Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer
File: fSiu_AZob_0_snjG3lKXc-2r3p4.cer (raw, json)
Hash identifier: 35hyHCpaaJUYIoUFawALl2neDcdZHrAssxM0nTLGzd8=
Subject key identifier: 7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198A46705EB6557491B8B615D7574E40DD6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 13 Aug 2025 17:07:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205563
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a4:67:05:eb:65:57:49:1b:8b:61:5d:75:74:e4:0d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 13 17:07:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d28aefc06686ffd3fb278c6de529773edabde9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:ff:31:08:71:61:71:17:17:07:4b:92:ae:
17:8a:2b:f7:4d:cc:20:eb:13:02:33:dd:1f:2a:b5:
3d:16:b2:e2:d2:34:eb:aa:ff:c7:9a:2f:f2:88:92:
60:a0:ce:82:f4:ec:16:c3:fa:63:c7:df:af:8f:6d:
84:71:bb:f8:99:2d:9c:1c:17:77:e5:6c:b4:da:cb:
48:87:50:a2:fb:72:ef:25:af:b2:dd:7b:3c:02:db:
42:04:e4:37:aa:04:1f:57:d4:6f:44:f3:39:f4:75:
98:c0:20:22:51:04:37:f4:dc:6a:d6:a4:01:9f:c9:
93:9c:5f:b5:d4:d6:fb:0b:20:a1:4e:de:de:72:c1:
9e:e8:4b:fa:8a:d4:f6:a0:a2:54:81:e6:96:a0:a3:
3e:a5:93:74:1a:a6:18:4f:f2:9d:0e:f7:c9:d9:ef:
91:a0:50:50:15:30:2b:85:3f:de:67:73:8e:b3:5d:
5d:ea:6b:71:bd:1e:33:32:25:42:d0:2a:7f:cb:f1:
78:50:4d:58:7d:9b:c1:39:af:af:55:2d:d1:16:cf:
35:84:69:cf:1f:e3:50:16:04:fd:4e:64:86:57:64:
5e:4d:73:d8:3e:c0:f7:0e:8c:65:70:a4:d7:89:b4:
f5:09:b9:fa:c6:45:3f:89:70:55:77:14:be:c0:06:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205563
Signature Algorithm: sha256WithRSAEncryption
91:fa:20:b2:01:cd:db:0d:21:a3:ba:d0:38:f3:50:a3:c8:96:
ef:24:c2:5b:8f:bd:1f:db:06:25:41:b2:4e:46:60:4a:ac:49:
6e:b7:10:32:14:72:ae:ba:29:18:47:02:9f:9c:c3:35:85:c7:
1c:13:5e:e1:8c:50:19:84:41:d7:c2:cb:d5:13:93:4e:82:02:
a3:87:17:7b:fb:09:c5:1f:c2:7d:17:d6:e9:bf:25:11:cc:a7:
10:d1:42:11:84:f2:ae:10:ef:78:0b:62:72:6e:e6:1e:f6:52:
de:71:8c:30:04:7d:89:aa:5e:e4:4d:7c:1f:a8:4e:f9:e8:68:
22:0c:2c:a7:44:bc:36:d7:98:a0:2a:95:6d:df:46:4d:31:e4:
30:45:a5:53:b7:02:66:a5:ec:80:a2:38:aa:a8:38:e3:fe:2a:
97:2e:28:2a:16:ba:3f:34:67:fd:2f:64:9c:af:8d:fb:67:65:
b2:44:fb:cd:98:6a:52:e1:bd:80:fa:8e:09:a2:ce:93:15:37:
bb:20:c1:db:59:9e:6b:43:d6:f6:dc:f2:c5:ca:73:37:40:e6:
05:fa:55:9a:0d:e5:c8:b4:4d:ed:4d:18:7c:8a:a6:d6:34:0e:
f5:ae:38:6f:62:c5:8b:92:11:26:34:b5:d7:a1:59:b6:54:80:
c7:23:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:06:18 2025 by rpki-client