Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mj4i0VNpL6h29FppimQHCr0puzk.cer
File: Mj4i0VNpL6h29FppimQHCr0puzk.cer (raw, json)
Hash identifier: T7IoKcfy9c0G5FZYOMQk+kuIxcqeOQzbD9F7IxGZnZI=
Subject key identifier: 32:3E:22:D1:53:69:2F:A8:76:F4:5A:69:8A:64:07:0A:BD:29:BB:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196E2BD40CCC2F9956B069C889BDAD3F6A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 18 May 2025 09:32:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211235
IP: 45.89.20.0/24
IP: 2a09:3f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e2:bd:40:cc:c2:f9:95:6b:06:9c:88:9b:da:d3:f6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 18 09:32:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=323e22d153692fa876f45a698a64070abd29bb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:f5:bb:31:0e:d2:4d:8a:95:ce:6d:67:83:
51:b4:ee:cf:b1:d3:04:90:e7:13:65:a6:45:b9:c2:
30:b5:a6:c3:bf:fe:84:f4:aa:a7:7e:c9:b6:14:25:
cc:c0:c5:86:8d:0c:02:4b:ab:f5:30:1a:89:fc:cc:
dd:35:ca:62:a8:36:31:71:d8:8e:ec:00:1d:83:81:
28:e5:c8:72:a4:cf:f5:9d:b4:81:8c:6f:22:b6:a4:
ef:cc:3d:39:a7:f4:b0:00:8d:a8:61:20:5f:55:3a:
f1:e2:33:07:f8:17:57:ef:f2:61:da:3f:3c:a5:0c:
76:dc:b4:74:5f:90:34:5b:ef:18:ec:7b:f0:07:fe:
8c:60:9b:ee:fc:36:31:23:f4:ac:6e:85:de:a8:ac:
72:21:61:e0:78:d4:d5:94:96:1f:54:91:82:42:d8:
4a:59:c7:48:8a:c4:42:0a:60:3f:e4:b4:8f:b9:41:
e8:ce:dc:f7:92:97:20:cf:ab:c0:d0:fa:82:7e:e2:
2b:18:99:40:9c:a4:6b:29:e4:af:00:32:41:75:c1:
d8:15:5b:fb:91:6f:05:87:9b:e3:e9:b5:d2:ed:be:
fd:53:4d:4d:9f:f9:4f:41:6f:6d:ad:2a:4e:79:2a:
4e:31:a9:0d:a9:05:c6:f8:da:b2:04:35:3d:28:49:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3E:22:D1:53:69:2F:A8:76:F4:5A:69:8A:64:07:0A:BD:29:BB:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.20.0/24
IPv6:
2a09:3f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211235
Signature Algorithm: sha256WithRSAEncryption
22:ea:69:f1:fe:c9:38:09:0e:63:ad:e3:8a:eb:36:ed:2a:c0:
0d:7c:a2:9f:c2:fb:73:59:d4:62:65:c2:81:6e:d5:e1:35:83:
d4:9b:19:e7:21:e2:5b:e9:a1:c1:11:2c:78:ea:7b:ef:9e:24:
62:1b:0a:24:de:f6:7f:b1:84:02:2a:97:46:f3:b0:5b:1f:0d:
02:73:ee:08:70:fe:0c:f3:72:0f:4f:e4:99:70:be:8c:c9:d6:
fb:af:db:61:b0:e4:2e:e2:49:88:77:72:fa:d3:3b:70:ac:ee:
49:70:8f:5b:31:c8:56:76:98:78:ce:de:79:39:b1:9d:7e:09:
4f:89:46:f0:bc:41:f0:a7:b3:36:a6:26:f2:de:ed:ca:1b:d7:
5b:dc:d5:9e:1f:5f:54:bc:a7:a0:8e:15:3c:ff:d1:ea:a8:e4:
57:53:b2:42:9d:8f:b8:d6:f6:bb:0c:fc:a0:18:36:0c:b8:49:
b7:26:a4:4f:81:98:4e:00:61:6e:39:81:41:ef:1a:5d:e0:2e:
26:44:83:86:4b:62:40:18:fa:08:0d:22:f2:3a:71:52:50:77:
d9:6b:62:93:55:0e:39:99:f4:0b:ed:f3:98:3d:cc:0c:e0:0f:
c0:41:ee:11:61:08:24:82:79:69:b1:38:fb:e4:cc:04:cc:d4:
36:ec:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:04:58 2025 by rpki-client