Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer
File: hWlFRtV2UOyEZtOS0X-jQylgFUA.cer (raw, json)
Hash identifier: jzrTE3SaZOgl7/2ndue3gdkmL1w52NTFfuhsOP4PVrA=
Subject key identifier: 85:69:45:46:D5:76:50:EC:84:66:D3:92:D1:7F:A3:43:29:60:15:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198854141D086F1EE5014A2288C3C5A23B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 07 Aug 2025 15:58:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216260
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:41:41:d0:86:f1:ee:50:14:a2:28:8c:3c:5a:23:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 7 15:58:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85694546d57650ec8466d392d17fa34329601540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:d6:8f:f3:26:21:ef:a9:ed:1c:33:e6:5b:
8a:fc:6f:7f:7c:99:70:2b:df:14:c8:97:cc:7a:f6:
be:0b:c8:46:ec:99:56:7b:1e:1d:65:b7:02:9e:fd:
72:7b:5b:f9:7a:4a:00:85:b9:81:81:d1:1d:d7:a9:
97:8e:a5:23:77:4b:ad:23:0b:ce:31:d6:f2:7b:ff:
78:25:51:31:2f:0a:c1:50:2b:6c:3d:42:88:b6:4a:
8e:14:7c:e0:73:98:f8:68:55:ec:73:b5:73:52:00:
98:18:2c:c6:d1:5e:62:f8:1a:b4:0f:68:e8:ea:2a:
69:93:0a:2a:33:09:5d:c5:01:ab:19:19:bd:2c:f1:
6e:f9:9b:fa:ba:0f:97:e0:56:fa:ad:7c:cc:f4:d9:
37:87:40:a4:d8:b9:b6:d7:48:73:49:04:95:33:ac:
dc:d2:b8:e2:00:25:bd:f3:cf:31:42:f0:07:e4:4c:
ed:89:de:a1:df:25:58:86:5e:a9:ac:9f:ee:b6:dd:
42:f7:f6:1e:6e:3c:46:e6:48:33:95:83:d1:45:ce:
50:11:f6:b4:f6:7c:0e:1e:cc:d8:e2:b0:da:31:98:
fb:2e:6d:90:b6:24:d7:78:cf:28:12:36:46:4c:85:
14:04:50:b3:92:3e:f1:66:8e:fd:58:72:3f:86:53:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:69:45:46:D5:76:50:EC:84:66:D3:92:D1:7F:A3:43:29:60:15:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216260
Signature Algorithm: sha256WithRSAEncryption
33:ae:6b:a6:b5:5e:40:e5:ce:3d:ea:92:84:8f:94:7d:76:5d:
87:e0:b4:e1:ae:bb:da:2f:57:e1:e2:58:b6:cd:a7:3f:b5:15:
0b:71:6d:d7:dd:2f:01:c0:ca:ea:ec:71:71:07:0a:6d:8c:70:
d3:2b:1a:f8:13:55:54:12:13:12:13:d3:81:bc:f5:42:94:e0:
36:0f:5a:7a:55:63:90:26:dd:57:57:66:44:c0:39:6e:be:30:
01:f7:98:77:25:88:06:15:b3:cd:c1:ce:6c:6e:bd:04:de:00:
fd:e9:31:ad:9d:3e:5e:a7:52:d4:a5:ae:f3:71:53:b5:8b:f1:
99:7f:fd:27:83:aa:99:ad:60:09:0b:c0:56:d8:54:a1:64:ba:
79:c8:76:43:cb:c2:d7:8c:e5:28:55:b6:ba:7f:ef:1d:49:90:
af:08:03:43:0c:6c:d9:0c:72:17:95:67:6c:a5:fe:57:65:59:
d9:a9:43:bf:74:17:30:6f:69:14:1f:2d:ce:83:b6:a8:af:8a:
a0:f8:7d:f3:9f:5e:64:88:47:15:f9:cc:7d:b0:f3:9e:63:a1:
30:c7:96:01:5d:d0:92:5d:ea:cb:ed:70:85:cf:9f:75:a6:56:
84:a6:7e:4c:2f:2c:c1:fb:50:17:45:7f:a6:28:14:74:30:1c:
76:c0:73:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:03:50 2025 by rpki-client