Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
File: YihBc2HBxAaumnJX2qn7BiB4LTU.cer (raw, json)
Hash identifier: S60/vW+Lq9FkzPrf4cXXuGArrh37Obukno2V5rOA9F4=
Subject key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197E500DAD298FB624B1E0CCF567F54792C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 07 Jul 2025 13:08:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207732
IP: 195.88.221.0/24
IP: 2a12:3480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:00:da:d2:98:fb:62:4b:1e:0c:cf:56:7f:54:79:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 7 13:08:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6228417361c1c406ae9a7257daa9fb0620782d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:51:b1:24:42:d2:eb:26:d6:b1:eb:37:df:
6b:29:32:75:65:4e:51:9b:f7:da:f3:b8:73:f5:bb:
fd:54:3d:85:73:d0:f4:75:8b:03:cd:2b:8d:90:d6:
21:e2:a9:d9:3c:50:85:4c:9b:5e:dd:70:ff:8b:c2:
68:fb:c5:5f:f9:96:bb:0d:47:ec:51:55:2e:08:66:
c7:75:09:6e:7c:17:9b:b6:e7:93:35:56:42:a2:0d:
b6:ec:7d:18:5b:3d:aa:61:cd:64:4b:87:f6:52:8c:
67:08:7f:28:dc:9b:d3:64:6b:13:fc:76:36:ee:05:
ad:97:f1:98:c7:33:82:37:a7:df:6a:d8:30:0a:83:
5c:ed:10:ee:23:a2:a6:8a:4f:41:5b:e9:ef:2f:af:
1e:eb:1f:98:5b:6a:07:7d:a9:ef:d4:20:87:3c:5b:
22:ac:87:18:74:2f:6b:55:67:69:11:f0:97:dc:34:
6d:9d:e0:ca:ff:00:44:0b:79:78:a1:b9:f3:19:78:
fb:53:50:14:73:3d:22:79:3a:7f:3d:04:ac:81:19:
5d:4f:98:8f:94:d2:65:86:27:d5:ba:41:23:2a:47:
e4:ab:e1:f7:11:dc:4f:8d:32:0a:2e:85:7e:c7:a8:
a2:b8:51:ff:5e:bc:47:f9:54:ea:d2:e4:ec:ce:e3:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.221.0/24
IPv6:
2a12:3480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207732
Signature Algorithm: sha256WithRSAEncryption
86:60:4f:eb:f2:a8:12:1c:bf:ed:62:7c:b9:15:0f:71:c1:f7:
87:e9:18:7f:82:1b:13:3b:32:f3:3f:d5:b9:4d:eb:58:4c:0a:
d1:89:50:f3:6f:92:6b:84:68:4e:b3:20:8f:6f:50:ec:f1:7f:
d4:43:89:1b:2e:e7:e8:1f:b1:1f:29:ba:cd:3f:f5:c9:7d:7c:
62:22:c8:1e:e0:bb:aa:5b:d6:27:89:9c:f0:55:ae:c8:af:19:
0b:7e:89:c4:9f:58:1f:94:86:c7:9e:43:aa:9e:8f:1c:20:e9:
e0:8c:08:18:ef:d3:0a:fc:31:9a:a2:0c:8d:5e:ca:8f:65:5e:
01:92:67:1c:02:68:83:35:a7:d7:10:4a:88:df:54:04:df:31:
e7:5b:4d:07:c1:7f:fd:4e:13:e1:85:e6:bc:5a:c5:da:b7:95:
01:20:6e:d8:c5:02:cc:0d:11:e0:df:a0:e2:12:92:83:c3:ac:
74:3a:ab:bd:4b:81:53:58:c0:d3:d8:32:d6:9c:58:de:c8:21:
26:f1:d5:6d:ff:54:bc:1b:a6:d4:d8:75:36:31:94:c8:51:b9:
68:35:d4:ea:23:b5:de:44:7e:12:9f:81:38:28:6f:f6:09:27:
e7:0d:d6:cc:c4:e0:b3:1b:86:c6:bb:7a:aa:d5:52:b0:af:e2:
7a:27:13:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:34:55 2025 by rpki-client