Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
File: sLVtEMytnWnAGFa-CvqhfsaCrL8.cer (raw, json)
Hash identifier: 31/T9Px824JAIURuZ82O9dKoBg7lODxCj8ILLtrq6pQ=
Subject key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019808E34EEB5CD4FFC12B1BE6F90E4231E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 14 Jul 2025 12:22:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214195
IP: 176.97.219.0/24
IP: 193.34.198.64/26
IP: 2001:7f8:15d::/48
IP: 2a01:f900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:e3:4e:eb:5c:d4:ff:c1:2b:1b:e6:f9:0e:42:31:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 14 12:22:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:74:80:0f:b8:04:bf:8f:4a:77:be:c0:5d:
86:41:f1:75:b9:df:08:22:7c:01:c4:1e:7d:52:b9:
63:30:1c:ff:3e:26:ea:aa:f0:22:2c:36:53:0a:c5:
18:88:c4:44:5b:0d:06:f0:03:73:09:ba:3d:d5:b0:
fc:af:78:2f:38:ad:e8:ec:8b:ed:5d:3e:97:02:38:
5c:f2:e2:fa:10:78:bd:96:94:ae:4c:d1:d9:7b:d3:
4f:bd:bb:70:0b:3d:6e:ba:41:93:4e:5e:44:06:05:
e5:c6:52:52:77:45:4e:16:83:d9:54:01:47:39:00:
d6:57:47:3f:72:45:8f:a4:1b:cd:6c:86:be:75:47:
86:b4:a5:91:e6:e0:71:67:16:cc:1c:67:a1:7e:36:
4b:74:40:37:e0:35:44:da:13:93:de:06:7d:db:af:
25:a3:34:d1:71:33:74:47:1c:75:69:2d:f7:98:28:
53:54:e3:9e:83:5d:12:f3:77:18:9f:22:10:38:43:
65:3e:95:dc:f4:aa:c7:23:c5:b9:4a:f5:30:8d:14:
d7:5e:a7:8f:a2:af:be:61:54:65:1f:99:75:77:40:
ba:66:3d:ac:5b:e2:0c:b5:50:20:85:f4:87:40:f2:
ab:b7:09:de:c2:b5:a6:77:90:54:b0:f0:d3:b5:4d:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.219.0/24
193.34.198.64/26
IPv6:
2001:7f8:15d::/48
2a01:f900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214195
Signature Algorithm: sha256WithRSAEncryption
2f:05:3b:bb:ed:99:b5:c2:48:cf:39:63:01:93:81:d3:95:84:
91:d0:f5:21:23:c4:b9:c7:9c:84:9b:bf:84:88:01:81:3c:0b:
78:3d:88:a7:67:b9:45:e1:e2:31:47:28:bb:fa:a4:f1:a1:28:
cd:a5:5a:1c:94:b9:ce:6e:71:8e:03:75:4d:47:ac:fd:d9:8b:
76:bd:ad:0a:0c:7c:42:49:8f:b7:bc:9e:1d:0a:28:37:48:d1:
5b:35:e5:a4:59:b3:22:0e:95:af:ba:66:a7:43:da:3f:04:4c:
6e:b3:24:53:22:f4:b4:c1:4c:94:f1:db:2a:7e:db:11:2a:b5:
d7:2a:1a:e6:e2:9e:9a:9c:2b:86:36:37:93:39:30:3a:ff:90:
59:92:9a:63:d7:f3:02:24:73:3a:c8:b7:72:49:3b:19:e2:f8:
b8:9a:17:0b:aa:35:29:8a:b0:10:62:b0:2c:7f:77:bf:a1:33:
ea:b8:29:4e:ea:7b:f6:73:7b:96:37:67:ce:b4:57:4b:ae:2f:
50:77:53:bb:34:d8:ab:75:8f:13:de:44:a2:77:34:eb:da:b4:
64:fb:40:01:9e:c2:c7:b6:1d:30:1c:5e:4d:d9:95:fe:d8:4f:
67:94:70:c5:44:a4:96:ae:38:c7:85:8e:68:07:31:03:35:fe:
d4:5f:a8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:44:11 2025 by rpki-client