Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
File: ymFHjk1lm-zoIDxei6jo-C8EcNc.cer (raw, json)
Hash identifier: +GUj5GOLndlpzKU7JtXU0Ih0CXYUHY8tZNstNXVGLkw=
Subject key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01981458558C7D45AEF47225220BDA01E9D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 16 Jul 2025 17:46:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.117.107.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:14:58:55:8c:7d:45:ae:f4:72:25:22:0b:da:01:e9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 17:46:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:de:a3:67:fc:77:36:7c:66:a4:ad:7a:99:
2a:37:48:51:74:d5:f3:6c:fd:fb:74:d7:68:15:9d:
71:e9:a4:06:fd:ac:01:9d:4a:17:d7:e1:c2:95:e5:
85:d8:24:2e:f1:0e:1a:71:6c:08:12:16:d3:d9:10:
ca:f7:47:e9:08:9a:28:10:90:30:bc:db:51:bb:06:
37:cb:b0:87:00:11:c9:c3:fb:f0:1b:04:62:9e:0e:
2c:b5:56:00:cb:02:23:3b:fe:00:8d:b2:36:f6:9f:
ee:d8:67:a6:fa:cf:b4:21:91:9d:d1:36:bb:80:84:
cb:77:92:f5:02:b2:ea:1e:01:f5:ad:99:b7:e5:0f:
88:70:58:f9:be:5b:d2:78:a3:fd:a9:d1:ba:b6:e9:
90:e6:76:25:08:b0:18:d4:10:c5:80:5c:64:0e:ee:
81:48:88:79:d9:bf:18:fb:77:f4:5a:83:6f:8d:b9:
5d:16:c5:16:3f:60:49:53:2e:c3:ff:80:08:3c:e2:
07:be:fc:18:03:a0:74:4d:48:32:92:31:af:8b:1d:
cd:e4:8a:ee:9a:ee:fe:b9:58:bb:0f:b0:30:c7:c7:
7b:47:b5:bf:23:5a:5c:99:9f:a2:cd:8b:e6:ba:b3:
fe:e6:d0:ba:e3:e1:4e:ed:98:a8:f2:00:bf:80:7b:
a9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:17:00:83:32:6d:c3:29:17:64:aa:51:e4:d2:50:1c:66:be:
66:dc:b8:5c:c8:57:c5:f0:57:a9:24:38:d3:6a:9f:32:3e:d3:
45:3a:58:1f:65:32:b9:c2:9b:b6:16:21:4a:fc:f1:11:dd:b8:
f8:78:d0:4c:2b:dc:76:88:3b:94:03:1b:75:1e:ef:e5:f3:87:
1a:9c:4b:e1:e1:d5:b8:84:32:c0:36:81:e2:be:06:11:6d:76:
c5:d9:f8:15:8d:d7:f2:9e:97:0d:84:90:fb:81:1e:73:59:6d:
a2:a9:f8:e1:37:42:a6:fb:0f:37:d9:25:41:4f:2f:a9:30:cd:
b9:92:97:7b:03:bf:59:98:32:b3:16:c3:0e:3e:8e:2b:63:20:
1b:b5:3c:35:6d:d5:bf:ea:95:e0:2a:e1:a6:b3:ca:f2:98:c7:
e6:4d:dd:d2:ac:f6:86:51:c4:98:90:ef:41:27:45:fe:1d:da:
2e:53:6b:1b:62:1d:01:52:5f:d8:e1:96:21:77:f6:aa:71:2c:
f6:f5:8d:75:21:46:f5:f3:2c:ca:99:a1:99:af:2d:12:e2:90:
35:ad:ab:c5:d1:35:01:89:70:56:bf:a6:14:51:08:58:77:49:
6d:76:13:4a:42:fa:6d:96:21:d2:5c:d4:55:5b:e6:53:af:93:
ef:b4:ab:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:31 2025 by rpki-client