Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.cer (raw, json)
Hash identifier: EX/9sNRrvwW+JV1mYMmzrO2ta2Epca5CNFb9lai78jw=
Subject key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196F6FC8979F332C54CB223C9FF7B497CF0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 May 2025 07:54:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.142.128.0/24
IP: 2001:67c:1c4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:fc:89:79:f3:32:c5:4c:b2:23:c9:ff:7b:49:7c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 22 07:54:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=038af86795417a3584d616375209a72efee2462b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:a2:e8:82:de:ac:d7:7a:df:6d:3a:8e:d7:
66:cb:5d:bd:77:26:31:95:16:88:45:2f:07:ac:19:
8b:c8:07:d3:cc:b0:91:6f:98:54:c2:24:2d:a7:03:
b2:42:67:2b:5a:de:86:a4:94:e8:ab:07:e9:03:63:
8b:55:b5:72:aa:bf:27:00:0a:4c:a5:ac:06:01:1b:
6d:92:79:0f:f6:52:20:5a:51:05:fc:0c:f4:8f:c3:
3f:01:30:6a:65:6a:d5:e8:c2:3d:b0:ca:2d:87:e8:
30:ef:6a:fe:e7:00:69:e6:fa:85:f3:90:3d:f7:21:
d2:bc:05:7f:d2:c7:92:e6:3d:71:20:d4:54:1b:74:
8e:bb:c1:11:da:d0:d0:d9:58:37:a7:97:04:7c:8b:
9a:fc:59:c3:fb:19:73:72:e3:98:1d:84:f2:d6:93:
d3:0f:dc:eb:89:b7:e7:1c:fa:34:47:9b:87:b4:f4:
b0:d7:18:71:01:53:55:d1:e7:e9:b2:e9:1d:eb:cf:
18:64:10:49:72:b9:68:26:cf:84:aa:50:95:10:c1:
28:12:e6:0d:ef:01:e6:fd:c0:8f:7d:20:b8:3c:ed:
39:36:cd:46:ea:4e:6c:f4:bc:66:e2:19:43:de:d4:
1a:5b:74:87:85:d7:46:4a:f9:e0:cb:ef:57:79:b9:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.128.0/24
IPv6:
2001:67c:1c4::/48
Signature Algorithm: sha256WithRSAEncryption
1e:4c:6b:69:45:e2:68:b2:ae:64:b1:be:b6:25:83:33:e1:b6:
c5:fc:4b:81:48:00:77:ed:6d:83:7a:65:72:2d:46:65:f0:95:
63:54:89:45:1b:0c:97:f0:41:6c:57:63:94:22:a0:1c:35:48:
c9:73:51:51:37:15:94:12:8b:34:2a:51:a3:fb:76:0d:fc:56:
53:25:7f:0e:c3:b0:87:a0:ed:c3:59:04:ea:6a:2a:68:00:e7:
6d:82:db:19:58:d8:d6:79:5e:7a:fc:40:1d:4a:32:88:08:25:
22:a7:84:b8:74:86:2b:ff:bd:2e:4f:b9:c7:66:1f:20:41:e4:
78:a1:c4:79:ce:d9:2c:ce:ee:73:bf:89:20:55:74:3a:01:08:
01:62:00:85:8e:19:29:fe:87:b5:67:52:8b:5a:99:97:da:f8:
67:8e:78:59:3a:a0:78:a9:90:54:e0:1a:92:d0:4d:56:fb:e7:
77:e7:64:4b:43:ca:e5:45:3a:1c:01:09:29:93:2b:54:05:09:
39:c3:eb:72:bc:57:1c:3e:69:26:f7:81:6f:d6:a4:b5:36:a6:
0b:2c:2f:cf:42:ea:1d:a3:9c:a3:68:95:1c:9c:fa:30:da:9c:
f0:01:2e:64:2d:b5:95:ea:8b:22:6d:72:e9:dd:f5:2c:8b:51:
0a:65:a2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:36:25 2025 by rpki-client