Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
File: 3SoSF2c-sRypijUTlSBAfJdo38M.cer (raw, json)
Hash identifier: plZctLbBOL/MIkRKzW7JtZD9N0KHwPsG6hUAMkuiy88=
Subject key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A342411003CED5E7A6B46B9C954E3B9BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Oct 2025 08:02:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a0b:29c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:24:11:00:3c:ed:5e:7a:6b:46:b9:c9:54:e3:b9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 30 08:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:e3:a3:94:34:98:5c:94:70:f7:90:2d:c8:
ac:87:42:6f:69:d0:60:49:21:29:ae:79:dd:2e:59:
b5:be:2a:21:a6:18:a1:9e:c7:3c:06:0c:f5:17:79:
3b:6f:c2:ec:d2:72:2e:d0:74:e6:6b:13:cc:11:3c:
43:89:1b:2f:51:9d:0d:d9:52:aa:0e:a5:fc:f2:62:
7c:a1:e7:a6:cd:a1:38:12:7f:d5:96:1d:2b:00:93:
28:8c:e4:9f:80:0d:9e:98:c7:07:bf:80:6e:8e:08:
dc:57:9d:70:7c:94:c5:b1:76:ce:9d:6d:14:ef:6b:
46:df:e2:27:fd:79:0e:55:d9:90:b4:53:d0:59:5e:
84:61:12:aa:4a:e6:ce:fe:6c:44:6c:47:b4:69:8b:
39:8d:56:de:49:22:d1:16:36:25:b0:d0:a6:b2:91:
a4:df:3e:ed:e7:a8:05:7c:fa:6d:90:17:d4:8c:46:
5e:ce:d5:51:9f:64:a5:01:44:d6:46:c7:4d:cc:b6:
c6:d3:22:4f:50:10:b5:ff:1d:f4:78:89:0f:ee:50:
a3:85:29:9b:ee:89:21:28:5b:ef:d8:3b:46:d8:41:
e1:b9:90:46:d5:80:c9:d6:fe:b8:d1:92:e7:8d:62:
36:68:09:16:87:b9:1f:c5:86:a5:4a:59:40:90:9b:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:29c0::/29
Signature Algorithm: sha256WithRSAEncryption
25:ff:26:07:e6:38:4a:db:ca:24:2b:4c:f9:1f:e8:9c:e8:4a:
19:c9:4d:28:2e:b1:00:91:f2:ae:dc:13:13:0b:e9:39:43:a6:
da:73:6a:53:0f:02:d8:24:87:a6:84:d8:96:e9:4c:32:96:3a:
e6:71:0f:a3:a1:87:c3:f6:f4:1c:54:ab:c9:3c:2f:53:f2:7a:
0a:bd:70:48:bb:0f:5e:bb:11:76:7d:72:12:04:bd:c2:7c:b6:
92:41:79:15:57:a2:4b:e6:ea:3f:de:de:bb:e7:da:c4:b4:a6:
d3:52:2d:de:53:87:5e:c3:0f:c3:45:8e:cf:80:7d:d7:cc:2d:
4e:df:e1:db:69:52:9a:11:df:1c:0e:f8:c4:c9:f8:3d:a7:5a:
96:b0:1f:a7:dc:09:1c:0f:b6:b6:e9:3c:c3:54:57:dd:f9:90:
bb:6f:59:13:cd:e6:93:f3:14:3b:d9:1e:7c:13:a5:9f:11:f1:
90:ca:7a:c6:5f:1f:28:fe:a2:29:31:ac:59:d9:6e:b1:97:48:
bd:eb:2d:eb:84:82:3a:f8:e0:9a:61:0f:5c:62:55:c5:80:1c:
c5:03:47:0e:a3:e3:ab:ec:16:d6:4a:b4:7e:79:a9:73:b7:e4:
54:d6:7d:d0:63:13:cd:71:7f:34:6e:1b:64:92:4b:42:92:12:
58:97:6b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:18:47 2025 by rpki-client