Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer (raw, json)
Hash identifier: zb7Iq7tiDe4/VedA0coN0RsckS22C2v6lIMHvd1/iuk=
Subject key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197F8B799865C419CF37EA404E1A63AED62
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 11 Jul 2025 09:01:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.241.44.0/24
IP: 2001:67c:24c4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f8:b7:99:86:5c:41:9c:f3:7e:a4:04:e1:a6:3a:ed:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 11 09:01:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=255633182ddd558b41ba16c519ee461450ddddd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:38:d0:76:e2:bf:f2:c5:c7:17:1e:95:b0:
b6:71:c3:d4:0b:6b:e2:1e:69:5a:7c:0f:5b:80:f0:
78:35:91:ac:55:06:d8:05:80:a3:c6:6a:5a:b7:13:
c4:5b:d7:81:06:5c:d1:e6:db:05:e2:54:82:5c:38:
f6:26:75:2f:4f:75:9c:c1:d5:94:d9:de:55:e8:b5:
f8:3f:87:95:8f:d6:61:c2:36:01:df:4a:d3:1f:07:
55:cc:e0:35:38:cc:2f:c6:34:f8:2f:90:82:fe:11:
22:b3:d9:e5:3b:58:72:a3:c9:e8:58:6f:8f:95:a6:
37:75:01:58:e7:e2:29:b6:b7:1e:2d:1a:42:46:59:
ac:b5:7a:73:8d:ac:bf:ea:48:6a:ca:b9:e0:bd:0f:
ba:59:18:2e:0b:7d:c9:9a:00:99:96:96:bd:0f:3f:
6b:a0:1a:40:0e:2d:25:a5:8d:ab:11:29:1f:fe:b8:
34:67:69:2e:e6:42:56:ea:14:aa:03:10:9f:df:40:
fd:68:fd:49:28:32:8d:cc:5a:84:87:7d:03:e0:e2:
cd:a3:8d:cf:9a:37:ad:26:32:82:d3:cf:fb:e6:a6:
4a:4e:e1:65:49:33:f8:e8:61:06:c2:0d:7c:5c:cc:
be:54:80:b1:7e:d7:2c:a1:da:6a:98:c3:82:d0:6d:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.44.0/24
IPv6:
2001:67c:24c4::/48
Signature Algorithm: sha256WithRSAEncryption
44:ff:2d:1e:8b:77:b5:c7:fe:ad:a1:41:57:88:4f:35:fe:fe:
61:80:83:e0:42:27:f4:8e:d7:7a:76:7f:23:43:6e:bb:41:3e:
9b:63:56:55:3f:52:f9:33:19:4f:c5:64:7b:60:7b:c7:6d:ff:
89:65:00:aa:e2:1f:09:4f:09:ad:21:b4:12:06:3d:f5:34:d8:
aa:33:ad:8d:ae:f8:7d:b3:0f:a3:2a:30:23:d2:ee:c0:fe:87:
a2:14:5a:60:89:22:b5:ae:ee:90:39:45:ed:98:0d:5a:e0:38:
bf:9c:de:fe:8d:1c:b7:f3:1b:88:21:dc:59:74:d4:6d:28:b8:
55:d4:75:6a:38:68:16:7d:ff:f5:31:4b:ee:5a:ed:48:63:79:
90:9f:7c:5d:2b:32:bd:aa:0e:b8:ec:7a:7c:de:5c:7d:31:ef:
8a:66:de:f1:8e:04:53:6c:53:56:12:87:c4:26:5b:db:a6:8d:
64:fc:b8:8c:17:9d:8e:25:8d:15:4c:6d:72:de:00:09:19:b7:
5a:cb:87:e7:b4:72:92:da:f7:90:c0:72:b0:b3:12:b2:89:fd:
7d:55:92:7b:10:d4:c2:54:9d:80:d0:36:35:6a:fb:51:0a:4e:
7b:11:a9:3a:30:c1:b8:76:43:32:36:ac:09:4d:16:a1:08:c1:
3a:8f:ae:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:02 2025 by rpki-client