Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer
File: 6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer (raw, json)
Hash identifier: SCSQA+3DWuZC+KDz7fhSHUkDndVBe4dAdLgJRBtMJFA=
Subject key identifier: E8:1C:EF:FA:73:05:FA:66:78:89:7A:ED:BB:BD:21:64:DF:00:8A:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A2C80DBF0871211D317208E39E7AFEA84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Oct 2025 20:27:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202827
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:80:db:f0:87:12:11:d3:17:20:8e:39:e7:af:ea:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 28 20:27:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e81ceffa7305fa6678897aedbbbd2164df008a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:a6:2c:94:73:40:4e:a8:ba:b6:ca:99:37:
21:77:55:31:82:19:a5:e5:18:7a:c8:2d:48:f1:7a:
cc:16:a8:36:cc:3a:6c:a5:7f:e8:fb:49:ad:03:f3:
8e:dd:85:95:4c:3e:5d:ce:6f:6b:37:c5:68:ed:45:
55:30:30:c0:3d:b3:11:18:87:f4:36:0b:97:33:6d:
66:2f:08:71:bf:04:a8:3c:7d:65:49:42:6b:95:0a:
cc:fd:5a:db:48:e5:76:40:bf:4a:ce:2b:84:40:1d:
4b:45:fd:75:84:85:2c:65:9a:21:a0:4e:a1:39:89:
cf:1c:e5:7a:04:26:76:be:80:5d:52:41:94:2e:06:
cf:e6:f6:0a:00:61:68:01:9f:75:b6:22:0f:dd:f0:
c7:82:fe:81:5a:d8:15:82:b5:04:39:cd:4b:ff:28:
c1:72:b6:7a:9c:1c:33:79:22:78:d9:d1:1f:96:8c:
86:85:d6:6a:f9:fe:79:88:6b:f4:0a:7b:a5:5e:5b:
de:8c:40:d4:59:19:3d:b3:1d:cc:42:6c:ec:76:6a:
6f:55:ae:3f:25:73:5a:50:82:4a:42:1c:a7:c3:30:
be:7b:00:9d:a9:96:6c:cf:3b:95:3d:0a:67:3c:3d:
26:25:ad:fc:4f:77:e7:c0:fe:c8:34:e5:e5:4c:3a:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1C:EF:FA:73:05:FA:66:78:89:7A:ED:BB:BD:21:64:DF:00:8A:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202827
Signature Algorithm: sha256WithRSAEncryption
1f:84:d0:83:e9:7c:42:7e:34:08:e6:e4:0d:60:cf:5b:7f:93:
64:8a:b4:a7:69:59:86:28:11:5b:d6:ba:88:aa:60:87:54:43:
ff:ec:a1:25:48:f5:c3:d2:ee:77:f1:6e:66:5e:88:c9:14:91:
af:cb:d5:b1:52:3a:bb:46:d5:57:1f:9d:27:1b:11:81:7b:8d:
8c:aa:a6:c3:5e:c6:da:10:80:e6:37:00:1e:a1:04:2b:8c:40:
ba:9a:83:7b:86:18:89:a5:24:88:41:c8:37:a2:4b:3b:9c:74:
7e:ca:1b:8d:12:14:26:30:7c:e1:49:70:d8:06:ef:ad:65:4b:
8b:15:23:fd:a5:ef:7f:d3:71:69:de:ae:4c:cb:e2:d0:85:4b:
3a:7a:e1:d8:bb:6b:0d:58:c1:c3:c9:f7:73:8c:50:c7:3c:95:
5b:ed:eb:da:42:d0:b3:ff:07:d6:42:c1:13:69:97:e6:8a:d4:
83:5f:1f:f3:75:3b:94:a4:b7:af:68:77:ae:85:0e:76:e4:35:
f2:d4:dc:5d:ec:b4:38:ff:1b:fe:82:cf:ab:64:46:d7:c9:e3:
d5:b5:e0:18:26:c9:5d:43:6e:78:fa:be:4b:94:53:92:cd:64:
c9:a1:33:ac:5d:08:8f:65:61:33:56:17:64:54:ab:6f:2f:c5:
b3:c9:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:03:58 2025 by rpki-client