Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
File: V2cFtVe4IwhralMjJL-7o2mVyxw.cer (raw, json)
Hash identifier: IMXue9EAJ921iOGhiWBYDTu7DBYS/F8xTNBWa+YftbA=
Subject key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196F7781FBDA4F8342F7D5D1581646AE014
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 May 2025 10:09:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214098
IP: 185.56.161.0/24
IP: 2a07:5c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:78:1f:bd:a4:f8:34:2f:7d:5d:15:81:64:6a:e0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 22 10:09:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=576705b557b823086b6a532324bfbba36995cb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:41:81:42:99:0c:da:1f:b0:f5:31:61:ab:4a:
a6:ed:69:80:d6:e1:15:0e:ea:e1:77:94:94:c8:88:
52:62:2b:b0:04:03:79:28:56:22:12:58:c2:a7:54:
1e:1c:df:ed:d1:bf:6e:f5:d6:1c:69:a4:cf:86:8a:
e0:8d:63:3a:d1:b6:d1:e4:9a:c8:74:e3:c6:1b:57:
a0:75:9b:83:43:dc:fe:fd:83:3e:0c:0f:f4:c0:79:
d7:2a:99:ae:b9:cb:47:53:7a:29:5d:48:21:1f:76:
8b:bb:b4:77:4a:66:6c:ff:07:f7:9b:97:93:38:7e:
97:9a:c6:8f:1f:9f:f5:5b:a5:32:57:ca:76:5d:71:
00:00:49:a9:40:d1:f9:fa:34:5d:f2:00:6a:2b:a6:
ea:4b:a1:40:07:ef:0a:63:43:ed:51:df:e6:44:1a:
0d:ea:bb:30:15:a1:c3:04:0f:0f:d2:ea:2d:3b:25:
eb:f2:58:6e:c4:b9:a2:47:10:bb:52:d9:f1:df:18:
ba:ca:a8:e1:2d:4a:ec:34:da:5b:23:0b:67:21:ce:
52:f6:00:a4:dd:92:87:f8:18:87:c9:35:e1:9b:e4:
fe:a5:68:5c:8e:84:e7:8f:d2:20:c8:21:65:8c:1a:
d9:0b:07:e7:ef:f3:a1:3f:49:f0:0c:71:39:ce:5a:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.161.0/24
IPv6:
2a07:5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214098
Signature Algorithm: sha256WithRSAEncryption
62:c8:87:48:2a:1d:ab:9a:d1:91:da:80:a0:2a:3b:09:99:b4:
8f:71:c2:46:52:ba:74:3d:8d:a3:1a:6f:a8:ad:93:42:0f:04:
a1:7a:8c:7d:41:56:84:32:aa:dc:cf:6f:3e:4e:9b:53:e6:c0:
97:85:19:2e:ad:81:7e:37:0f:df:fc:5e:02:a4:60:cd:6e:e1:
3d:1c:85:bb:20:f5:c1:c5:1d:ec:75:2e:f4:3e:3e:d5:99:8f:
4a:fb:b9:bd:83:6b:2c:27:c0:c8:3e:55:0c:60:2d:29:e6:5f:
98:14:f2:25:07:7d:25:66:c5:7a:c8:de:6c:1a:f5:67:b3:ab:
69:d1:4a:3a:49:9d:8a:31:1f:c4:fd:5f:ad:b8:9f:8e:3b:7a:
a1:f8:04:96:d7:13:89:88:a1:7f:c0:e8:0b:f9:0c:e5:ef:b7:
c6:dd:54:a4:6d:f7:62:3b:da:02:29:1c:47:fd:3d:71:30:1f:
d6:45:a9:0a:d9:3f:7b:85:e4:a9:30:f0:8c:f7:bf:47:ba:c2:
70:aa:09:6b:71:c4:53:65:e4:c2:99:49:69:02:89:16:6d:25:
f2:a8:21:97:5e:b0:d3:76:b0:1c:85:1d:d1:cb:9c:64:fd:14:
ab:fc:e9:6e:54:c8:17:1a:71:61:f8:6d:d5:e5:b7:fa:8c:fb:
a6:e9:60:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:54:01 2025 by rpki-client