Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
File: UrSmj2r_fgaAtvFUQwzudKUDtmg.cer (raw, json)
Hash identifier: IrQaXune+ZLiqT/E3afiuJIelzd0zLxtWpY//vTP0BI=
Subject key identifier: 52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197F9367B7002A255D97B26380F93371F4E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 11 Jul 2025 11:19:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.212.174.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:36:7b:70:02:a2:55:d9:7b:26:38:0f:93:37:1f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 11 11:19:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:45:6c:d2:03:e5:97:c7:bf:ee:8c:1a:14:
89:aa:b4:d1:e4:b0:aa:e6:9a:23:b1:8a:cd:47:e5:
4b:04:81:d4:82:a0:8e:81:20:25:9c:b8:03:48:a3:
d2:c5:cc:6a:36:6e:30:69:36:e1:05:0d:c5:47:b1:
d2:11:e4:8b:70:f6:86:57:bb:25:1e:e1:3b:f8:c0:
f9:c4:70:9b:67:e8:86:0d:c1:1b:85:05:bc:62:71:
37:50:8f:89:f4:bd:bc:68:dd:42:27:74:48:1e:7b:
57:3a:9c:e8:2d:da:30:d0:74:18:68:1f:6d:d9:de:
e7:a8:ef:1a:0a:cd:ff:12:13:fe:7f:9a:26:d9:d9:
9a:59:78:f7:4b:76:5a:3a:74:26:18:3c:e8:53:87:
e8:8e:be:b9:66:fb:f1:86:e4:d7:68:85:2b:44:06:
19:1a:6e:68:64:ca:64:fe:ff:b5:8a:36:ca:c0:e1:
1b:16:4b:0e:b5:9d:13:ba:09:d4:e8:ec:86:87:a2:
85:2f:69:a4:c6:37:92:3f:7b:a4:3f:84:f4:ac:9f:
ab:c0:4b:fa:fb:9a:8b:7b:22:55:34:b1:76:c1:b7:
eb:b2:06:1b:55:b8:31:97:17:7f:bd:45:d2:48:33:
5f:6b:17:e7:2b:d5:ba:8d:b9:3d:67:f2:9a:b8:f7:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.174.0/24
Signature Algorithm: sha256WithRSAEncryption
83:97:1b:66:6b:37:90:6c:44:a4:34:51:c6:f9:ca:c2:e4:5b:
90:4d:89:e5:8e:70:80:c7:39:7a:76:e1:76:d4:71:f9:46:e9:
da:cd:cc:b1:d7:4f:4a:cb:23:45:9c:13:09:b0:ac:73:1f:a7:
08:8a:3b:8d:a7:55:a4:ec:cd:71:0a:6c:26:4d:9d:61:54:31:
45:ef:d0:f5:64:15:a0:e7:82:0c:9a:e3:3e:69:86:9a:a6:28:
de:2b:27:6a:68:2e:ea:09:ac:00:dc:55:7b:03:31:0a:71:25:
ec:bc:ab:16:24:cd:e1:e3:15:80:26:b8:39:99:42:02:11:89:
11:fd:03:cf:22:2f:8f:07:64:07:8d:75:46:24:f8:3a:cc:22:
7d:81:3a:1f:c3:84:2f:a7:b6:81:a9:9b:a8:c8:cd:ab:09:4e:
17:48:ea:9b:66:91:55:1b:93:b2:8b:05:50:27:d2:46:ca:2d:
52:94:bd:27:1d:56:70:1c:ae:8e:66:f6:bf:23:fb:43:1c:87:
a3:48:3e:3e:fc:48:75:13:2b:b4:7b:c3:51:cc:3a:7e:8b:ab:
62:7b:cf:20:37:16:fd:6e:71:b2:7c:70:fb:1a:38:7c:9a:09:
d5:e4:77:c2:61:ad:aa:33:ef:39:8a:ab:5e:f0:22:9c:9d:44:
30:0d:21:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:51 2025 by rpki-client