Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
File: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer (raw, json)
Hash identifier: 0F/d/lZgPUQJHJQahi7cPCnUIAgNE/BRANUQezehTDA=
Subject key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A71F7F571606F5965001B10671294924C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Nov 2025 08:11:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203316
AS: 215202
AS: 215918
IP: 81.85.59.0/24
IP: 185.138.212.0/22
IP: 2a03:a7a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:f7:f5:71:60:6f:59:65:00:1b:10:67:12:94:92:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 11 08:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:fa:ea:67:7b:71:95:16:cf:25:26:c2:39:
0e:86:0b:39:95:a2:e8:f4:32:3f:07:06:44:12:5b:
6e:75:e5:d9:fe:2e:65:05:64:92:96:70:18:ff:8b:
3b:f6:62:99:d6:da:83:c5:35:5b:99:06:46:a4:a3:
e0:ee:99:12:eb:12:23:79:f7:24:b9:87:3b:ba:d2:
74:5a:4f:f2:2c:4d:94:22:4a:12:f1:73:58:6b:b4:
62:71:26:25:b4:c4:79:9a:67:84:56:44:37:9b:2b:
99:ce:60:1a:3e:a3:d8:ba:49:7e:cd:86:1a:41:ad:
2a:cc:fe:78:4e:96:63:c3:47:b4:98:cb:da:15:88:
6c:fa:7e:83:58:92:b8:2e:15:12:3e:9e:91:26:8c:
46:cf:31:47:f1:82:c0:34:b6:4d:e7:e4:4e:32:5c:
20:58:62:1b:b1:69:43:48:f2:42:81:d7:98:84:51:
57:2e:ef:e8:79:d7:e5:fd:fb:84:4a:62:7b:98:2d:
88:69:b3:af:c1:a0:d0:82:c9:98:d2:17:c5:ec:79:
6c:b4:19:0d:6c:e3:06:74:d1:1c:ab:44:e0:59:1f:
1b:66:d6:a2:e6:b2:1c:39:3f:35:ad:74:14:f5:33:
8d:1f:08:ac:61:11:0d:23:09:1d:21:60:7e:b4:3f:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.59.0/24
185.138.212.0/22
IPv6:
2a03:a7a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203316
215202
215918
Signature Algorithm: sha256WithRSAEncryption
53:43:89:ef:f8:a6:24:8e:b1:71:e0:e0:57:d1:05:3c:7f:c8:
a2:c0:3f:41:90:e6:10:4f:e2:47:46:f6:20:00:a7:22:2e:e3:
6a:e7:a6:21:73:11:11:9b:81:3c:32:c2:81:cb:a0:06:29:17:
1c:35:af:cd:a7:2d:87:1a:5f:a6:45:00:6b:44:a6:e7:3b:84:
84:2c:da:3c:ba:05:0a:b3:4d:92:d1:aa:aa:49:db:15:01:8e:
ad:11:7f:01:c3:13:07:a8:ce:9d:5a:12:79:84:7a:9c:7c:40:
a1:8d:f7:a8:22:57:ef:4c:09:2f:28:61:b6:c2:c6:55:8d:6d:
55:01:17:e4:02:e0:a3:8c:d6:37:f3:45:00:c7:50:6b:46:20:
cd:d7:f4:34:04:4e:83:1f:f5:4f:d9:a7:37:79:bf:d6:4f:d0:
b2:c8:fa:c6:8b:a4:76:24:3c:e2:73:8e:87:d8:8d:48:d6:57:
04:cf:78:70:76:bd:db:b6:87:ad:0d:64:8f:dc:78:27:c1:bb:
4b:4e:84:64:f7:6f:20:49:d5:ae:7e:63:ca:ab:8f:2f:ca:11:
12:8c:33:71:46:65:45:c7:b0:2e:15:b5:de:f2:12:ab:5d:51:
92:72:fb:dd:76:35:47:d0:3c:5b:8b:8f:8b:00:81:ab:ce:35:
e0:88:75:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:10:59 2025 by rpki-client