Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gjptycYnXW8k-Z3kFmCcYihYlt8.cer
File: gjptycYnXW8k-Z3kFmCcYihYlt8.cer (raw, json)
Hash identifier: 5wdRyoNLqEs9+XGZikt5mjoLQlVHb7kmu9DMs3bvEtk=
Subject key identifier: 82:3A:6D:C9:C6:27:5D:6F:24:F9:9D:E4:16:60:9C:62:28:58:96:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198F4F6DBD9CBFC7CC819B3B7E447A01F3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 29 Aug 2025 08:34:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208458
IP: 149.232.243.0/24
IP: 2a05:6040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f4:f6:db:d9:cb:fc:7c:c8:19:b3:b7:e4:47:a0:1f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 29 08:34:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=823a6dc9c6275d6f24f99de416609c62285896df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:7b:cf:28:40:13:88:3b:39:0f:89:65:c5:
fa:3e:40:15:6e:af:47:dd:1e:7f:9b:b4:3a:47:a0:
5e:1c:c5:8e:3d:a5:c0:f1:d4:32:4e:f1:4b:c9:29:
4e:d0:6b:43:bd:4b:c0:a3:45:25:86:0a:52:cb:88:
8d:f2:9b:bf:78:db:e3:3b:27:9b:61:06:98:13:3c:
bc:27:55:03:20:9d:28:14:81:fb:c5:52:3c:6a:d6:
6b:5f:f9:04:d5:f4:1c:5a:0e:be:07:3e:c5:9e:68:
5e:b0:57:8b:4f:f2:c9:93:98:2a:9a:d3:a0:c7:00:
93:c8:ee:3c:84:53:94:63:68:00:1c:5a:20:6b:79:
1d:c7:e4:ec:2f:d1:af:c0:af:f5:93:b4:a2:f0:3f:
69:b8:05:ff:ae:6e:f4:ad:42:78:6d:75:1b:47:e4:
7b:49:22:6a:52:7f:c6:5d:4d:24:53:51:29:4c:5a:
b2:51:12:d7:bd:24:cf:c0:60:95:95:a6:7a:d9:66:
56:c2:0b:b7:93:8a:6a:66:ba:9a:f1:5f:2c:d9:0c:
53:1c:d2:2f:93:ff:e5:f3:65:e9:e1:ce:66:4a:6b:
c6:54:fc:ab:d7:e0:f6:07:fd:e0:03:10:5e:6e:f1:
7b:bf:7e:f3:5a:55:5b:d4:3a:70:b4:64:2c:3d:48:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3A:6D:C9:C6:27:5D:6F:24:F9:9D:E4:16:60:9C:62:28:58:96:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.232.243.0/24
IPv6:
2a05:6040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208458
Signature Algorithm: sha256WithRSAEncryption
91:f1:74:93:f5:30:61:16:46:30:99:04:72:cb:b6:d7:df:94:
9c:79:22:53:5a:bf:c0:53:3c:d2:35:55:2c:29:2d:e0:c9:ec:
f7:e0:a8:d8:2a:bf:25:cd:ef:b8:22:ec:4d:7e:64:9c:52:0a:
e3:68:20:32:e5:12:89:5d:00:5b:9a:09:c5:a1:31:43:47:d4:
a7:0b:f5:4e:5d:c4:00:1a:19:a9:d0:10:7b:5d:65:d9:c0:16:
ff:93:7b:32:fc:33:f8:ec:dc:6b:7b:59:ca:27:47:93:05:0c:
74:3e:37:c5:c8:7f:eb:eb:96:f4:14:da:78:50:2b:d9:29:20:
c4:5c:75:b8:f8:b7:62:c9:da:5f:fa:49:67:a5:af:01:73:2d:
ca:3b:53:c2:12:11:10:27:73:71:a3:76:4f:d9:42:98:30:ea:
c3:93:6f:2f:0b:3b:32:99:e4:08:34:80:ae:de:7f:dc:c2:fb:
1a:5d:e9:50:11:94:29:1e:db:26:f5:e0:0b:9f:7c:c4:27:d2:
47:51:90:6f:4e:37:16:ca:7c:9d:c4:a7:22:dc:2d:8f:32:7a:
de:fe:75:bc:5c:85:db:f1:64:92:60:ef:09:8e:c4:a5:c5:1e:
b8:1a:70:dd:af:dc:a2:84:28:f1:86:5f:86:97:f0:a9:e2:15:
30:04:fc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 02:33:54 2025 by rpki-client