
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aZiG8JQELuax_o03_tnjqkmipeU.cer
File: aZiG8JQELuax_o03_tnjqkmipeU.cer (raw, json)
Hash identifier: LlBnVxpHWY1Q62jFFNSJTmzxusb4VVWh/RS7XopEK0M=
Subject key identifier: 69:98:86:F0:94:04:2E:E6:B1:FE:8D:37:FE:D9:E3:AA:49:A2:A5:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198FA50E69A89889D7902121C493A9B6727
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.mft
caRepository: rsync://rpki.axivora.net/repo/Axivora-Net/0/
Notify URL: https://rpki.axivora.net/rrdp/notification.xml
Certificate not before: Sat 30 Aug 2025 09:31:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198025
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fa:50:e6:9a:89:88:9d:79:02:12:1c:49:3a:9b:67:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 30 09:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=699886f094042ee6b1fe8d37fed9e3aa49a2a5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:82:ea:16:2e:92:64:2f:9e:20:18:1a:e7:
a1:01:ec:07:e1:59:3e:23:5c:3f:ef:2b:55:6f:d8:
de:f8:79:41:e6:07:40:47:13:69:ce:0c:5f:74:50:
15:f1:24:b2:90:b4:1f:e1:fa:cd:aa:28:0d:70:7c:
65:0e:e0:d7:96:5e:a0:4d:f3:79:0c:8f:80:41:75:
bf:64:6c:79:3b:1b:3d:5a:0b:32:64:72:76:69:a7:
57:ef:8f:3b:29:55:28:54:2d:d8:cd:01:5c:46:80:
53:83:1c:67:54:9e:86:c5:63:09:a5:5c:5d:97:ac:
03:57:bf:e7:dc:c8:74:68:58:18:0b:2a:6d:69:44:
a0:31:1d:5f:92:27:db:8a:67:25:2e:51:ab:79:a0:
98:68:fc:b6:8a:15:83:1d:c7:7d:59:46:c1:24:8c:
f3:b6:16:bb:2c:5e:0a:8a:a3:9c:23:e8:23:b7:03:
af:c9:67:6f:31:80:87:c1:f4:be:4f:f9:63:b2:22:
65:18:4a:fe:09:39:3a:15:49:d4:92:b2:df:bc:22:
a4:25:d4:b5:d8:be:e3:a5:5c:a4:19:ed:29:1e:4f:
87:d0:8d:08:40:70:d3:7f:d4:cd:14:76:65:7f:dd:
92:b4:ea:28:2f:a4:44:1e:d2:85:78:a6:b5:0f:1c:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:98:86:F0:94:04:2E:E6:B1:FE:8D:37:FE:D9:E3:AA:49:A2:A5:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.axivora.net/repo/Axivora-Net/0/
RPKI Manifest - URI:rsync://rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.mft
RPKI Notify - URI:https://rpki.axivora.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198025
Signature Algorithm: sha256WithRSAEncryption
73:b6:0f:da:81:bf:2d:96:64:95:8d:79:d0:6f:59:00:cf:84:
ba:81:9c:06:ec:e1:9b:e5:c2:68:5c:69:c9:51:2c:6c:c2:20:
24:98:4a:ea:29:47:66:ff:ec:27:b5:cf:44:37:6a:ad:d8:98:
eb:a0:a7:9e:34:13:02:88:80:04:f9:18:16:ef:d7:37:8b:a8:
ef:46:42:1b:da:13:81:7d:42:4b:10:ac:e5:7a:b9:6b:f0:e0:
9f:f4:1d:bd:8a:10:f0:4c:f0:7e:fc:61:37:f8:88:58:d0:53:
ac:a9:44:4b:f3:30:f9:d6:44:c1:a0:f6:31:0b:3f:0c:5e:1a:
aa:a7:8b:eb:18:b8:d4:80:80:10:7e:04:bc:aa:7e:91:f8:4b:
d2:38:6b:80:f6:42:24:91:5b:9e:ff:56:c0:3a:3f:5e:6b:d2:
86:7b:95:40:8e:a2:50:c5:53:1d:22:03:8b:98:34:71:4a:1c:
26:89:d0:35:b3:ef:c0:ad:30:ae:39:c9:aa:b7:6d:de:92:a4:
7a:fe:aa:28:d8:4b:54:fc:58:9e:e3:25:6a:0f:7e:cd:37:ff:
4f:cd:1b:34:08:25:f9:34:74:fe:3c:e3:79:73:2c:eb:2c:8c:
49:13:62:e6:f2:d6:c5:f3:8a:80:ee:1a:d9:97:5f:88:a4:56:
b8:37:6c:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:01:33 2025 by rpki-client