Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M7-dbirEKjrXVDcRN9XSSyRz0mU.cer
File: M7-dbirEKjrXVDcRN9XSSyRz0mU.cer (raw, json)
Hash identifier: Ng8B/LG2E34+S97fCXPyg2jEDHZDv2u2FwwHjET59RU=
Subject key identifier: 33:BF:9D:6E:2A:C4:2A:3A:D7:54:37:11:37:D5:D2:4B:24:73:D2:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196B437CCFFCFFD7CD5A664205F31B1FAA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 09 May 2025 08:44:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49423
IP: 91.213.16.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:37:cc:ff:cf:fd:7c:d5:a6:64:20:5f:31:b1:fa:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 9 08:44:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33bf9d6e2ac42a3ad754371137d5d24b2473d265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:3c:00:4e:b8:67:5f:95:38:46:73:24:12:
dc:c2:a8:26:ab:07:e7:02:0b:5c:3b:64:d7:5b:c4:
cc:ec:46:d0:0a:7d:93:77:c3:32:cf:ea:25:13:ad:
b3:f8:c8:9b:38:b8:5a:3b:20:5e:fa:8d:f8:9f:5e:
92:e8:28:be:e2:00:5f:dd:3f:de:18:4d:7e:91:30:
7b:55:6a:5b:9c:7a:01:1f:58:0d:82:54:88:6a:f0:
cc:08:b6:c7:9d:66:fe:d6:7d:26:1f:5f:f8:01:92:
07:fb:3e:55:19:6f:e7:08:5a:3f:91:ef:86:5f:6d:
a7:0f:5a:75:3d:94:d8:32:58:34:92:f5:da:15:7e:
af:38:c6:ef:fe:85:ee:6e:cc:fb:b0:eb:fd:34:f9:
3c:d8:bb:ad:56:b4:07:fe:54:8d:e0:7b:7b:bb:6f:
88:86:73:16:fd:98:16:23:3c:c4:b6:c6:57:43:6b:
82:8c:87:3e:8e:b1:db:6c:ed:cd:ae:b5:fe:1e:53:
1a:49:09:6b:b5:c4:f7:01:18:b4:f0:f0:5d:cf:f0:
5d:4a:40:59:b6:05:9f:ff:37:45:bd:8e:f5:05:1a:
5c:b8:14:db:34:f5:d1:a3:cb:35:ba:82:29:52:48:
69:9d:d1:f9:d7:c9:97:db:69:ee:6c:80:9a:10:af:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BF:9D:6E:2A:C4:2A:3A:D7:54:37:11:37:D5:D2:4B:24:73:D2:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.16.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49423
Signature Algorithm: sha256WithRSAEncryption
ae:55:fd:33:07:00:35:ba:16:76:1d:cc:90:d1:87:d0:4e:94:
db:34:e0:94:5b:74:a9:df:28:dd:f9:ee:ce:df:2a:68:55:75:
1e:49:c0:e1:97:fc:bf:c6:f0:8a:07:f5:19:54:ac:05:49:ed:
1b:2f:98:46:35:24:68:2d:6a:69:89:a0:b1:82:97:fd:73:88:
b1:92:5c:c7:ce:78:1c:57:49:c9:d2:9a:5e:d3:d3:bd:13:dd:
94:a5:2c:d3:88:58:9d:a0:bd:98:d3:81:cb:e0:27:76:96:09:
d7:f4:c2:72:d9:07:72:6a:2a:26:e6:ba:27:69:f5:41:6b:95:
21:f4:ed:b5:ad:01:c3:63:60:f1:7f:fb:74:3f:29:d0:a7:c3:
5a:60:f8:3e:e7:02:00:f9:94:90:c6:1b:d4:b3:e7:da:17:49:
d7:91:0b:a9:f9:dd:83:da:3c:ea:e4:e2:ed:cc:41:0b:33:90:
be:9c:09:9d:46:58:78:8f:6f:34:e2:4e:3f:34:06:d5:65:9c:
96:d4:62:e9:cd:5b:7b:8a:4f:6b:ec:f7:bb:6b:3a:9c:f6:03:
09:94:16:44:76:e0:68:38:77:68:c1:0a:fb:52:8b:a6:42:62:
c0:60:9b:e0:01:ae:fe:cc:7d:40:fb:fa:5d:bc:d0:66:50:19:
de:be:8c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:54:16 2025 by rpki-client