Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer
File: Myrs0kO-9YfIebv-H-TFpb6zNFU.cer (raw, json)
Hash identifier: semL+yDG7++AuPShEL/P7mmk2n+V6uTgmbwHDi0L5ow=
Subject key identifier: 33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198F2939CBFA5904FEB9FA657F894B4B1B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 28 Aug 2025 21:26:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214347
IP: 2001:678:7b4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f2:93:9c:bf:a5:90:4f:eb:9f:a6:57:f8:94:b4:b1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 28 21:26:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=332aecd243bef587c879bbfe1fe4c5a5beb33455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:d6:c0:32:63:3c:44:c8:06:e2:c5:98:82:
d9:36:b2:b7:90:29:d8:02:ae:8b:e1:2b:44:fc:4f:
03:8a:ae:50:f3:5a:17:44:c6:1f:67:00:ee:da:bc:
9d:39:c0:49:16:64:64:f2:10:aa:6b:e2:ec:84:ee:
38:2e:a1:f6:c0:46:f2:d9:99:f4:d4:58:72:f9:7d:
24:15:57:46:2a:ba:b1:07:3b:5e:b8:97:ed:06:51:
1c:7e:aa:cc:f1:d3:6f:da:6b:dd:04:46:4d:d5:fb:
30:b5:61:43:6a:1e:c0:2c:f8:b6:5b:eb:c4:b1:de:
0c:77:12:14:e4:b5:5e:5f:05:43:79:6f:76:24:19:
d6:96:ef:4b:6e:3a:f4:05:54:b2:9d:b0:da:b2:da:
2e:42:66:6a:af:5b:26:5c:68:c8:0a:6f:4e:66:14:
c4:b1:07:16:ab:eb:7e:76:81:c9:bd:b7:f8:48:24:
3c:f7:c3:44:69:d0:cc:4b:46:48:b3:fb:03:3c:af:
a8:1e:0a:88:b1:1d:84:ee:cb:e2:67:8e:a7:ed:34:
6b:d0:c6:67:1f:46:1a:e6:c6:12:fa:80:e9:7d:7a:
a5:02:c8:08:4d:8d:2a:95:95:fd:a1:14:1a:1f:68:
ab:1b:15:a4:5a:65:4f:a0:a4:08:4e:94:68:b6:6c:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:7b4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214347
Signature Algorithm: sha256WithRSAEncryption
95:ba:c4:94:75:3c:15:7e:06:f6:1b:89:1c:cb:d6:3b:f8:90:
54:b4:4a:17:2a:35:cf:13:35:1b:9a:c0:24:87:0e:7a:2a:cf:
ca:1f:8a:fc:1f:13:38:57:33:97:71:9f:7f:07:db:60:5b:63:
cb:c6:60:b0:3f:f3:5f:54:99:5b:f6:3f:cc:f3:2a:6f:2a:60:
e9:3d:c2:30:3b:29:5f:85:ec:0e:f0:4d:4a:21:72:da:49:b4:
a9:2f:f0:89:99:42:97:78:14:77:f2:6b:93:63:d9:7a:53:01:
fa:54:b0:6a:04:48:f5:de:9e:28:65:67:ae:35:5f:c3:86:57:
31:0d:1d:c4:be:d1:72:f2:68:cd:6f:cf:ed:18:ff:7c:c5:7b:
10:6d:84:2a:da:53:20:0b:0a:c0:33:4c:70:98:75:4b:75:fe:
d4:92:c6:48:ca:70:65:dc:fa:b9:dc:15:d1:97:04:10:c5:d1:
c8:2a:7d:16:c5:00:0c:07:dd:6e:7e:ca:3f:4f:c7:f6:e0:51:
66:5e:84:4e:5a:43:aa:5c:49:62:89:cf:90:6c:fb:4a:14:ca:
a5:3a:a9:35:7b:67:10:ca:aa:82:c3:d2:1d:6d:fc:a5:6d:85:
92:0e:d4:db:7d:4f:db:ec:ce:ca:88:7b:b8:95:a4:09:03:8d:
0d:5c:6a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 02:33:32 2025 by rpki-client