Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
File: R_hjAUxgM_HYkkKz5elWFIn5wmo.cer (raw, json)
Hash identifier: Ev04bSgUA5SsN5txH3vmivN1AOwFPLLuiRw+uuMOy1A=
Subject key identifier: 47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019883B3784F42209BF40D60B0D04F709940
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 07 Aug 2025 08:43:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205965
IP: 92.42.205.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 Aug 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:b3:78:4f:42:20:9b:f4:0d:60:b0:d0:4f:70:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 7 08:43:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:e7:53:6c:e9:38:d9:70:83:07:79:f3:9b:
19:fa:48:5e:56:d3:db:a2:e4:a7:50:7f:a0:22:ee:
f4:b0:d3:35:0a:b9:3c:00:b0:3e:17:30:11:f0:12:
8e:58:9b:bf:9c:16:d7:c8:cd:e9:3b:6b:ff:e5:0e:
7a:2d:c3:77:07:f4:e7:8c:4d:50:ea:21:9e:00:8e:
f4:ed:ea:f3:b4:41:13:aa:fb:62:20:a2:3f:6d:d6:
4e:88:80:57:cf:6e:0d:9f:98:20:fc:be:a2:1e:ae:
a2:6c:51:25:8b:0b:6f:c4:9d:f4:a2:4e:8f:d6:df:
81:d1:47:38:5c:28:00:7c:93:29:0b:2c:67:f9:10:
2f:05:63:a9:87:7a:92:2b:27:f0:f0:60:48:b0:f5:
e8:3f:1e:ba:c0:16:45:ef:58:25:a7:2a:ad:58:c7:
30:8f:12:b0:a6:8e:c7:32:44:58:68:15:15:d8:26:
10:57:5a:9b:38:6e:bb:92:96:8c:e9:86:ca:55:a2:
52:89:36:32:95:f4:71:9b:b5:81:68:36:88:34:6e:
9c:be:44:73:95:ba:1b:a7:b7:82:6c:c7:c2:f6:8c:
07:75:f6:70:1c:45:eb:b8:d2:13:66:11:df:69:60:
01:af:fc:ec:36:8e:f3:dd:c5:85:c9:d2:0c:be:07:
39:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.205.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205965
Signature Algorithm: sha256WithRSAEncryption
4d:0a:da:b1:8e:51:88:ca:93:3c:ca:f0:95:90:03:29:c9:91:
73:8c:2a:9a:4f:70:dd:03:5a:59:f0:73:34:a7:8d:7d:f6:07:
57:9c:3c:1e:4a:ca:1c:1d:8f:cf:ce:23:3d:b1:c3:5e:06:7e:
24:f8:79:0e:a3:20:76:31:4a:86:d4:41:37:bf:8d:1f:e5:b9:
c6:07:c1:ca:16:b7:e7:e5:10:92:e0:e4:26:41:2b:a5:a5:d2:
c5:a9:41:d2:0a:28:e2:76:18:a4:46:a4:57:fa:b2:3c:3b:c9:
61:da:1d:71:ea:47:35:73:30:5b:b7:ec:3e:8c:ee:1b:b5:07:
ed:f1:19:84:32:fd:71:bf:da:50:03:18:c4:4a:c1:b4:8d:7e:
42:0e:75:5a:fd:31:99:bf:eb:e3:24:33:95:d6:0a:bb:a7:7a:
fc:e4:ea:9a:97:49:07:5d:97:76:af:72:da:ca:85:d8:fb:6d:
2a:3e:ee:d5:1f:d4:81:1c:22:be:d4:1e:d8:73:05:95:f8:e4:
c1:30:c1:f4:9f:2b:b4:d8:c0:73:ef:b3:96:52:6a:08:49:88:
a8:7d:9a:93:d2:f9:6e:2c:f8:1f:e0:b5:3e:d9:f2:84:b5:e5:
b7:33:8f:e6:98:bd:2d:72:1f:e7:d0:1f:40:33:19:46:e5:b7:
99:ae:a1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 14 11:05:57 2025 by rpki-client