Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
File: bM3IK654APfVB8c3kkhpvetaduo.cer (raw, json)
Hash identifier: wnVVwAUwAUKVQzJvbBT4dcbNzasIkOXSNRGLRvgotx8=
Subject key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198E54B0007028131903B4B09ADD6C10DEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 26 Aug 2025 07:32:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2488
IP: 147.125.0.0/16
IP: 2001:67c:1b70::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:4b:00:07:02:81:31:90:3b:4b:09:ad:d6:c1:0d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 26 07:32:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:84:0b:93:68:4a:e9:67:c7:be:c9:d3:b9:
01:df:45:31:ab:7b:f0:6b:fb:ce:07:2a:e1:8e:5d:
28:ec:d9:21:9f:42:b0:18:b3:5e:a4:81:af:b9:1a:
ce:55:02:ba:93:41:51:c4:05:72:2d:02:6b:2a:21:
db:e4:31:27:71:68:77:62:3b:27:07:8b:e0:43:45:
0c:1d:64:f8:e0:a6:3f:65:14:66:0e:2b:93:b7:f2:
8b:25:60:e6:46:cf:cb:75:6b:34:a1:01:99:fb:2b:
9e:8e:7d:64:14:76:11:3f:43:8e:52:c1:18:29:34:
35:89:13:66:fb:bb:fb:b2:d4:3b:0d:aa:6d:5c:61:
92:2d:a7:ab:b9:ce:c8:4e:9d:28:4a:57:1a:4b:92:
63:d0:32:dc:47:6f:94:51:63:30:d1:3c:7a:55:58:
54:5d:95:66:e2:9b:3d:8f:bb:1f:15:5a:d6:22:09:
35:1a:82:8f:86:52:17:52:a6:20:ed:5b:23:46:9a:
89:d5:68:93:ad:ae:d9:63:3d:74:a0:f9:e6:66:ea:
b6:56:1c:02:53:e9:57:00:92:a1:75:ce:90:1a:90:
de:37:b0:a9:aa:d5:6d:37:52:50:f4:d9:bd:49:9c:
34:99:47:ca:f8:a1:b3:b4:9c:b1:4d:fc:18:50:10:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.0.0/16
IPv6:
2001:67c:1b70::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2488
Signature Algorithm: sha256WithRSAEncryption
31:af:98:eb:dd:28:f6:e9:b6:d1:9a:79:81:a5:43:ef:1f:12:
1e:fa:4d:e1:18:86:79:3e:3e:73:cb:5c:1a:a7:f2:12:01:e5:
34:c8:f8:0b:38:cb:09:5b:37:1d:89:55:b9:8a:ea:c6:ba:6c:
b7:03:56:ac:8b:07:37:4a:15:fc:09:81:7a:44:69:27:0e:d8:
47:25:c2:b5:11:87:72:8a:d2:9d:f3:c8:b7:83:59:ba:56:18:
fc:63:4d:e7:92:02:f6:02:8f:df:4b:2b:b8:d9:59:00:0d:0e:
88:1b:f5:78:e4:47:73:fc:27:56:25:f1:50:6d:dd:1a:18:39:
1e:4c:ef:0d:42:a0:cf:66:b9:0b:c9:94:8d:1c:cf:03:ba:6e:
ff:76:7e:a0:11:04:64:8c:a0:57:8b:22:2b:96:4a:af:d1:a6:
da:35:f6:7d:04:d1:fa:d8:5e:98:25:1d:1e:ed:d5:9f:5c:d0:
2a:59:59:f1:f1:ed:e9:fb:9a:c5:63:49:1f:6a:2e:64:21:83:
d2:ba:57:64:f1:98:9e:c1:4e:0b:5c:66:c9:b9:41:bd:a4:76:
4d:9c:53:d2:c3:a4:60:3d:62:99:bc:c4:fc:c1:a3:bb:54:a4:
d3:76:e0:ed:41:bd:c6:b8:55:b6:33:b0:51:94:96:64:29:3f:
a2:5f:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:54:41 2025 by rpki-client