Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
File: YAJlJf1EpPx1siRPgNAiY09fdjU.cer (raw, json)
Hash identifier: R7DUIB65gsr+uFTxZuecisOycB+UDFvBUYuhzjxXcYw=
Subject key identifier: 60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01985BF19E8681B7BF0ABCE497ADF83F55F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 30 Jul 2025 15:26:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203787
AS: 216172
IP: 185.30.108.0/22
IP: 2a00:9e60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:f1:9e:86:81:b7:bf:0a:bc:e4:97:ad:f8:3f:55:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 30 15:26:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60026525fd44a4fc75b2244f80d022634f5f7635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:a5:37:a4:64:06:e7:b5:76:2c:bd:4e:54:
91:73:45:4f:1e:63:8b:bb:46:13:cb:9c:54:df:f0:
19:d7:b4:55:81:dc:6c:ef:5e:f8:a7:e5:48:e1:bd:
bc:35:c3:b7:1a:19:6a:de:7e:1c:8c:24:c9:36:f4:
ae:82:79:91:d3:0f:f0:d8:ef:e8:90:ee:e4:46:dd:
44:92:7e:fa:e5:37:3b:cd:01:23:4c:30:19:90:f9:
62:ae:b1:1c:20:23:98:ce:ab:73:e8:e4:18:3b:7b:
fa:a6:76:ef:2d:52:92:58:30:d1:dc:a4:ff:1e:1a:
7f:d9:1c:dc:d1:dc:92:bb:72:48:23:42:8f:c1:9d:
8f:68:fe:a1:80:ee:d1:73:6f:f8:20:25:ec:a9:9c:
c0:3f:7c:2d:61:66:97:04:a9:f4:a5:9b:67:3d:de:
c7:18:fe:21:de:1f:e0:ad:cf:67:f9:24:49:60:30:
ae:1f:c0:94:09:1e:17:92:85:f8:41:5b:3a:18:1c:
cf:6f:d4:dc:02:47:a6:bd:86:78:d6:72:b6:6d:30:
be:28:c4:34:cc:f9:93:89:d5:f5:29:e1:66:fc:27:
98:42:29:8d:33:b4:35:1b:be:77:38:e5:5b:20:c7:
98:50:20:ab:d6:f2:fe:37:b5:46:68:1a:54:28:b0:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.108.0/22
IPv6:
2a00:9e60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203787
216172
Signature Algorithm: sha256WithRSAEncryption
45:40:c7:fc:18:86:17:b2:ec:a1:39:61:c2:43:18:42:71:b3:
0c:c8:71:f7:e0:1b:9b:1d:a9:fd:86:5f:83:f6:24:58:c6:42:
b6:07:65:22:8f:9a:fc:b1:f3:65:40:4e:a7:13:ff:dc:51:1e:
3a:25:5a:42:1d:90:b3:03:5c:b5:1b:06:56:f7:32:97:1a:61:
5f:cf:fd:c1:3b:fa:64:69:ed:74:c4:12:66:5b:16:f4:a1:c5:
54:55:4e:a3:8f:41:48:ee:ec:eb:89:68:fa:5e:96:cf:a3:e5:
ce:b6:a7:c2:d0:b4:e9:27:49:be:e4:c8:98:5d:34:bf:df:bc:
b7:80:48:19:95:74:a3:8a:cb:ad:99:31:e5:25:1c:2c:d5:3f:
e4:83:47:c4:50:ca:4b:07:eb:91:4a:16:56:81:89:a8:57:c6:
b0:dc:30:b4:ac:db:86:60:24:07:de:19:2b:0e:5c:6d:9d:2c:
53:98:9a:a5:de:9a:6d:5d:96:b5:0e:7a:d3:f2:1f:6e:d5:44:
61:31:c7:45:df:0b:e7:06:a1:98:f8:88:2e:04:ce:cc:bd:30:
4c:19:94:4b:41:aa:d0:dd:92:75:ff:06:b4:84:8a:d2:3d:48:
6e:93:ab:89:e5:e1:b3:00:92:cc:b9:ff:28:6a:2d:35:be:d9:
2b:88:1f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:38 2025 by rpki-client