Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
File: Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer (raw, json)
Hash identifier: TVco62g7YfV3N5Fclreid10b3fLrADjAgSWnBHSPzGA=
Subject key identifier: 36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197F463850C0D56052BCA433CEE01650BA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 10 Jul 2025 12:50:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198706
IP: 91.213.229.0/24
IP: 185.56.240.0/22
IP: 185.167.248.0/22
IP: 2a02:56a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:63:85:0c:0d:56:05:2b:ca:43:3c:ee:01:65:0b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 10 12:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36fedfeccfd00f577cb791f8e43aa659262e93db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:56:32:22:b5:11:2c:88:fc:65:07:c9:47:
08:be:93:22:8a:32:b0:0b:7e:62:e2:1e:54:f7:c5:
b5:0b:ee:1e:0b:f2:e0:83:12:2e:b4:1b:4d:74:3b:
37:85:8b:04:f7:9c:11:f8:1f:4e:03:93:4d:d2:1e:
81:91:66:92:2e:49:25:62:04:f2:fc:83:e2:8f:e3:
36:54:ae:a6:53:28:09:0f:f4:d4:67:6d:5a:66:45:
71:0b:d9:a4:3e:ad:cf:d1:73:2d:64:72:f5:ed:67:
17:6c:f0:29:2b:f4:19:dc:66:5a:23:f6:9a:22:ae:
1d:9a:95:7b:e3:e1:42:3f:43:3f:ae:b5:fc:1d:64:
87:b3:12:a5:48:9d:95:b4:fb:b5:c3:7f:46:81:8b:
3c:8f:f0:4f:5e:a1:d5:d2:66:68:94:32:1e:76:60:
46:a7:cc:5d:33:aa:b6:ba:63:2d:57:fd:2e:f9:35:
0d:a0:72:69:ab:37:b4:7b:74:44:86:6d:c2:34:c3:
66:6e:3a:ae:b5:9a:2a:6a:e5:76:4b:5a:71:45:91:
99:bd:d8:5f:a0:e9:c9:6d:e4:48:32:a3:9f:e0:d3:
fa:c6:a3:27:e5:78:c5:8d:6e:69:11:87:59:75:dd:
20:c9:56:ee:fc:11:20:f8:15:34:9c:94:aa:bc:da:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.229.0/24
185.56.240.0/22
185.167.248.0/22
IPv6:
2a02:56a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198706
Signature Algorithm: sha256WithRSAEncryption
3f:e5:b6:92:08:ed:04:ed:e5:0a:b1:93:60:53:11:47:53:14:
8d:d4:08:33:2d:97:dd:cb:69:e0:7f:0e:a1:69:1e:c5:1c:2a:
f7:e5:f0:1b:6a:5e:7b:ac:95:3a:26:4f:06:4a:02:a6:9f:26:
87:f5:bc:d0:0f:b6:00:75:e7:f5:ab:6f:65:0d:0f:b8:fa:7c:
c9:5f:93:be:8e:0e:e5:53:7b:dc:05:d4:5e:be:e9:42:95:ac:
b4:ba:12:62:13:96:93:a2:dc:80:17:8e:c6:d5:45:b3:12:02:
78:41:a8:ee:03:c3:35:4d:6b:54:a0:41:13:1e:7a:64:45:99:
b5:d9:2f:00:7a:84:77:5b:29:a1:38:f3:e4:1c:f6:ce:28:34:
9a:c6:a4:bf:3d:48:7a:2f:0d:e8:91:cc:c8:25:1a:32:05:9f:
c1:60:f6:cf:f9:4a:a0:80:2e:89:c5:66:17:6c:13:72:01:fc:
46:09:5d:e9:e4:5a:ff:73:32:c5:36:22:8e:47:d7:d6:e0:41:
e4:30:a2:b7:cf:34:d0:d5:81:28:e4:cb:d5:97:d6:df:12:24:
4d:55:76:f7:5f:45:75:ce:00:71:bf:8b:88:2f:34:98:2a:e4:
b2:7f:7c:a6:63:40:94:b2:d6:a8:a2:17:cb:43:4f:85:3c:7c:
ee:f2:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:05 2025 by rpki-client