Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
File: jo6Xer76Kh-ZXonJR_79Rja3lhw.cer (raw, json)
Hash identifier: hqI/gw6tzYlh1IcqZmucWaLJ/knGs33dXuhBnSYDSkY=
Subject key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199F2B103028B7971F8CF5FCEE402CC1FD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Oct 2025 15:01:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48185
IP: 62.193.192.0/18
IP: 2a02:2b8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:b1:03:02:8b:79:71:f8:cf:5f:ce:e4:02:cc:1f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 17 15:01:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:01:0e:b9:78:48:85:2d:92:3c:63:a9:57:
89:9f:f8:85:ab:aa:72:d2:d4:3b:42:5b:38:c9:2f:
ef:9e:94:97:10:8f:bf:c5:e0:b7:1a:08:82:89:73:
df:5b:4a:85:87:d7:6c:b0:08:10:c0:fa:a2:f3:f4:
92:b4:85:a5:62:0b:96:ea:ee:0e:5f:ee:67:49:db:
4e:ce:b1:5c:93:8e:fd:0b:61:ef:7e:3c:f8:88:38:
26:f9:ab:8b:6e:01:2d:79:b2:a4:d4:b6:d0:af:8a:
5d:64:a2:6e:fd:65:8f:2f:70:cd:13:b7:a4:32:5c:
d8:3c:d1:17:d8:0e:43:4d:57:fb:b8:1c:5d:35:77:
02:3b:cd:8a:8a:33:ae:af:a2:6e:5b:16:12:d8:f3:
40:65:30:54:e1:31:9d:48:1f:d7:99:46:d1:4a:99:
6d:94:ac:a1:6c:42:92:3c:f2:e1:af:b7:7d:23:51:
f4:7c:b8:4a:ab:bc:c1:3d:7e:73:9d:33:72:2f:df:
42:74:e3:f4:1a:af:91:01:df:b8:33:36:fb:36:09:
ad:42:27:48:ad:19:e7:56:ff:ad:ae:8c:df:8a:09:
6f:29:9d:64:fd:8d:28:33:a7:91:8b:1a:8a:2d:fa:
e0:0b:78:62:56:93:24:ca:b1:9b:57:b5:a1:ce:f0:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.193.192.0/18
IPv6:
2a02:2b8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48185
Signature Algorithm: sha256WithRSAEncryption
b0:36:bd:8e:b8:53:a9:e6:08:92:5f:f4:9c:00:5e:67:57:bd:
33:da:78:30:1f:79:51:15:b9:75:93:4d:92:26:23:5d:75:fa:
f2:10:fd:f4:1b:19:ee:69:0e:8a:87:5a:49:da:97:09:df:18:
58:61:c6:87:02:86:71:51:0e:37:e5:be:e9:ed:16:47:3e:f3:
fe:25:e7:51:63:62:6f:24:df:21:e4:5b:59:2b:a4:d7:78:40:
02:60:b6:bb:22:a6:55:5a:b6:d8:f6:b6:f2:72:a4:75:40:3d:
96:f5:cf:f5:92:68:e2:06:ec:c1:f9:58:5a:cc:97:46:a7:a6:
98:41:ea:3b:4d:59:d6:ad:25:c6:4b:27:50:7b:65:2f:1c:42:
6c:1f:0a:db:06:78:f4:4f:14:9c:39:db:ed:dc:6c:a9:84:24:
d5:f5:cb:be:d4:50:6e:04:e4:25:64:d5:de:22:e5:90:2e:97:
66:d6:b2:a7:0f:b8:b7:26:5c:31:73:5a:71:fa:bc:2a:c3:32:
c5:a1:6a:35:23:55:1d:4b:66:67:44:f5:62:7f:c3:f4:73:a7:
ff:b7:65:a3:ae:1b:93:b2:c7:b5:53:b1:93:ad:00:b0:f4:84:
aa:5f:14:17:5c:c2:0b:af:5e:47:d9:f6:cb:ae:75:b5:76:7d:
d3:78:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:07 2025 by rpki-client