Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hUzTuoSK-3kvKyGD-mLfLVIIKb0.cer
File: hUzTuoSK-3kvKyGD-mLfLVIIKb0.cer (raw, json)
Hash identifier: I1YSWRdYOgIJ67b7Z0Be9RO66A6x+bekq2uG8LoTkrk=
Subject key identifier: 85:4C:D3:BA:84:8A:FB:79:2F:2B:21:83:FA:62:DF:2D:52:08:29:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01982EA9B7BC4B171325920231E88BA59A6D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/696cb5-8ecc-4df6-982c-0b7ef38a7f87/1/hUzTuoSK-3kvKyGD-mLfLVIIKb0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/696cb5-8ecc-4df6-982c-0b7ef38a7f87/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 21 Jul 2025 20:25:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215685
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2e:a9:b7:bc:4b:17:13:25:92:02:31:e8:8b:a5:9a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 21 20:25:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=854cd3ba848afb792f2b2183fa62df2d520829bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:90:fd:87:8f:7f:79:36:1f:f0:61:32:1f:df:
c8:1d:a4:12:c8:b2:22:37:ff:04:4f:0e:37:3b:e3:
47:17:0c:2d:d6:57:df:d6:e6:34:d6:98:6e:0e:bc:
77:c7:af:14:09:34:f0:32:b8:45:f0:12:1a:4f:e0:
ac:c9:f2:ac:29:84:16:76:e8:5f:09:e0:65:41:9d:
dd:ee:7d:00:2d:72:e7:cd:7b:2e:d9:52:64:9f:cb:
86:a2:d1:d9:9e:92:00:97:cc:b1:f0:76:68:79:dd:
b2:ed:c6:4b:e0:c0:78:27:12:e5:6f:42:da:5a:93:
cf:c9:c2:b0:79:1e:6b:e4:e9:a8:3c:91:af:52:54:
e9:f1:87:0e:83:99:6e:cd:96:18:24:97:df:7d:7f:
46:25:d9:53:22:5b:25:5f:11:08:b8:ba:89:2a:a1:
40:2e:02:c9:97:72:72:87:73:ce:d7:4b:2d:82:09:
f0:18:a4:1c:14:77:63:b5:38:20:09:fb:5b:bc:4b:
76:78:b2:f2:b8:59:c2:78:12:f9:2d:f6:e0:78:4f:
c0:4a:da:f7:82:12:22:9e:ec:87:9e:45:2b:bf:7f:
ce:f2:da:3a:05:a6:9b:21:02:4f:f3:a9:89:a1:5c:
b6:f5:ea:a9:76:65:4a:8f:99:bf:ae:af:ea:8c:7e:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:D3:BA:84:8A:FB:79:2F:2B:21:83:FA:62:DF:2D:52:08:29:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/696cb5-8ecc-4df6-982c-0b7ef38a7f87/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/696cb5-8ecc-4df6-982c-0b7ef38a7f87/1/hUzTuoSK-3kvKyGD-mLfLVIIKb0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215685
Signature Algorithm: sha256WithRSAEncryption
6e:85:2d:53:3e:d4:6a:9a:82:34:f0:6d:7d:5a:36:1f:e9:d9:
d8:39:f4:cc:b9:69:c1:44:7d:c0:c0:44:3f:39:ff:2f:12:35:
63:6b:45:37:34:d7:43:af:51:aa:a9:07:d6:6a:a0:a1:ea:eb:
6e:c1:20:6e:c7:a6:4c:f1:8e:47:ad:47:e5:4c:b6:06:f1:7f:
a1:40:98:f7:5a:1a:96:35:19:0c:1c:68:8d:ed:45:5d:ae:f6:
94:43:2c:93:7b:bf:4e:44:3d:65:36:07:71:35:f4:55:88:38:
0c:f3:23:bd:0a:e8:05:05:38:c4:03:11:50:5f:db:3c:19:ef:
2e:39:6b:fa:cd:52:e4:a3:1f:58:63:ef:02:a9:a6:42:e9:1f:
58:c5:ee:1f:93:56:ba:9b:8e:77:7f:f5:7f:05:57:2f:33:01:
8e:23:1e:12:be:54:4b:e4:62:49:c8:59:e7:04:51:60:2c:89:
05:07:c1:71:da:b6:bb:16:1b:98:91:6a:72:35:c2:f2:ff:49:
a0:9f:7a:5a:3b:4e:b9:02:a9:7f:c1:17:85:b8:2b:11:9b:70:
c7:2b:24:8a:14:18:6f:0b:d2:d6:a6:94:af:37:ce:b3:3e:e6:
dd:23:4c:34:6b:cb:5a:1d:0e:20:80:3a:5d:0a:4b:58:5c:f7:
16:19:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:42:49 2025 by rpki-client