Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer
File: dg6-87rwwTdAhVCVOQhSzkQlzkw.cer (raw, json)
Hash identifier: AF0DjQiqDjRs47DEwXxwa5GEkAW3qkg2MGo9Qnn6WSg=
Subject key identifier: 76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01993355CC7476FF1AFA4A58B9B497346E5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Sep 2025 11:14:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205380
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:55:cc:74:76:ff:1a:fa:4a:58:b9:b4:97:34:6e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 11:14:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=760ebef3baf0c13740855095390852ce4425ce4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:fa:c4:ac:68:38:40:f3:7b:4d:4c:58:20:
9f:7a:7b:d4:04:70:09:8f:cc:8b:ef:17:f6:9a:d8:
47:5b:b4:3c:54:e7:29:3d:2e:5d:b6:b7:57:7a:c6:
a8:3f:08:a0:7a:3b:bc:47:71:56:1c:7d:5a:97:a1:
62:c6:78:e7:95:37:61:14:49:bc:1b:aa:ee:80:2c:
ff:f4:2f:9f:49:60:a4:ee:4d:bd:47:7a:f4:e7:e9:
6c:8d:8b:0a:7f:85:75:c2:37:b0:5c:de:9d:dd:cc:
c5:a5:51:53:cb:60:33:53:98:33:59:81:d0:cb:5e:
80:15:c7:09:dd:6f:63:2b:bc:e3:7a:fe:af:f3:f5:
5e:4f:f4:93:1b:6a:ff:33:e1:55:ba:6c:ed:f7:c6:
5f:06:68:ad:47:6c:da:74:d2:1c:6a:fa:00:42:61:
60:52:3e:d8:d7:62:1b:77:e5:ac:9c:5d:35:00:09:
8d:9f:13:22:96:1d:86:72:e8:b4:50:1a:e5:15:49:
90:db:82:51:dc:64:63:f3:3d:1d:b1:16:9b:2a:f4:
87:d5:33:29:34:e2:24:81:e3:3d:47:d2:fe:cb:db:
9f:8f:a8:25:b4:14:8a:4b:36:85:fa:e3:5b:47:3a:
e2:ad:10:4f:e1:17:14:c4:10:1a:ad:6f:92:02:1b:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205380
Signature Algorithm: sha256WithRSAEncryption
0f:9f:58:c0:c0:e1:99:57:21:c8:e4:85:be:0a:65:f0:19:bf:
2b:ca:d0:de:72:c1:cd:74:97:f3:52:16:d6:88:16:ac:09:5e:
1e:71:84:6a:59:78:1f:f6:0a:2e:14:bb:2b:63:56:58:6e:78:
f5:61:22:91:c8:cc:0e:0d:28:a3:42:f5:3c:8a:a8:ea:a9:aa:
b6:bc:22:89:16:6b:ff:39:b9:9b:de:f7:4c:2f:fc:4e:94:af:
26:99:96:28:7c:04:d9:92:68:cb:fd:c4:bc:9b:fc:a0:1d:2b:
33:22:d2:d1:ae:16:a2:bc:bc:f4:61:47:49:8d:a3:2e:ab:92:
7a:92:9d:16:ba:76:9c:16:7c:c5:1a:ff:24:0d:08:fe:2d:43:
4f:5c:ce:de:26:c7:c1:be:7d:b5:d3:09:4e:ce:54:b6:e4:d5:
57:2b:fd:5a:4c:8a:4f:be:14:24:ce:4b:4a:91:0c:fc:d2:0d:
47:fd:8d:cc:06:95:17:e3:60:34:df:b2:b9:ec:f9:45:39:f2:
ee:19:fd:80:6e:7a:e5:a5:b0:66:6a:29:b4:68:b1:64:7f:b7:
8e:4a:61:d2:b4:ac:d2:36:23:34:0d:a1:83:a9:de:0c:e0:3d:
6f:d3:94:45:02:52:59:35:c7:a9:84:99:e5:94:37:db:b9:46:
2c:64:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:47 2025 by rpki-client