Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dZ27tMoEMpvFCdbdHNULk1atiQY.cer
File: dZ27tMoEMpvFCdbdHNULk1atiQY.cer (raw, json)
Hash identifier: 8Zf7b4xgX6AkleWA8KiEzK8WwlgEwnQc+PtNNuUPvzk=
Subject key identifier: 75:9D:BB:B4:CA:04:32:9B:C5:09:D6:DD:1C:D5:0B:93:56:AD:89:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199343138E82C750C7D20BFCB0065568838
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Sep 2025 15:14:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44023
IP: 91.198.253.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:31:38:e8:2c:75:0c:7d:20:bf:cb:00:65:56:88:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 15:14:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=759dbbb4ca04329bc509d6dd1cd50b9356ad8906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:73:7f:36:f7:b6:f9:c6:61:66:d4:a7:6a:8d:
0c:db:95:81:f0:b8:69:20:16:78:b8:d6:a4:7e:58:
7b:cd:be:10:db:c6:16:68:00:f9:a0:c0:2a:21:60:
c4:09:58:8f:3d:2a:2a:9a:25:85:cc:27:56:29:3b:
4a:a4:75:16:c4:97:ee:3f:19:ef:76:a4:d9:db:eb:
69:34:42:10:19:c3:7a:d3:84:40:03:12:51:09:aa:
4a:9d:11:ec:ed:93:da:ff:d3:69:be:7e:4e:6e:64:
46:b5:51:30:9a:2f:ed:c2:7b:d6:8e:da:5b:c1:57:
24:e6:37:ed:9a:b2:b2:31:88:cf:f3:9d:0f:e2:4c:
9c:f9:f8:11:d7:eb:28:75:39:23:8c:b2:e2:09:1a:
2e:92:fe:56:ec:7e:1b:16:7f:68:19:88:61:49:73:
c7:b0:08:d4:ca:6a:c2:7e:0b:06:b9:1e:ee:28:52:
cb:ea:3a:40:ca:66:de:2c:ac:40:09:53:68:14:68:
f3:d5:cd:91:16:35:62:62:bb:2e:d3:fd:f2:89:69:
6a:ee:50:e3:d5:f0:1c:90:75:24:5c:f0:3f:db:6b:
78:41:ef:9a:b1:2b:3b:dc:83:d8:9c:e4:5c:e3:d6:
69:9d:9a:2c:17:d9:ba:d8:ad:99:bf:9b:5b:2b:a7:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:BB:B4:CA:04:32:9B:C5:09:D6:DD:1C:D5:0B:93:56:AD:89:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.253.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44023
Signature Algorithm: sha256WithRSAEncryption
7c:89:db:a3:2d:b5:2e:21:7e:4c:df:00:66:d7:29:5d:66:83:
2a:0f:37:e5:f9:48:fb:cf:2b:46:81:86:4f:21:fc:ff:59:f1:
ca:f4:f6:12:5a:96:9d:d2:38:ab:a0:f6:91:ef:ff:76:73:36:
85:04:c5:9a:fd:6d:ca:b0:56:30:22:70:3f:87:ab:4e:0f:64:
a1:03:7e:f4:75:07:a5:87:4a:24:17:47:4f:a3:73:2d:7d:26:
fc:6d:b7:a0:14:66:3f:eb:67:d9:f0:51:b8:7f:06:6b:fc:b8:
44:38:65:76:8c:46:46:de:27:c0:17:af:05:42:d3:a7:2a:43:
85:79:61:d9:1b:0e:1e:0c:e0:18:bc:b0:d9:8c:74:5f:90:3c:
17:43:bf:ba:3f:d5:c7:c4:c6:da:a4:76:18:70:15:cf:f8:17:
c4:1b:68:ef:d1:a0:0e:2e:ff:aa:fe:d7:f9:fe:d2:24:51:9f:
dc:35:52:4b:17:b5:37:b3:0d:2f:4d:67:a3:3f:74:32:e8:15:
36:b2:18:14:59:ff:d5:98:f8:07:da:f6:cd:cc:55:52:06:49:
f2:7b:22:4f:43:93:36:6b:7f:5f:3b:1f:b8:dd:36:eb:d3:ce:
b7:84:b1:e9:6e:cb:a2:37:36:c2:1c:b4:36:dd:c5:0b:5d:30:
dd:98:68:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:01 2025 by rpki-client