Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
File: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer (raw, json)
Hash identifier: pX8LHg2NuuMyhbv/TCHGXNZAkqy9OSA4Z07qslyRo5s=
Subject key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019932F6CD42BBBE9EB34AF8348344CB5D05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Sep 2025 09:30:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39216
IP: 46.21.251.0/24
IP: 212.126.96.0/19
IP: 2a04:2dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:f6:cd:42:bb:be:9e:b3:4a:f8:34:83:44:cb:5d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 09:30:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d0:cb:ab:3a:a1:e8:44:06:2c:b0:8b:25:3a:
8b:67:b4:8f:c1:e6:e9:be:ac:1f:ab:d1:26:bf:bc:
e0:2f:8a:25:7a:bc:a6:04:fb:7e:21:b5:d6:78:43:
c6:c1:b0:be:51:9f:2a:bc:ae:8b:56:fc:ff:e4:41:
ef:55:d5:2a:36:bc:90:79:cd:ec:a9:cf:4d:bd:7d:
7a:5f:8b:a2:1b:c9:7c:dd:fd:29:9a:6b:67:19:23:
41:02:fb:bc:67:49:fe:80:bb:76:1a:07:e7:94:53:
81:2f:f4:02:f1:fb:9b:7a:97:65:73:58:39:ba:25:
38:99:39:1f:85:78:38:a4:bf:4a:69:dd:a4:b9:33:
44:7c:cf:55:cd:a0:72:71:1f:39:e5:0e:83:96:fb:
46:10:e5:2c:8b:6f:35:4d:4c:3b:b3:43:52:b8:37:
fb:24:d2:1b:34:01:fd:6a:ac:da:72:81:79:63:f3:
ef:9d:07:4f:80:f8:61:85:e4:24:f2:7a:e6:b7:05:
3b:24:d8:48:1a:dc:c0:9b:49:c0:33:81:a6:6d:b3:
7a:4b:7f:5f:60:ad:aa:34:63:60:a9:75:03:8c:d5:
93:4a:44:57:3c:67:47:18:88:04:97:7d:5b:f1:16:
82:f1:88:3a:46:51:8a:62:31:dc:ac:62:43:8c:89:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.251.0/24
212.126.96.0/19
IPv6:
2a04:2dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39216
Signature Algorithm: sha256WithRSAEncryption
62:fd:e5:b8:8a:06:1b:77:8e:85:b1:1b:de:f2:67:f2:ec:d3:
b1:f0:aa:21:c5:9a:7a:a8:67:db:91:2c:4a:b3:0d:a7:cb:45:
04:17:1e:e2:81:9a:61:a9:9a:3f:3a:d9:4d:38:6a:24:ae:45:
27:98:a3:33:ff:dc:58:48:f9:20:16:c0:51:6f:95:6e:b9:78:
32:07:54:a5:0f:1a:2f:fc:0f:d4:68:49:3d:cc:a7:ba:41:01:
30:78:28:05:d1:9e:79:a2:5e:b2:89:40:d1:12:8d:d1:e0:d0:
b7:1e:22:f2:c3:99:b4:b8:a7:58:a0:54:2f:18:3e:69:c0:12:
61:d1:0d:84:eb:76:9e:bf:37:d8:6f:93:0b:28:cb:36:d4:0c:
53:d4:53:da:6f:f7:4a:c5:bf:68:13:cb:5f:df:29:35:1d:80:
fa:da:15:51:58:99:1a:7d:2f:e5:52:8c:c2:d1:fe:fa:4e:64:
b1:f7:b0:eb:7f:fe:9a:ae:e9:03:25:8c:3a:c4:8d:be:88:d4:
7f:66:c1:e9:4d:de:a4:15:95:85:1e:61:73:2e:c0:c1:85:67:
ba:9a:59:ee:a9:84:70:8c:99:d0:98:ea:de:c6:cf:d1:f0:fa:
77:dd:78:0e:e3:0f:47:71:e9:d8:6e:5b:3a:0a:5b:00:fb:45:
0f:25:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 10:53:53 2025 by rpki-client