Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
File: sCJf0DWnzmSnyIveca61YPNIOXQ.cer (raw, json)
Hash identifier: 8OBimlpmIIgN6c8lXRAxR43xqQpyMyxgES+kAOg54LM=
Subject key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A0B8272F7B890DAEA44EA0E4622566C05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 Oct 2025 10:41:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210528
IP: 2a0f:3ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:82:72:f7:b8:90:da:ea:44:ea:0e:46:22:56:6c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 22 10:41:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:01:57:f6:f5:c3:df:06:15:24:93:0d:17:11:
53:8a:42:be:44:43:17:a0:cc:cd:51:80:48:16:ca:
fc:31:f8:3d:29:06:8e:86:a7:a3:02:bd:a3:b8:cd:
a7:28:a4:40:94:0d:40:61:69:d6:47:d2:c2:30:6f:
ec:6d:a7:a3:67:85:39:48:df:78:95:0c:c6:08:c4:
09:20:61:6b:d0:14:3e:9c:26:cd:c9:e0:07:89:8a:
a2:41:fd:18:1a:90:6c:6b:78:d9:8b:0f:9c:5d:db:
f6:24:49:bc:80:6a:77:ff:4f:37:3c:41:e0:9d:3d:
f5:cc:fc:d1:df:62:6f:99:6b:a4:d7:01:55:fb:48:
b9:e2:14:51:1d:34:08:dc:37:7d:bd:70:79:da:58:
ab:3e:9e:77:c4:d9:cb:80:50:4b:a1:cc:b7:ac:87:
f0:6c:79:ef:d7:4b:52:f6:e0:69:c1:03:71:ef:cf:
9d:9c:b0:4a:41:27:49:e5:e8:f9:54:82:66:34:1d:
b4:92:85:1f:de:13:b0:dd:eb:0a:d6:7f:03:5c:04:
c3:1d:b1:10:9b:05:ed:25:51:46:f7:cf:34:46:48:
e5:ba:65:d1:33:68:14:d3:7b:49:34:5f:43:84:59:
75:bf:af:00:f0:30:c9:93:e4:3e:9d:3e:90:39:a9:
fe:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210528
Signature Algorithm: sha256WithRSAEncryption
09:f2:2f:dc:e5:5e:87:4b:85:ef:ba:15:7f:1b:bc:2d:33:5b:
c7:be:8a:4d:26:62:4a:1e:31:4e:9c:c5:c4:8e:b0:40:07:ce:
1a:18:53:8f:74:62:c2:56:b0:6c:79:b8:ab:85:f2:92:4c:3f:
44:d4:98:91:eb:90:f2:68:88:75:13:32:fa:24:d0:85:45:b6:
ee:7f:54:e8:c8:4d:29:11:b9:1b:fc:a2:82:dd:ab:3b:cb:d8:
ba:a8:a8:7a:6a:12:1f:51:6a:ae:a3:dd:99:8b:00:32:52:8d:
7b:29:ac:d3:db:c4:97:17:04:f8:9f:46:72:c9:bd:da:6e:23:
93:7a:43:a9:43:43:8a:76:4a:8a:a1:ca:1f:e8:7e:9d:c6:6f:
6b:67:bd:7f:c9:10:04:c9:0f:e5:91:6e:95:e9:c9:1e:96:c0:
67:70:55:ad:c5:84:7e:2e:39:2f:0d:02:89:28:81:e2:94:24:
1b:53:74:5d:7e:ce:df:80:c2:20:a0:bc:81:49:d7:2c:6b:78:
c3:f1:34:ed:93:9e:f8:fe:2c:d7:5a:36:2e:aa:fb:55:ad:d7:
b5:88:bd:cb:19:fd:8a:3e:28:23:3c:69:5a:c9:42:6c:68:c6:
37:95:56:1e:4b:0a:e4:fa:18:83:2b:da:32:d6:d4:16:5c:ca:
2f:f7:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:03:56 2025 by rpki-client