Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer
File: EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer (raw, json)
Hash identifier: a3b1zVx1O4BFbQ3k3QB1QlAXRkxGEyTzIseuNZ9CcrU=
Subject key identifier: 12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197D663BA2727A971F0EFE4687BA7631ED2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Jul 2025 17:02:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 28701
AS: 213056
IP: 45.156.108.0/22
IP: 2a10:4000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:63:ba:27:27:a9:71:f0:ef:e4:68:7b:a7:63:1e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 4 17:02:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12f27a7df2076f8d1dc795277c09a0107d2bdb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:59:33:e9:91:6a:5b:25:9b:25:ab:cc:08:
dd:ed:e9:0b:f6:ef:0c:7b:d6:f8:6e:36:2d:58:16:
55:5f:ac:56:0c:17:5d:0f:30:13:34:fb:07:50:38:
47:19:7d:aa:fe:be:f9:d4:19:b4:67:9f:9e:5f:b8:
b6:d2:d5:c2:50:6d:80:11:ed:7e:0c:7c:ad:6f:4e:
67:97:98:36:ac:7f:1f:1e:d8:1a:84:4f:69:1e:fb:
67:8b:9d:23:6f:be:67:b4:c7:ca:ac:19:b5:7b:a9:
8e:4d:e9:83:79:da:49:d1:12:e4:c3:6f:00:d4:97:
b0:e2:61:4b:f4:ba:5a:05:b0:b6:e4:00:a2:b9:15:
70:70:9f:42:a7:38:12:a5:f4:c5:20:19:42:ba:52:
9e:68:e4:dd:16:ff:44:d5:5c:c1:ba:81:32:be:24:
d1:e4:f3:03:50:7a:75:f0:a2:4c:2f:43:6b:8d:68:
93:91:65:a0:70:87:c2:b6:2a:d2:3c:cc:91:75:09:
30:c8:f9:c9:7c:6a:22:d9:67:f6:a6:33:1d:83:5c:
16:0e:4a:b1:d5:c0:51:16:18:30:a5:b7:8e:c2:81:
74:d4:a7:b9:de:4b:4d:1a:e4:4d:2d:7f:5a:fa:a2:
46:72:1e:b6:5f:ad:21:85:2f:cf:a6:4a:6a:01:2f:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.108.0/22
IPv6:
2a10:4000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28701
213056
Signature Algorithm: sha256WithRSAEncryption
74:05:03:ca:83:48:40:9c:98:0f:0c:b5:44:62:ee:38:e6:dd:
1f:97:c5:ec:94:89:03:83:76:94:8c:a2:90:89:e1:12:e3:4f:
88:52:81:03:20:89:c0:53:39:58:f7:2d:db:93:80:ab:9c:fb:
18:5a:5d:26:9f:60:31:9b:bf:e2:3f:4d:b7:5d:95:61:26:ee:
12:90:38:ec:97:c4:9c:5b:3b:13:0f:ef:b0:3d:2b:4a:71:e0:
ca:6a:51:a8:c5:1a:52:ba:73:9d:81:05:6f:52:cd:bb:15:45:
96:56:7a:91:b1:3d:35:6b:a3:80:9a:2b:96:77:90:19:a2:77:
6c:de:6a:7b:b3:6a:e3:00:b7:80:0e:14:65:73:85:2f:06:d0:
6d:04:b7:30:95:7e:9f:f8:7c:85:a0:2c:20:b0:7f:b0:36:0c:
7a:af:e4:03:38:69:69:9e:79:06:3a:15:cb:9b:9b:94:7e:c3:
ca:5b:ef:00:5a:aa:75:fa:b4:30:75:9a:f5:6d:41:13:f6:b2:
8f:cd:d1:02:51:c3:8a:9f:b2:b6:7a:f3:09:2d:44:3d:69:aa:
c8:5b:84:57:7d:40:b3:c9:30:59:1f:b0:0e:d3:45:41:c0:5f:
02:81:d1:6e:33:ea:db:f7:f2:c2:dd:90:f6:0a:1b:a1:e1:4d:
f5:79:cb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:42 2025 by rpki-client