Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer (raw, json)
Hash identifier: 2WTMwWWshbDkH6Fe19MOzfW2Crof68JseIRsUc5FqgU=
Subject key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01991AE15B441BEAEE4FCC08D9D02049DE10
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 05 Sep 2025 17:16:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214404
IP: 2a0d:5480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:e1:5b:44:1b:ea:ee:4f:cc:08:d9:d0:20:49:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 5 17:16:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:f6:18:ce:d2:c1:0d:a7:5b:c4:a4:b4:d6:
e5:e9:d0:2f:b2:af:c2:35:84:3c:e2:a3:4d:b2:72:
9a:55:5b:06:87:3c:55:54:3c:b9:2a:13:7b:bc:a0:
a7:17:56:13:49:c2:67:fc:2c:ed:d0:6f:ce:36:21:
75:21:22:b9:fa:68:ab:d9:6f:e9:e2:66:a6:a5:b5:
41:96:30:2a:2f:ba:49:2c:9f:d5:52:05:f8:b5:26:
ec:a9:37:55:1b:7e:82:74:fb:fe:6c:7a:cc:c8:d6:
25:e3:da:b3:e0:0d:92:5c:47:82:a4:ba:7e:61:6a:
3f:05:15:29:1f:86:dd:6c:6f:83:4e:08:11:77:1a:
db:11:e8:6c:cd:18:dd:6c:67:4d:aa:d1:6c:db:72:
e5:d9:04:2f:a7:ed:26:e2:87:0a:e0:64:03:2d:37:
19:c8:6d:33:47:17:d4:9b:48:9b:34:e9:82:f3:2d:
f9:54:3a:dc:3e:45:cd:fa:67:7b:9a:7c:8a:d0:a7:
8b:7f:71:bf:7b:ae:1d:fd:56:48:7c:94:29:af:2a:
ba:d9:05:61:f1:a7:66:dd:4f:96:9f:a1:b7:51:6f:
a7:fa:97:54:1a:4e:60:f8:84:39:c8:4b:94:b8:f0:
d3:66:9b:49:cc:5c:d2:93:91:6d:c8:21:8d:9a:3c:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:5480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214404
Signature Algorithm: sha256WithRSAEncryption
ae:4e:b5:e2:b5:a0:00:61:5f:00:43:96:18:ff:e0:0f:2e:96:
a9:41:d9:75:cc:f2:23:0f:96:6d:8c:a6:d4:aa:97:b1:49:71:
17:bf:4c:51:45:f8:52:72:df:de:2f:3c:f2:ce:77:6f:bc:2b:
c2:2e:49:15:d9:01:93:8e:91:07:99:ae:29:f6:99:66:36:11:
9c:98:6b:70:48:52:23:cd:0b:a0:0c:e7:9f:f8:17:f6:f3:5e:
69:04:66:8d:cb:a1:f4:f9:2e:e5:be:54:44:48:6a:9d:1b:2e:
91:13:4e:4f:06:78:65:99:cb:7c:0e:e8:de:07:2b:fd:1b:20:
bb:d7:1a:63:48:08:73:a1:d5:cc:a1:53:33:f5:2c:8d:6d:74:
8e:bb:64:44:cf:d8:7b:5c:f0:94:86:3d:cd:f1:97:76:1c:96:
ae:d3:98:a7:f0:73:c3:57:e5:df:30:79:7f:99:02:b5:d3:b8:
98:86:4f:60:84:29:8c:ea:49:47:bb:a4:0f:39:b7:d0:e3:01:
27:7c:f4:65:37:93:2c:fe:77:97:a6:17:51:3e:4b:e9:c2:df:
d0:c5:27:43:a5:04:9e:b9:e9:04:f3:12:91:fa:ae:10:66:ea:
1b:fa:a4:ca:db:94:b2:9a:35:a2:cb:fa:9c:8f:be:23:d3:b4:
0f:38:40:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:14 2025 by rpki-client