Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uSlkIXfSedGfRHiNubyPENZdm9c.cer
File: uSlkIXfSedGfRHiNubyPENZdm9c.cer (raw, json)
Hash identifier: xmRI/Gave4j45tccWFnJhWJxAaf1GC0oSG/fiyE3mOM=
Subject key identifier: B9:29:64:21:77:D2:79:D1:9F:44:78:8D:B9:BC:8F:10:D6:5D:9B:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019935864B0760CFAECFF96DE0F0CAB6A3D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/e65c73-eeb1-4064-b6d4-b56d0c53ff04/1/uSlkIXfSedGfRHiNubyPENZdm9c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/e65c73-eeb1-4064-b6d4-b56d0c53ff04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Sep 2025 21:26:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213243
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:86:4b:07:60:cf:ae:cf:f9:6d:e0:f0:ca:b6:a3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 21:26:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b929642177d279d19f44788db9bc8f10d65d9bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fa:91:f7:11:85:42:62:df:a1:cf:f4:b1:10:
d7:a9:23:aa:2a:8b:51:b0:86:0d:86:1f:b9:33:8b:
35:e4:24:c7:e4:9b:42:76:94:ec:91:d2:cb:b8:5b:
83:1b:98:91:c9:02:6a:59:7f:7f:98:8a:f7:4b:ab:
26:1a:f4:64:bb:b9:a2:fc:99:2d:42:04:b0:34:a2:
83:96:55:2a:7b:a2:42:c4:bc:ce:34:28:6d:d6:9b:
d7:35:65:d1:95:38:82:25:93:d0:df:eb:d0:29:d2:
d3:31:e0:06:21:5a:66:ba:ff:6f:e8:44:f1:26:f3:
46:8d:9b:a0:22:cc:7b:4e:8a:ad:5d:80:7a:a6:36:
2a:28:f6:6f:79:9e:71:a4:0b:32:2f:11:f9:d3:d7:
f8:19:3e:d7:a1:c6:09:f3:cb:d8:d1:13:fb:61:a3:
f2:d6:fe:30:91:e3:a6:da:07:e4:c4:46:bc:c4:24:
2a:91:b5:21:35:97:18:e9:41:ad:14:40:1b:56:c4:
a9:fd:84:fa:36:26:f8:34:ba:58:99:93:05:59:f3:
a2:98:2c:65:7a:2f:6f:06:a4:31:0b:b9:4b:d6:df:
d8:f5:6e:0d:6e:a1:12:66:80:ea:19:5f:9b:ca:48:
ee:de:8f:8a:1d:1b:68:e7:5d:63:bb:2e:16:1f:94:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:29:64:21:77:D2:79:D1:9F:44:78:8D:B9:BC:8F:10:D6:5D:9B:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e65c73-eeb1-4064-b6d4-b56d0c53ff04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e65c73-eeb1-4064-b6d4-b56d0c53ff04/1/uSlkIXfSedGfRHiNubyPENZdm9c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213243
Signature Algorithm: sha256WithRSAEncryption
73:34:4b:32:74:d8:77:6c:1c:02:2b:83:87:41:1e:5f:38:df:
6b:32:43:79:0c:54:0a:0a:c8:c7:0a:3a:f3:c6:90:c4:25:6f:
f5:4b:32:6a:e6:fc:bf:96:34:40:d8:0b:26:cd:e3:3c:ed:a2:
81:de:f8:0a:bf:7c:f7:b1:78:62:f1:b7:fb:91:21:3c:4f:d0:
49:bc:91:98:b3:cc:02:38:e4:6a:fd:1f:c3:78:64:9c:63:b7:
d2:e6:24:78:5b:16:73:e1:40:af:d5:b5:8d:db:03:68:99:dc:
a2:4a:88:20:27:89:2d:e4:4d:b6:62:cd:70:55:b8:87:b0:f9:
42:fa:ad:90:1a:9e:01:60:a4:c9:60:78:a5:fe:ca:99:79:08:
f6:7e:9a:49:65:1a:56:33:3b:b3:05:dc:59:1e:38:1a:c2:80:
08:b4:02:da:de:b1:33:63:af:be:e6:64:6a:bc:19:6c:f6:45:
18:35:cb:e5:8e:82:78:92:ef:92:90:42:1b:ff:68:15:d3:85:
1c:53:34:47:2e:4b:f2:94:8d:c1:b3:9b:e7:03:e1:76:a7:4b:
0e:06:11:9c:05:f5:7c:50:64:98:cc:9c:87:96:a9:97:ae:7e:
a9:34:38:0e:ce:26:6d:f4:31:8c:81:44:51:5e:d9:f5:e5:2b:
e2:54:ec:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:50 2025 by rpki-client