Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SGLw6V7KPtYlnnTDJ5W78aISehA.cer
File: SGLw6V7KPtYlnnTDJ5W78aISehA.cer (raw, json)
Hash identifier: Shl8ZET/KFHxt6gL5NpANogZIu/mwFZwhFfJZAkq0Co=
Subject key identifier: 48:62:F0:E9:5E:CA:3E:D6:25:9E:74:C3:27:95:BB:F1:A2:12:7A:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019843903C7928B3F819F5794AF765675759
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 25 Jul 2025 21:49:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213026
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:90:3c:79:28:b3:f8:19:f5:79:4a:f7:65:67:57:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 25 21:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4862f0e95eca3ed6259e74c32795bbf1a2127a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:da:a9:27:01:4d:bc:d8:c7:6f:d5:aa:3d:
c0:39:18:2c:6f:ce:63:1e:5d:0d:ae:88:6c:10:94:
19:c3:a2:4d:55:f1:d4:6a:6c:09:e1:e7:d8:b9:59:
16:52:15:8f:61:56:64:00:0b:95:1a:96:0a:8c:ae:
8d:3a:9c:a4:44:5e:9e:93:24:46:49:03:84:38:7a:
5a:c7:2b:0f:7e:87:34:12:a1:f4:37:ed:5d:57:49:
8d:cb:87:61:ea:25:10:e0:72:3d:0c:41:ca:49:a2:
d4:b4:4d:45:84:e2:2f:bb:5f:98:98:41:42:df:05:
c2:c5:e3:f9:64:e9:a5:77:3c:22:e5:a1:81:28:f4:
ad:5a:79:51:d0:2f:25:5e:e7:12:bd:43:20:e6:af:
34:c6:d0:37:ff:34:9d:ca:89:f6:27:7d:90:9a:64:
99:d9:a7:db:ea:5e:61:e0:a6:a5:71:bf:94:30:10:
ee:eb:ce:3c:fc:87:18:bf:96:71:05:4e:09:6a:19:
a1:c0:d4:1a:53:60:b0:97:f3:9b:89:96:54:63:cc:
9e:cc:65:19:38:12:af:cf:0b:ae:d5:6c:99:f3:35:
3b:02:fb:17:15:27:7c:eb:2e:56:22:17:84:23:2e:
34:2c:e4:47:b5:09:63:95:8e:7b:78:c8:5d:04:54:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:62:F0:E9:5E:CA:3E:D6:25:9E:74:C3:27:95:BB:F1:A2:12:7A:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213026
Signature Algorithm: sha256WithRSAEncryption
27:a5:07:28:8a:76:85:c4:04:56:9e:b0:0a:0f:13:41:22:94:
21:c0:ce:cf:48:ff:bb:c7:38:31:ae:eb:4a:32:b6:bf:4a:8c:
2b:11:49:71:3c:8e:a5:3d:e5:3e:1b:c8:0b:d4:54:b7:ac:53:
93:18:86:d6:ae:b9:5b:13:8c:a6:82:32:5e:77:38:18:97:e2:
05:8f:34:f9:bd:e6:bb:89:b6:07:44:a8:4d:68:91:5c:f3:b6:
3f:2d:0a:88:da:cb:f8:ad:d8:2c:ff:b8:7b:41:dd:49:05:a5:
37:7a:a9:e3:63:5b:5b:7e:20:12:a0:9a:4c:3d:5c:e9:a0:6a:
50:97:03:6a:77:e9:d9:47:c6:99:17:43:c5:60:72:f8:57:7c:
b4:7d:ef:7d:8c:78:02:20:55:2c:b1:13:e8:ea:53:04:b0:50:
7e:2b:11:d8:83:6a:40:c8:39:f3:25:a0:4a:80:3a:ab:50:c5:
90:7c:76:85:12:74:e9:ba:d7:7b:d3:24:bf:95:b4:03:ec:b8:
00:74:57:1a:17:e9:96:d8:a0:47:1e:4f:c4:23:c7:f8:62:fc:
1a:aa:18:17:04:0f:5a:9b:1e:8c:7f:35:15:e8:ce:10:db:1b:
3d:f2:4f:6e:d3:e7:9f:48:12:74:51:ab:bd:00:46:80:ab:83:
52:49:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:10:02 2025 by rpki-client