b6:1e:2a:a9:4e:6e:
23:20:4f:e1:4e:45:e7:88:b5:d3:fa:b6:2d:36:69:
c5:77:5d:3d:03:12:93:33:1a:73:c1:17:17:29:8f:
f6:22:68:2c:02:be:23:be:5f:77:c6:11:c3:bc:c8:
c1:fa:b6:49:f1:53:4f:b9:bc:a2:5c:34:a0:12:52:
6b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:90:A6:3C:C3:4B:7F:1A:71:47:01:D5:16:83:5B:9D:E2:9F:D0:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/6C90A63CC34B7F1A714701D516835B9DE29FD0E8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205941
Signature Algorithm: sha256WithRSAEncryption
25:16:5e:43:9a:00:75:40:81:e1:23:75:fb:ae:e0:e5:9f:fc:
d2:d5:07:e5:19:68:6f:41:00:73:17:6c:21:88:22:aa:d7:a3:
89:0e:5e:62:56:5b:7d:f3:d5:0a:43:8e:19:b4:47:d0:17:d1:
aa:9f:33:64:9e:0f:76:2f:fc:10:a5:70:d8:31:47:a4:fe:59:
a8:e0:09:b3:29:29:36:27:19:69:ae:e8:b7:e9:4c:08:91:0a:
09:ee:19:96:ad:08:aa:1d:0e:45:ca:f9:11:6e:71:0b:a0:d1:
78:cb:33:f6:cb:44:55:ec:17:04:69:a6:de:87:67:47:53:bd:
43:4b:9d:14:12:b3:50:71:75:00:74:05:b7:40:e4:48:8b:e0:
2f:4e:48:84:57:ba:3f:af:39:b4:89:26:e1:4c:21:db:ca:a6:
07:da:bf:3b:6c:40:da:d2:ed:d0:a6:ea:42:39:f2:dc:a8:a1:
c2:dc:ae:d9:be:bb:93:eb:e5:ef:52:67:33:8a:4e:7c:52:6e:
53:2a:1e:71:12:9b:d2:18:ff:d1:83:ba:12:5e:be:4b:92:45:
5d:04:e0:c9:43:1e:ef:98:5e:ce:b1:51:d4:c8:14:dc:71:b4:
53:ad:6e:10:09:7e:35:bf:d1:6e:96:24:c2:c6:ee:43:53:ca:
2f:19:c0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:26:35 2025 by rpki-client