Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
File: GnFdTPofFQdfxhDtuwkFIg1mkp0.cer (raw, json)
Hash identifier: 5SZSyoG2luekxm5hkmSmBKXCK534L0+Zor1uS/R8EYg=
Subject key identifier: 1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198F57FC40ED8CFE574780AB94A2BB84F4D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 29 Aug 2025 11:04:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205008
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f5:7f:c4:0e:d8:cf:e5:74:78:0a:b9:4a:2b:b8:4f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 29 11:04:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a715d4cfa1f15075fc610edbb0905220d66929d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:1e:71:6d:16:81:97:62:75:a6:f5:1d:f9:
41:ec:ae:a6:40:e2:d7:28:5a:b7:74:d7:e0:77:d3:
a7:0f:2f:de:c6:ea:a7:b5:d7:9d:d8:f4:8a:5a:c8:
35:22:24:5b:75:66:65:a4:03:25:8d:8a:af:f9:6d:
56:30:be:7b:98:ef:04:45:5c:10:a0:1a:56:69:a2:
32:e6:d7:eb:ca:19:87:d6:d5:2a:be:87:9c:0f:eb:
96:3f:76:aa:0a:75:82:56:92:ef:3d:94:ad:76:37:
52:ec:13:40:97:34:b1:0b:f0:bf:47:f1:fc:b1:4f:
c1:00:1a:0c:88:80:48:96:fc:0a:28:7d:ee:1a:29:
68:2d:9e:fc:48:0f:23:26:6e:10:d5:fb:b2:eb:c5:
6a:85:9a:60:85:5a:74:2f:a4:d3:a2:17:1b:1d:18:
22:dc:28:79:61:59:83:a5:ad:98:96:1a:e8:89:10:
42:d8:07:c0:17:bd:ba:f9:7e:33:fc:cb:9a:c8:4a:
d8:d9:7a:66:98:f5:86:90:76:64:12:3e:d6:d8:e0:
ca:53:e4:c1:bc:52:b5:53:65:b3:81:2c:f3:49:70:
2a:70:cd:df:82:ae:11:c8:d2:00:3f:ff:b8:00:fc:
8f:b5:52:97:f7:5b:a2:b7:21:d3:6e:7a:8e:c9:55:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205008
Signature Algorithm: sha256WithRSAEncryption
65:1b:c8:a7:7a:a9:43:37:f8:8e:b6:c7:03:39:62:22:18:01:
75:cf:4d:b9:91:5f:19:99:df:62:91:b2:53:75:9a:69:b5:74:
50:a1:9e:a5:4c:d1:9d:cf:45:7e:79:9f:4d:60:a7:43:20:80:
f2:d6:d8:b3:53:ad:28:ab:0a:9f:c0:4b:f0:ad:6d:0d:0d:fa:
2b:04:58:50:3c:6f:86:dc:02:c6:d2:2a:60:05:0a:b7:7a:57:
e7:19:ef:79:35:52:4c:fd:18:50:d2:6d:43:8f:23:d1:b6:8a:
c8:0e:57:94:6a:f5:63:fa:ad:8a:ba:ad:14:40:82:59:33:21:
c1:0e:34:bd:11:20:b6:05:12:8b:9c:2f:e1:3a:2c:05:08:8e:
e1:24:17:29:bd:57:c9:4c:6f:17:4c:50:a9:e0:70:d0:5e:04:
7a:b1:1d:ed:90:2f:06:32:e3:05:e6:1e:d4:5d:c7:0e:35:a3:
55:14:af:92:11:9c:bf:0b:bb:ba:70:6c:40:a4:31:74:21:f5:
61:92:a2:b1:6f:ac:5c:a5:13:a0:e5:f5:f3:82:6f:fb:93:68:
b5:c6:62:cf:23:6a:db:34:9d:5e:14:38:c6:f1:38:32:9c:f9:
6d:43:29:7b:58:c8:35:81:cb:8f:c5:36:9e:87:53:55:4e:17:
5d:45:d6:d4
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZj1f8QO2M/ldHgKuUoruE9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwODI5MTEwNDA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTcxNWQ0Y2ZhMWYxNTA3NWZjNjEwZWRiYjA5MDUyMjBkNjY5MjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ0ecW0WgZdidab1HflB7K6mQOLX
KFq3dNfgd9OnDy/exuqntded2PSKWsg1IiRbdWZlpAMljYqv+W1WML57mO8ERVwQ
oBpWaaIy5tfryhmH1tUqvoecD+uWP3aqCnWCVpLvPZStdjdS7BNAlzSxC/C/R/H8
sU/BABoMiIBIlvwKKH3uGiloLZ78SA8jJm4Q1fuy68VqhZpghVp0L6TTohcbHRgi
3Ch5YVmDpa2YlhroiRBC2AfAF726+X4z/MuayErY2XpmmPWGkHZkEj7W2ODKU+TB
vFK1U2WzgSzzSXAqcM3fgq4RyNIAP/+4APyPtVKX91uityHTbnqOyVWQxQIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFBpxXUz6HxUHX8YQ7bsJBSINZpKdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyODVi
ZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjI4
NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEwMjg0LzAvMUE3MTVENENGQTFG
MTUwNzVGQzYxMEVEQkIwOTA1MjIwRDY2OTI5RC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDINAw
DQYJKoZIhvcNAQELBQADggEBAGUbyKd6qUM3+I62xwM5YiIYAXXPTbmRXxmZ32KR
slN1mmm1dFChnqVM0Z3PRX55n01gp0MggPLW2LNTrSirCp/AS/CtbQ0N+isEWFA8
b4bcAsbSKmAFCrd6V+cZ73k1Ukz9GFDSbUOPI9G2isgOV5Rq9WP6rYq6rRRAglkz
IcEONL0RILYFEoucL+E6LAUIjuEkFym9V8lMbxdMUKngcNBeBHqxHe2QLwYy4wXm
HtRdxw41o1UUr5IRnL8Lu7pwbECkMXQh9WGSorFvrFylE6Dl9fOCb/uTaLXGYs8j
ats0nV4UOMbxODKc+W1DKXtYyDWBy4/FNp6HU1VOF11F1tQ=
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:00:42 2025 by rpki-client