Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
File: UfKdGEvMUP5lTd70AV3hfSRv0qM.cer (raw, json)
Hash identifier: 9cZbbvf2cfrPCLy9gOMuULUGgrQwXNO0rnvqyDXbvcA=
Subject key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198604A5247AA0DB65FEAA2111BDD48D7B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 31 Jul 2025 11:42:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206033
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:4a:52:47:aa:0d:b6:5f:ea:a2:11:1b:dd:48:d7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 31 11:42:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:9d:f4:ef:1d:2b:86:90:24:8c:f4:9f:45:
8f:55:56:42:48:fd:7d:48:38:8a:2a:08:58:4f:8f:
ca:08:b2:95:79:8d:f8:b2:fe:2e:d6:75:d9:ec:c9:
15:43:04:2a:0e:2c:92:81:dd:16:fc:ba:4b:f0:bf:
db:e8:b3:bd:d3:12:4b:2c:d1:2d:5b:7d:8a:e8:0e:
54:d0:b5:70:36:f5:52:2a:26:0f:5b:50:d5:10:a9:
36:d7:1c:bc:27:5f:29:ff:20:3a:47:44:ee:b6:5c:
70:72:4b:74:e7:d5:bb:8b:d2:2f:ba:bd:f1:92:96:
21:13:4d:f1:94:fb:97:b8:d7:41:11:17:73:f6:b7:
65:bc:19:ce:f0:d0:26:a3:31:a4:af:ac:5a:a9:4a:
f4:f8:5f:47:68:fe:8f:6f:72:13:76:ec:8c:db:d4:
07:ec:57:b1:ab:13:73:0a:97:cc:22:a7:0a:5b:b4:
ed:60:1b:e3:5a:72:91:14:f7:3d:09:b2:0f:2f:1c:
d1:f8:a2:a2:8c:9b:6f:41:6e:34:8d:b0:9e:3c:68:
ea:be:97:fa:f8:25:4c:79:44:97:26:0b:4e:71:07:
67:7f:e4:e7:bb:9c:a8:95:ea:f3:cf:52:53:df:50:
73:ee:c2:fe:25:3a:6d:fc:43:69:e1:9e:ce:e1:e9:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206033
Signature Algorithm: sha256WithRSAEncryption
35:77:cc:53:a7:b4:68:58:44:32:c2:96:7f:d8:11:21:b1:93:
c8:5c:27:e1:25:a1:91:e4:b8:ff:28:3d:9e:f2:0e:3c:72:e8:
29:fa:f1:8a:67:7d:35:6e:92:d4:0f:b8:c1:09:13:56:e2:31:
e2:58:5b:45:95:0d:1d:48:c9:4e:dc:03:cd:ba:9d:43:9c:cd:
27:d6:9c:b2:16:77:fb:85:0b:c1:33:ec:cb:33:48:3f:4e:30:
cc:fe:df:84:66:a8:7c:bd:ea:03:17:25:e7:1f:2a:42:c1:e0:
1e:1b:af:bf:f9:4d:2f:e5:63:3a:48:95:9b:99:77:9d:bd:5a:
a5:f0:d2:7b:df:ef:8d:b9:da:22:51:bf:e5:9b:3f:31:6f:eb:
79:eb:1f:8a:01:c2:cd:69:34:76:6e:69:73:59:3e:2c:24:7f:
d5:52:e6:35:bc:23:c1:c9:91:c0:0e:12:44:84:9a:d8:b1:df:
f2:6a:ca:7e:22:97:cd:90:5c:a1:75:4f:56:c8:51:99:8c:56:
79:70:6e:1c:94:59:e8:63:7c:e5:99:99:28:2e:4c:3e:54:f1:
ba:c4:fe:40:d7:7d:f4:db:07:70:40:14:69:83:f9:b3:80:96:
73:fd:74:7b:d2:96:92:7d:36:48:22:bb:c0:22:c7:27:0c:a1:
70:f3:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:37 2025 by rpki-client