Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.cer (raw, json)
Hash identifier: dkPSqv7y4gyO72BxVNu8eTcGNxm5Ok+0NWnb5ZDi3Mo=
Subject key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198BBED7FD828376BCCA15994197E9188A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Aug 2025 06:46:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47757
AS: 200385
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bb:ed:7f:d8:28:37:6b:cc:a1:59:94:19:7e:91:88:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 18 06:46:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7f:ba:5f:92:d1:d0:7e:3a:be:e9:50:56:86:
f5:7a:a4:c3:ca:60:3f:3f:cd:3b:cc:bc:29:41:33:
7d:73:a6:43:df:a3:94:59:b6:58:d2:75:cd:56:50:
9f:f7:b1:3b:13:b4:9f:9c:8b:e6:99:57:aa:34:17:
d5:88:63:a9:82:35:20:f8:a1:16:aa:d1:f4:ba:8f:
cd:e0:5e:3d:d0:a4:6d:f7:30:3f:8b:1a:1d:51:94:
0d:11:dc:57:a3:24:89:21:07:cb:1a:ce:40:36:71:
37:51:e9:0c:a3:68:6d:ac:1b:2d:f8:7a:93:ce:7f:
66:cd:e4:6d:d1:b7:e5:3d:48:b5:5a:b1:cb:d9:15:
4c:a6:c8:41:bf:80:27:6c:71:92:99:1a:f3:d4:95:
aa:eb:6a:79:59:bc:55:b2:63:c2:4a:84:9e:c9:36:
12:5c:d0:f2:89:3f:fc:b0:38:9e:f7:57:48:a4:78:
79:f8:1b:82:2b:8f:aa:06:cc:8d:8c:f4:ab:0b:e6:
20:82:8b:5c:8b:e8:ac:5d:9c:c7:1b:34:d0:44:51:
ff:6c:de:18:a7:0b:88:d6:60:18:57:7e:1b:40:b0:
c7:6d:69:49:ed:5f:e2:0f:3b:5d:e8:ce:1e:97:d9:
b8:ed:c4:8d:bb:3b:64:ac:ad:ab:ee:3a:1c:91:74:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47757
200385
Signature Algorithm: sha256WithRSAEncryption
3d:fe:6f:67:4f:63:50:f2:a2:f0:2a:66:68:9c:41:41:ee:43:
8d:d9:2d:b4:d7:cf:47:00:a9:e1:be:18:c8:30:c4:11:e8:87:
85:40:96:5e:75:96:2a:6d:77:ae:cf:46:0d:6e:94:08:34:10:
40:02:39:7e:32:36:d7:a3:d7:32:53:69:5a:56:6d:f4:8a:11:
57:57:90:b6:5c:ac:cd:88:ad:77:52:8a:cc:cd:cd:ec:bb:2a:
e8:66:5d:52:ff:d8:8e:a5:39:d2:fb:81:75:61:b8:1b:51:03:
bb:5d:7c:ca:5c:df:de:45:b2:f3:99:92:50:ea:a7:17:2a:fd:
ad:1e:6a:49:68:49:61:3e:8f:a2:9e:b7:d2:80:8e:e7:3d:84:
7c:3e:c7:8f:99:76:1f:92:eb:0b:5b:42:dc:98:27:a2:86:b0:
e5:4e:7a:81:4a:52:7b:54:d4:2e:0d:ad:4e:32:1c:28:db:99:
91:b3:69:7d:7a:84:c6:cd:47:ff:2f:47:f3:21:96:14:3e:11:
71:54:4c:73:1a:0b:8b:f8:f9:39:c2:37:c3:ed:e7:4c:a3:99:
e7:38:ab:aa:76:f8:27:24:1a:45:aa:bf:66:26:25:ef:18:f5:
90:c9:d4:7b:35:d2:0b:4e:4f:19:51:4d:43:f5:88:0d:af:cc:
a7:cc:4d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:40 2025 by rpki-client