Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer (raw, json)
Hash identifier: SyuGYE75GWAerKYl1xY8TjmWH2v0w11f2HcvxDpohws=
Subject key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01990F70336802737723462AED025CA70C41
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Sep 2025 11:57:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216041
IP: 2a0c:fc80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:70:33:68:02:73:77:23:46:2a:ed:02:5c:a7:0c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 11:57:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:2e:6c:15:38:22:8c:52:72:3f:25:7c:0c:
66:8a:43:8d:ed:a0:4f:8b:83:3a:51:7c:8f:f6:0b:
1a:b6:39:de:af:0f:98:5a:f4:20:18:54:ae:28:4e:
f0:cf:50:8e:42:e5:16:f9:75:d0:ff:21:61:1b:6b:
10:78:65:18:43:dc:ea:a4:91:64:d5:cd:99:e2:0a:
36:b8:68:e8:02:12:75:43:d1:18:af:71:e8:b7:ed:
94:d7:50:32:e9:f1:df:ed:25:19:42:6d:3d:12:50:
c6:9f:6b:e0:ad:f2:46:9e:b3:77:12:ed:57:83:53:
9f:ca:19:33:39:b6:18:43:c4:3e:9e:58:b7:a7:5d:
f9:2b:01:e7:64:32:24:0d:78:0f:cf:34:04:f7:8b:
65:a5:07:66:86:ed:2d:a8:75:63:ce:96:64:9e:84:
c8:5d:11:74:50:ad:e8:0e:bf:36:c8:27:0e:7e:fa:
c3:5c:b7:17:ba:d9:81:a7:58:9c:45:25:f7:de:51:
f6:54:40:de:ae:15:d9:bd:90:21:79:c0:da:96:7c:
ad:8c:cb:af:76:9a:84:e4:63:a0:2b:24:48:3b:98:
a8:56:47:2b:75:63:35:9d:66:83:70:b2:28:2f:82:
c1:94:80:6c:b8:dd:94:b9:a6:89:f7:75:23:fd:03:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:fc80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216041
Signature Algorithm: sha256WithRSAEncryption
80:72:7c:b5:49:eb:29:1f:eb:87:f9:93:8f:5a:f6:b8:e2:95:
b8:b3:dc:e2:c5:df:d0:7a:83:ff:e7:54:c2:15:8d:03:c8:60:
d8:7c:f5:7c:87:9c:e4:27:ae:62:22:04:e4:0c:0c:07:71:43:
54:81:79:70:ed:78:fb:0a:28:f4:41:ee:bb:41:09:1a:12:53:
31:59:e9:3b:7f:3a:ad:6a:7b:af:88:de:c0:e5:7d:05:32:76:
0a:99:4c:9c:85:cb:85:67:bd:1a:a8:21:19:72:da:13:7c:03:
98:da:b5:e3:4e:ac:d6:e7:c3:7c:36:12:2f:56:02:3d:f6:6c:
6c:67:0e:cf:3e:78:f1:30:31:c4:8e:66:3d:d4:d5:1c:12:64:
de:af:e8:eb:90:d6:7f:c6:a4:10:ff:e8:9c:0b:d5:68:a1:04:
6b:39:11:a1:38:9d:b9:0f:6f:a7:6f:25:b2:d1:dd:b0:c7:92:
49:5c:62:c1:4d:3d:51:b9:01:9f:31:72:fc:df:26:f7:69:0d:
77:ba:cc:f7:c1:ea:9d:45:40:8e:d4:77:41:e5:b9:c7:e1:35:
31:0d:f9:39:1f:21:f1:5a:45:33:ab:c0:f9:0b:86:8a:61:6a:
0f:a5:48:23:24:ee:61:24:89:82:24:0e:f6:53:55:91:1e:00:
e2:ef:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:54:41 2025 by rpki-client