Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
File: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer (raw, json)
Hash identifier: qxx62FbieeeScoOs4bNp9wppaxUZWEKs77SxrTyi1qs=
Subject key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196ED5CF404766E96991C782A61734FD6FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 11:03:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197682
IP: 192.162.44.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:5c:f4:04:76:6e:96:99:1c:78:2a:61:73:4f:d6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 11:03:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed32ef0caf0a057529fb928f76962a7425390dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:72:cc:e5:ec:ad:04:c5:75:27:dc:b9:9a:6f:
9b:2b:cb:41:04:16:d0:6d:31:6e:2b:50:df:4c:56:
a2:31:33:d2:6f:c1:35:bc:4f:73:b4:7c:d7:fa:63:
b7:ed:80:48:12:2d:90:b8:1e:37:b4:9e:03:01:fa:
62:bf:b4:49:af:78:79:28:b1:8f:b6:bb:70:be:d7:
0a:9e:e3:c3:fe:6c:c2:26:08:d8:e1:10:81:8b:01:
4c:88:8f:0e:c7:20:7e:d8:cd:66:02:02:32:b0:af:
ef:93:8c:b1:b8:5e:00:da:78:7a:0e:10:cd:84:02:
10:dd:68:c1:e2:10:64:42:d9:eb:8e:a8:68:17:29:
36:f1:97:f4:26:9e:eb:21:cd:88:61:09:4b:ee:6d:
fb:1b:86:0c:9c:3c:d8:8f:8c:0b:bc:a5:83:09:ee:
c0:7b:43:b2:5b:59:40:92:04:ee:5e:11:43:a3:77:
f1:8e:9a:9a:01:59:d7:cd:ea:a4:fd:e7:81:52:10:
88:41:d0:c8:fc:2b:ea:71:5f:0d:40:b2:1b:10:68:
e9:d0:6a:e5:d4:2c:5f:c1:f3:02:35:97:dc:55:57:
8c:5c:00:55:fe:48:5f:e8:51:4d:85:0e:33:ff:1b:
46:b2:30:02:98:90:ce:40:ce:fd:23:64:d0:be:ab:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.44.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197682
Signature Algorithm: sha256WithRSAEncryption
41:05:a3:6f:13:7f:f8:eb:f3:bf:36:1e:dc:1e:8a:ce:c7:0b:
17:79:e1:b6:1e:30:cb:3a:29:80:74:84:ef:00:24:42:c8:ba:
3a:29:6a:77:ba:ab:6a:d2:96:df:ae:bc:ed:2d:43:4e:d6:40:
33:50:9a:a2:04:bb:f6:20:28:37:f6:3f:b8:e0:cb:00:38:c8:
11:27:7c:f3:01:d5:b3:8b:25:1c:88:c4:95:8d:4a:74:87:df:
2d:a2:c5:7a:63:c2:6a:47:e2:f7:6e:8b:ba:f5:5c:dc:ca:cc:
95:49:d1:46:65:60:82:2b:18:c1:02:39:8b:59:8a:cf:8c:b5:
c3:2a:9e:a7:7f:ba:c7:dd:59:f7:b5:34:67:12:94:8e:db:3e:
11:7a:47:5b:7e:cb:8a:d1:e5:b7:b2:02:4b:39:9d:4c:c4:8d:
1d:97:b2:a5:28:cd:a1:18:f7:83:04:7d:4b:cd:5e:64:c4:fe:
51:58:4f:f5:71:a6:ba:7a:36:3c:00:d8:d5:75:67:49:ec:c9:
35:51:16:d0:6b:e0:fe:1d:45:9e:14:99:00:9e:08:f7:a8:af:
f2:e7:de:1e:81:40:fa:57:c2:4f:15:a6:8b:9d:5f:7a:85:e4:
57:92:1b:c2:7b:14:2e:2b:70:c8:d6:03:ba:87:5c:99:cc:92:
78:ac:1c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:31:57 2025 by rpki-client