Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
File: 7kmddBz3poj_wsl2gT23xR68R0k.cer (raw, json)
Hash identifier: 49teb1jR51FaNK07FsuTGiOUfORnWr0Detmsq/cM34c=
Subject key identifier: EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196CB402E83F92280521DF2313BB2AD93F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 May 2025 20:05:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.87.104.0/22
IP: 193.9.60.0/22
IP: 194.1.236.0/22
IP: 2001:67c:1688::/48
IP: 2a05:5940::/29
IP: 2a0e:fa80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:40:2e:83:f9:22:80:52:1d:f2:31:3b:b2:ad:93:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 13 20:05:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee499d741cf7a688ffc2c976813db7c51ebc4749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:87:9f:ef:3f:c9:8c:e5:ab:9f:ce:a3:55:
b6:15:1b:84:2d:1b:55:fd:00:57:6d:40:57:8d:7f:
93:fb:8a:93:11:91:e1:b8:1b:da:82:17:9d:cc:36:
3a:e6:b0:04:a0:f6:8b:69:5d:08:78:a4:d6:91:a4:
d5:7d:b5:c2:67:59:1e:9b:e6:ee:b5:6f:96:3e:32:
ea:b7:ce:b7:30:06:f7:84:6e:c8:46:00:ca:fa:f1:
5d:eb:d4:f6:93:6c:3a:a7:2b:ac:cd:08:a0:33:5c:
bb:f6:da:fe:de:3b:8b:27:72:bf:55:59:80:3f:86:
98:89:6d:a0:62:6a:a8:52:f0:90:4b:72:75:35:db:
6f:6d:51:4b:98:9a:d0:91:bf:c3:76:5e:b3:a4:e9:
0b:10:5e:62:13:59:b8:35:62:82:7c:b4:b4:57:38:
be:d7:c0:5f:b0:c5:30:eb:8f:42:a0:52:17:a9:6a:
89:b8:b1:c4:6c:0b:78:c9:02:f3:59:a6:57:94:8d:
ef:e6:99:84:72:11:f3:4b:33:d8:ec:60:fe:7a:b1:
96:36:be:e5:b1:00:a9:a2:a3:c6:c2:ae:d8:ca:88:
07:13:23:ab:d4:b4:91:17:77:6b:63:4f:83:4e:66:
5d:dd:2e:2e:b4:4e:5a:e8:93:27:d3:f8:02:f9:42:
1d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.104.0/22
193.9.60.0/22
194.1.236.0/22
IPv6:
2001:67c:1688::/48
2a05:5940::/29
2a0e:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
a3:fe:22:2f:4a:bc:12:f0:21:cd:bb:19:c4:be:0f:ef:36:e8:
8e:11:59:d7:0e:5d:48:d7:32:ab:5b:2c:90:98:6f:26:cc:57:
49:db:4e:80:8f:ef:c8:42:40:2d:ba:4a:78:59:13:4c:6c:c1:
e0:7a:dd:78:45:3f:29:5b:87:9d:37:22:b6:f1:7d:81:e9:87:
49:43:55:ab:a9:fa:ce:c5:ee:6f:8c:ed:5a:48:9a:0d:40:82:
53:11:cf:3f:72:08:4e:fd:aa:4e:c3:6f:65:25:d9:25:1b:93:
a1:a8:45:56:ce:93:9a:4d:e2:47:df:14:82:d9:e1:af:1f:99:
40:11:64:33:dd:3c:e7:1b:e6:d6:18:ee:eb:07:2a:15:bf:f0:
99:8d:4f:4a:3f:78:ab:74:5f:1c:a0:5a:81:8a:6c:63:44:b7:
e9:04:51:f3:5f:a5:91:88:2c:9f:a7:e9:24:47:16:cb:b7:fe:
18:fa:e1:84:85:78:65:4e:8a:01:66:20:f6:64:b7:d7:69:1d:
fe:d1:3d:2a:5f:3b:d5:fc:63:47:e7:b3:e0:64:87:98:5c:f3:
81:7f:f4:f6:cd:c2:62:2f:c4:56:2c:2f:67:be:bc:b9:51:70:
2e:fe:4a:f8:cd:98:36:28:33:71:ea:4e:33:d1:8d:66:6f:9b:
99:37:e0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:53:13 2025 by rpki-client