Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
File: 33WbWvPabJ3wM7DemYlwpOeWVdA.cer (raw, json)
Hash identifier: 1nT9wrWId0TCfhvh8Uqrp7E/UJFFS7v9/8tEc3/mcBk=
Subject key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A55D401A3B8D6DAC729041D94DA4D72C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/
Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/fe3737fb-095d-444c-92f4-3f7221fb544c/notification.xml
Certificate not before: Wed 05 Nov 2025 21:02:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214101
IP: 2001:3fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d4:01:a3:b8:d6:da:c7:29:04:1d:94:da:4d:72:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 5 21:02:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:eb:6a:a8:ec:c8:73:ff:40:53:10:66:a7:
3e:38:85:46:41:99:33:30:91:26:41:11:f6:38:f6:
54:ca:90:9d:5f:e3:9b:0c:5a:17:98:94:65:ba:4f:
e2:1b:a8:68:94:59:ae:60:af:f0:80:ba:d5:ed:4c:
b5:a9:a6:e8:8f:4a:c1:1a:0f:bd:c5:f6:d2:7c:c5:
c6:bb:96:78:4c:a9:da:da:68:1b:92:31:6a:cc:2a:
b5:21:27:30:ac:4b:0a:05:d0:e9:43:99:b5:c7:4a:
a5:3c:aa:74:16:f5:1f:d2:3d:13:72:fa:9f:35:74:
fa:16:92:ee:c5:76:88:09:f2:da:7e:17:24:69:bf:
75:9f:ee:09:ce:e6:43:9f:ae:ac:5e:98:7b:0e:64:
f2:a1:50:2e:bd:75:f1:3f:5d:e9:36:a3:f8:5a:69:
90:f4:8f:ec:09:49:d5:06:4d:b9:ef:a8:18:11:b3:
18:37:7a:73:a6:fe:36:3d:af:69:2b:0a:9b:b7:76:
b3:bd:d6:e2:b7:ac:4c:45:19:b1:1d:2f:b6:e1:6f:
41:07:1b:86:01:75:64:2b:ff:e2:2d:df:b7:ed:72:
3b:a5:7a:d1:23:1c:02:d7:05:fe:b8:c2:dc:2d:0d:
8e:16:37:b5:5e:d7:63:d2:a6:21:96:e8:6a:e3:eb:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/
RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/fe3737fb-095d-444c-92f4-3f7221fb544c/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214101
Signature Algorithm: sha256WithRSAEncryption
38:69:eb:f5:41:33:86:7c:fc:89:4a:d5:ce:68:8e:20:97:a6:
47:56:d8:4b:cf:94:ff:3d:8d:0e:a5:1a:fa:29:0f:98:9f:89:
da:cc:ff:eb:9e:73:5f:0e:35:88:81:ee:c2:23:e4:28:a2:0c:
a8:49:e0:d3:f3:73:de:8a:58:d4:da:88:30:50:c0:b7:9f:9d:
b0:78:58:4a:cc:13:df:cc:69:07:c4:80:6a:b2:d1:27:a4:d8:
4b:6e:fe:7f:a1:c0:d7:15:21:a4:c9:e8:df:05:5b:3e:c3:52:
60:ac:71:95:f3:14:97:5d:da:50:c2:f1:55:2c:b0:8b:4a:43:
2f:6c:dc:00:bb:59:36:1f:91:c3:41:d8:4b:9c:84:2e:f4:f2:
17:24:2b:51:ff:99:99:ab:35:6b:a4:52:ba:74:8e:47:40:38:
c0:4d:33:5a:04:e9:55:16:3d:ae:5f:a8:f2:60:b2:5e:5c:6c:
f0:3e:d5:0b:f2:2a:cf:e9:b5:53:cc:81:d4:c4:f3:da:7a:be:
24:eb:be:20:f6:da:11:be:5b:5c:72:08:95:66:d3:0c:0f:1b:
19:c4:ee:5a:d2:8f:50:cf:59:70:aa:eb:dd:ca:b2:05:41:c6:
4b:bd:7a:10:94:ee:02:4e:65:61:2c:4c:95:2d:70:51:c2:ce:
52:5a:ed:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:19:51 2025 by rpki-client