Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
File: pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer (raw, json)
Hash identifier: +0liuTWUMPsEv4FyMyY7SggAaOQkm2oUf2i0JCzeuz0=
Subject key identifier: A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198AE475E6F50E244E289BE31965029CF0E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 15 Aug 2025 15:09:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213934
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ae:47:5e:6f:50:e2:44:e2:89:be:31:96:50:29:cf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 15 15:09:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a540abd19882cac80b766d72ad8fec24ab9550af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0c:48:88:55:05:88:be:23:33:6f:8c:a6:b8:
b8:f8:6c:b4:6c:45:b7:4d:db:ab:b4:de:55:91:cb:
03:8b:03:26:9d:32:b0:60:ba:39:52:3e:e1:d7:4e:
9f:6f:77:d4:fd:56:47:82:6b:47:d3:dd:a3:a8:47:
c8:7b:9b:c7:18:b1:08:43:61:6e:ea:b2:4e:25:ec:
e6:b3:46:c1:d8:89:64:24:66:a5:07:09:f0:3f:3b:
d4:1b:9e:38:35:e5:35:b3:f1:a1:50:1a:d6:73:d7:
b2:bf:6e:87:8a:fb:cc:a1:e8:20:f7:c2:b2:1d:a0:
1d:15:95:f6:fd:b8:8f:68:4f:0e:75:db:bf:79:2b:
51:8a:07:64:e3:76:27:d6:93:34:fb:9f:d5:90:af:
28:b0:d8:23:07:5b:63:0f:e9:7e:d2:99:cc:0c:bd:
a2:4f:e7:33:c8:16:a9:27:76:9e:07:0e:3e:1b:3f:
c2:b4:a8:eb:52:ba:26:8b:d7:b6:5c:58:0b:4f:fc:
7c:2c:5e:ee:e7:69:9d:67:f6:b3:af:36:57:42:b5:
56:e0:e8:46:01:98:31:a5:02:37:f1:84:eb:fc:1b:
af:fd:30:30:41:cb:cd:3d:22:65:a3:63:48:3d:1b:
4d:0d:7c:ba:37:96:77:2f:34:bd:14:4b:4a:aa:e3:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213934
Signature Algorithm: sha256WithRSAEncryption
73:18:83:d6:d6:fd:7c:3e:b5:66:37:c9:af:46:dd:b2:0e:a7:
d3:a9:7d:fc:7b:e8:f2:d4:01:41:d9:fb:46:44:a1:fe:9b:d1:
e5:ca:83:89:6d:6b:c4:2d:6f:c5:45:05:a9:96:df:09:c2:20:
54:96:75:16:08:ea:47:02:bd:c9:b7:e2:5a:15:af:9a:9b:d8:
14:d4:64:ed:ed:fe:b1:7a:77:25:0c:bf:9e:d6:e3:71:2b:27:
57:d6:df:26:0a:4a:6f:40:cb:21:39:b2:43:01:9d:60:e6:d8:
d4:49:5d:c4:1d:0e:6c:d2:23:68:aa:7a:ce:8c:0f:2a:8d:00:
8d:1b:60:33:41:f3:7b:1a:86:a7:c3:0a:6e:f5:3c:10:2e:0f:
50:7f:1b:00:ec:3e:c9:ee:cd:b7:a1:ae:10:e1:0b:c5:0d:cf:
6b:03:b8:b5:da:7c:fc:5a:46:34:f2:de:21:a5:d9:28:9b:9f:
ed:5d:17:df:d5:04:63:04:c4:ed:21:b1:8e:bc:44:93:c0:14:
67:53:1a:c6:1e:b9:37:ad:04:83:10:ff:cd:0a:ff:84:ad:a8:
c5:c0:28:52:dd:4f:cd:0c:47:70:be:bd:67:93:1c:8d:11:28:
04:a7:95:4f:82:ed:a5:5c:9f:65:5a:34:63:b1:92:25:b6:c4:
61:11:d2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:09:47 2025 by rpki-client