Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer
File: SPEmUDG2es3hHypnONAjRpnRgBc.cer (raw, json)
Hash identifier: RkPOcRl5vEn/2/boeaRnWlbn2B3v5QlYGzarrimBsBI=
Subject key identifier: 48:F1:26:50:31:B6:7A:CD:E1:1F:2A:67:38:D0:23:46:99:D1:80:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01981D0F3C53AF608CA8DC78521E3982A900
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 18 Jul 2025 10:23:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215517
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:0f:3c:53:af:60:8c:a8:dc:78:52:1e:39:82:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 18 10:23:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48f1265031b67acde11f2a6738d0234699d18017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:3b:bc:c6:e8:0e:6b:75:82:2f:6f:79:74:
ee:cf:c7:45:72:41:0e:2f:77:2f:4d:c9:b7:99:bc:
ae:65:02:3c:d2:d3:8a:79:66:25:98:ca:63:2b:16:
4d:d1:f5:a6:fb:21:11:3c:d6:f6:6f:12:4d:f6:e2:
68:44:eb:16:9d:ff:46:34:ae:2f:fa:1f:16:ba:01:
54:e9:6d:15:2a:25:8b:75:2f:54:1a:2d:9d:55:58:
0f:87:4f:58:3f:78:69:1f:b5:61:45:99:6e:76:0b:
b0:02:ec:42:97:92:98:58:0f:3c:c0:46:3f:a4:a0:
6b:55:6e:de:6c:7f:33:b8:e5:e6:2b:71:06:58:f0:
f5:b5:52:44:c5:54:7f:eb:23:64:11:b0:ae:4a:5b:
fe:81:1b:80:33:18:8b:04:f7:9a:1b:a2:84:9b:31:
ce:4c:79:11:84:d9:87:3f:d0:d8:85:e5:19:20:44:
40:b5:67:ac:f8:1b:6a:f6:80:a8:57:54:fa:a6:16:
f7:43:17:18:68:cf:d9:f7:19:c2:1b:7a:15:32:1f:
dd:93:98:02:90:cc:e3:47:a1:09:46:26:22:22:24:
a4:b7:c7:e3:ce:5a:71:35:e4:31:48:d2:6d:7e:99:
84:d0:4c:39:f9:5c:24:03:64:dd:ca:1e:09:94:2b:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F1:26:50:31:B6:7A:CD:E1:1F:2A:67:38:D0:23:46:99:D1:80:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215517
Signature Algorithm: sha256WithRSAEncryption
80:df:cf:bd:6f:b9:0f:c7:35:74:c6:01:61:8a:be:e4:87:38:
26:03:9d:9a:a1:95:78:67:1d:ce:d1:8f:72:8a:57:2e:89:a8:
9e:49:cb:f2:e7:df:85:5a:61:33:0b:92:2b:47:fc:63:6d:c6:
7d:6d:4b:2a:19:d4:7b:2c:39:2f:fe:af:72:65:90:fb:3e:2d:
d1:9e:9e:b4:b5:ca:b6:6a:ba:66:9b:71:b8:94:2c:55:5f:31:
28:52:72:74:51:dd:87:86:89:a6:ad:69:70:ac:27:18:c2:c5:
9a:4c:f2:e2:81:17:94:92:51:4a:c6:e7:c8:85:69:2f:9a:e1:
5b:af:94:f8:ab:11:dd:37:3f:73:fb:4a:1a:d0:10:ec:68:e8:
8d:3b:52:f3:9b:5e:a5:5e:f8:38:a7:1b:75:30:4e:a0:f7:86:
d5:59:21:35:74:55:f1:82:7e:9a:26:d7:75:1e:b0:39:db:10:
57:f0:1f:87:bd:bc:9c:67:c8:f5:20:e5:a0:cc:1c:e1:50:98:
42:7e:04:4d:95:b9:78:9b:17:34:35:af:7b:1e:f6:0c:f3:39:
3b:8a:db:49:48:4f:7e:00:22:2d:63:c4:e4:62:41:05:e6:e7:
b0:7e:10:c3:6d:e2:50:8d:79:3f:ce:e2:b4:38:25:14:22:39:
9a:a6:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:16 2025 by rpki-client