Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.cer (raw, json)
Hash identifier: QUgXAzLgIVWAr0CGERUrvuW+nPBjlkzaK0P6k65CwWE=
Subject key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01992B47011B918E6620242C04CC04D9F137
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 08 Sep 2025 21:41:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211715
IP: 2001:67c:1350::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:47:01:1b:91:8e:66:20:24:2c:04:cc:04:d9:f1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 8 21:41:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:ea:ed:ff:39:ed:a6:9e:99:80:1f:ca:a3:
f2:96:14:00:92:ad:ed:48:39:b0:8a:2d:19:f1:71:
28:9d:7f:9b:d5:ab:05:fe:d7:59:47:c7:d2:ff:de:
22:8f:86:c7:15:15:3b:3d:53:54:64:99:2a:b6:f8:
f2:8f:38:c0:b2:de:0f:09:c7:04:96:a7:e3:7f:e9:
23:66:85:53:28:fd:57:19:11:b9:ae:ab:9e:51:27:
e2:36:a9:bc:72:ff:3c:97:10:16:e1:d2:b4:aa:1d:
e6:a7:eb:ae:4a:5d:8a:08:44:0c:b9:7a:05:f5:65:
59:a4:33:2f:5c:5a:97:28:ed:4e:40:7b:fd:6a:1d:
42:75:dc:fd:ba:d7:43:40:d6:0f:dd:d6:78:c2:b4:
19:61:75:91:40:20:f8:c0:39:bc:05:60:49:d3:c3:
6f:30:42:14:31:1a:d8:27:a9:bb:06:03:ab:61:32:
24:c5:91:d5:c4:b2:8e:40:f7:0a:66:6f:52:99:ce:
2e:d5:d4:26:bf:0a:3b:6e:a3:be:09:6f:fa:7a:43:
d2:49:a4:75:59:01:d4:5c:be:2a:f0:eb:de:8c:68:
94:bf:ce:14:e6:43:a9:ee:39:1b:1e:1b:24:ea:af:
c1:a9:15:5c:f9:5d:4d:dc:93:d9:f8:4a:11:99:ee:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1350::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211715
Signature Algorithm: sha256WithRSAEncryption
38:3a:cc:04:38:67:8f:82:d2:f3:63:e0:b9:c7:bd:52:f9:ae:
40:00:a6:13:4e:22:4f:00:35:bd:99:81:d4:76:c0:1d:ac:a3:
56:29:3f:20:a2:dd:29:7f:d6:4a:49:2f:7c:23:0a:f2:33:83:
b9:27:e5:2c:82:3a:26:fd:c1:ad:ca:19:63:e9:3c:b1:69:c2:
4b:e6:0b:96:6b:dd:cf:ee:8f:3b:0a:a6:04:53:21:ee:b1:db:
77:cf:5b:c8:17:48:7f:41:56:13:e1:3e:37:82:31:db:4e:1e:
8c:c8:19:ba:d6:ad:99:e6:62:0a:e4:53:5e:e4:a7:9b:61:fc:
0c:e8:59:4d:ea:bb:73:20:a5:52:bb:60:d0:64:b5:13:2d:73:
d9:ae:eb:bc:85:38:3f:0d:94:bf:32:31:71:be:fd:f4:9f:a7:
7f:2a:eb:07:55:0f:5a:3a:4d:7f:c3:6c:15:79:de:55:71:b7:
d1:28:c6:40:6b:6e:8c:96:a0:ca:15:cb:69:9a:35:5a:ed:56:
a7:e2:b5:34:60:78:6d:8e:6c:7d:d2:d0:30:c2:3d:9a:a9:ff:
51:b8:8e:b1:8c:d5:85:b4:8d:95:ad:43:a5:4d:6b:31:a2:85:
70:80:f0:a2:38:d9:f7:73:55:e2:07:08:18:71:4a:c6:62:f7:
ab:47:97:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:53:34 2025 by rpki-client