Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V4jMDw7cVfJvTBtahve-RVHU4xU.cer
File: V4jMDw7cVfJvTBtahve-RVHU4xU.cer (raw, json)
Hash identifier: Xd/UJuxf24D3XCW8B9FpxljeHrYVBgwwQdErhPDxdAQ=
Subject key identifier: 57:88:CC:0F:0E:DC:55:F2:6F:4C:1B:5A:86:F7:BE:45:51:D4:E3:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197C4C10F161F19FF9C2DC0E17DFFC73091
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 01 Jul 2025 06:51:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44906
IP: 194.42.44.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:c1:0f:16:1f:19:ff:9c:2d:c0:e1:7d:ff:c7:30:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 1 06:51:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5788cc0f0edc55f26f4c1b5a86f7be4551d4e315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:69:7f:67:e0:5e:b6:e1:09:59:5e:8c:b3:
7c:a1:7e:40:71:33:e0:a3:f5:16:2e:eb:b0:78:75:
d7:a2:f8:66:a2:ee:9d:8a:a7:9d:ff:15:63:7e:3a:
60:e2:b2:40:98:ec:f5:f9:96:33:49:44:e4:59:2c:
2c:3b:44:22:d2:a0:a5:bb:b3:f5:c6:9c:05:b5:9f:
8b:ff:84:96:30:9b:63:00:97:82:77:5a:78:4e:a4:
c5:68:8e:12:86:20:c6:29:87:58:27:a1:84:eb:1e:
82:7b:f1:60:11:67:62:2e:bb:a1:46:73:f1:76:27:
9e:76:5c:fe:d0:30:db:31:51:1a:b8:78:82:3a:6c:
a2:f4:5c:cd:e9:75:77:96:12:5b:86:ab:27:3c:db:
f8:66:a9:f6:79:cd:8d:d4:7c:7c:26:97:a1:45:97:
c9:30:e7:c6:6d:b0:5b:10:43:16:73:4c:06:db:64:
b4:fd:5a:06:3a:03:3e:5f:6b:d8:99:9f:55:8d:df:
67:f0:fa:d8:8a:bf:67:15:5d:43:ba:e7:fa:5e:ec:
83:c1:e5:76:64:a2:49:e7:f7:8c:89:28:00:0a:1c:
30:73:69:5d:62:c6:4b:35:a8:e9:74:7f:d0:53:3b:
90:bb:50:47:ec:3a:37:e5:18:cb:1e:33:d8:23:14:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:88:CC:0F:0E:DC:55:F2:6F:4C:1B:5A:86:F7:BE:45:51:D4:E3:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.44.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44906
Signature Algorithm: sha256WithRSAEncryption
34:28:38:05:ef:96:73:5f:03:53:67:69:16:e3:5e:99:80:18:
04:9a:87:80:b7:4e:54:ef:b7:55:ab:7a:52:d6:16:3f:cc:6e:
9f:32:f0:0a:40:84:c7:48:3b:33:02:0b:45:80:ed:b1:0d:a7:
d6:53:c5:ae:bc:bb:82:56:05:f3:cb:dc:38:0f:9a:91:2c:21:
19:21:15:b8:9a:3a:ce:ba:38:45:81:1b:8f:06:3d:7a:e2:2b:
95:9e:15:63:14:8a:7d:2c:88:78:a1:25:f4:38:e0:91:71:5c:
2c:bf:30:97:fc:1f:01:29:8a:aa:aa:03:36:20:11:08:02:ae:
d2:80:72:d4:3b:1e:83:92:03:86:9b:9a:18:e8:b3:0b:37:30:
42:7f:f4:a4:f6:5b:95:e6:ea:62:8c:b0:0d:16:18:cc:8c:a5:
0a:04:7e:8c:dd:b3:16:00:d0:c3:d0:65:0c:3a:ff:c6:e7:c4:
51:0e:99:39:24:4b:b6:6e:34:c7:14:72:7d:3d:c6:13:0c:9e:
5d:ca:6d:3f:63:6c:ca:14:61:66:46:40:d9:77:7e:d7:26:93:
56:16:c2:ef:a5:95:01:b2:7e:f4:03:16:0b:cc:7a:ab:3b:75:
66:41:8a:d9:9a:fe:78:2a:2c:66:b9:8a:dd:51:c7:45:b8:a3:
6e:b2:86:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:44 2025 by rpki-client