Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
File: jmOEMlhq5gL_Datn0JsZUVJOggU.cer (raw, json)
Hash identifier: H5a2OVy7Sxrto7HpBcAPEDEa0kOsDRevUvlFejjmKuw=
Subject key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198093958083E739C583133F31C401D58E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 14 Jul 2025 13:56:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.234.145.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:39:58:08:3e:73:9c:58:31:33:f3:1c:40:1d:58:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 14 13:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e638432586ae602ff0dab67d09b1951524e8205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:7d:a7:12:f8:b7:dc:30:68:25:d8:f0:bd:
8a:66:2d:91:ff:da:31:08:e7:8e:1e:3e:e2:d8:23:
8f:f3:73:83:5b:99:d7:df:39:1e:09:bb:62:a3:f1:
6b:65:8c:fe:65:2a:f0:d6:67:d9:91:a5:cb:19:7e:
57:80:48:84:b5:f4:ba:a5:2f:ed:6f:86:b1:1b:61:
2e:d1:5e:58:16:38:93:cb:b0:ae:be:c1:b9:10:fa:
45:c1:bf:c0:bc:97:7c:97:c4:30:dc:83:cd:4c:46:
1f:b4:9b:78:f3:c1:2b:76:50:12:7d:65:1f:0f:f4:
b8:37:78:2c:e5:19:aa:c3:db:53:48:9b:af:8b:e0:
49:76:96:c4:06:94:c9:da:91:13:6c:0e:e7:c7:27:
63:db:ce:6d:33:6d:12:6a:da:11:5b:ac:3a:50:95:
dd:60:db:29:91:0f:b9:39:cf:61:d3:73:86:42:96:
61:42:ed:69:a5:05:c4:ed:81:54:e7:ce:50:58:79:
c0:53:6e:73:86:3e:ec:e3:e5:3d:7a:63:b3:b7:7e:
d6:f2:15:3f:3f:9f:39:a5:5e:d9:89:78:f7:ce:fd:
5d:8f:67:32:a4:10:bc:82:fe:a7:cf:66:95:ba:7f:
c6:63:d1:b0:a9:34:42:6c:30:6f:ff:d6:ab:3d:fc:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.145.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:78:1a:d0:72:a2:60:8a:d6:32:0e:34:be:03:29:b4:21:55:
9a:d5:35:68:8a:59:fa:9f:b8:c2:fc:35:16:ac:84:3f:18:12:
3b:5f:ee:de:06:df:5e:14:09:98:44:2d:0f:f4:bb:c9:3e:e0:
f5:20:b4:36:7f:02:d2:62:be:56:12:05:ee:f8:77:12:e9:ba:
95:2d:08:d9:7f:bc:4e:94:73:a1:fc:a3:cb:6d:75:2c:5d:a0:
24:2c:0a:1a:31:cc:35:f8:26:44:c3:df:ce:ae:68:31:9b:63:
c5:50:a4:8e:c5:99:5c:ae:4e:89:5b:89:b5:1b:e2:d5:ff:63:
05:a2:f0:4c:a7:0f:c4:60:8e:f8:a3:44:e3:4c:a5:0f:9e:3a:
6b:93:fd:4e:ab:b3:da:b3:4c:9a:87:77:c6:b5:da:01:5d:c4:
1a:e9:98:29:b0:a4:aa:72:1f:f9:fe:8e:2b:0a:ed:8e:e6:36:
ae:c0:68:78:0a:70:84:a9:1a:76:87:3f:cd:8b:d0:9d:22:f6:
3f:b3:d7:7e:5a:03:8f:58:0b:67:4e:ad:0c:0c:0a:82:12:b9:
f5:53:70:0f:ed:41:95:bb:2d:c5:93:88:3b:c7:9e:c9:3a:e3:
60:69:a2:99:7e:ea:34:3c:88:b3:30:e5:cc:d0:bc:4f:18:54:
f3:c2:9b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:30 2025 by rpki-client