Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
File: k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer (raw, json)
Hash identifier: h3i7VGx91iKmhIA+m4PPolIRLSfKpXf6ORVazMU0mzI=
Subject key identifier: 93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199E86BCD7AE173B7FA6A8D770D84E639D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Oct 2025 15:10:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 38932
IP: 185.186.112.0/22
IP: 213.231.128.0/18
IP: 2a02:4320::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:6b:cd:7a:e1:73:b7:fa:6a:8d:77:0d:84:e6:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 15:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:ef:f7:7f:3f:d6:9a:5e:ea:e6:3b:5a:6d:
6b:9a:a7:c8:e4:0f:ef:6e:db:e9:e1:7d:11:62:91:
00:f2:71:45:cf:20:f5:d0:6a:8f:6f:54:ef:cd:c2:
a6:ea:13:2e:4a:75:e9:68:53:a0:d1:ab:ba:c3:b1:
99:d9:1f:92:d5:97:78:4b:11:48:e1:bc:89:0f:17:
89:05:64:b6:f5:79:db:b4:7b:36:29:67:5d:48:e6:
7c:c4:fb:33:ff:b3:43:4a:8c:18:ae:9d:cf:17:9e:
8f:c1:0f:1a:00:75:74:60:3d:fe:36:d2:69:27:48:
7d:1c:ac:28:64:8b:59:ce:82:65:d8:1b:08:f5:e7:
73:ee:52:e9:f8:69:54:43:c9:87:ab:c0:c8:b0:cd:
19:58:d2:b7:91:24:e8:c2:4b:7f:31:d1:d4:83:27:
7b:de:46:0f:65:a4:ac:c5:fc:66:49:82:21:06:d5:
14:1d:dc:6e:ec:1c:1b:1f:c6:54:bc:02:45:20:d0:
43:e6:42:3f:c7:04:fc:cf:e3:65:6b:0a:f1:ff:86:
d6:1a:2d:d8:ff:62:d8:21:e6:c2:1d:8b:aa:96:19:
34:80:d2:91:80:40:95:c1:d4:c3:05:1a:f5:7e:ee:
2b:f9:3a:e4:01:ed:e5:ae:2d:b4:dd:fd:bc:08:cb:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.112.0/22
213.231.128.0/18
IPv6:
2a02:4320::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38932
Signature Algorithm: sha256WithRSAEncryption
2f:eb:15:d8:98:af:be:2b:de:59:e2:27:fb:08:ec:ca:d4:21:
55:cd:f3:71:31:70:61:09:42:e9:a0:80:42:76:8a:80:e0:e9:
7a:1e:62:a0:93:f6:f1:d7:95:e9:2f:69:8f:4d:d8:fb:cb:d0:
77:0c:22:16:c1:e7:d7:59:ee:40:5c:7e:6b:e7:aa:93:69:8c:
b9:0e:54:5f:8d:71:dd:2e:6b:fc:3c:4c:de:f3:38:21:d7:c6:
4b:d9:35:8d:5e:a7:3a:3f:9e:c6:7d:be:30:b1:13:11:da:96:
54:ec:aa:73:60:69:43:90:bf:06:09:6e:5d:0d:14:db:30:1a:
56:f2:dc:4d:02:90:f4:f3:2b:45:e9:cc:a8:1b:ad:97:d7:98:
43:b7:71:06:e4:92:26:c9:a3:d8:1b:f2:bc:fb:5a:c5:92:e5:
35:1f:bd:22:c4:ed:a0:9c:17:c3:bd:1a:34:e7:d7:a0:ae:77:
ff:b1:da:05:78:37:a8:58:87:fa:8e:1d:5e:93:30:2d:2e:e4:
48:52:24:9f:74:7d:0b:b3:89:d9:2c:59:ff:e9:2c:20:c0:3e:
53:b4:29:33:c7:c9:36:e0:97:20:dd:26:4b:91:89:d0:5e:4b:
29:63:d0:32:51:06:70:27:c9:77:e6:d3:fc:18:9e:89:75:22:
30:e9:3c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:11 2025 by rpki-client