Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
File: c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer (raw, json)
Hash identifier: Dl6w1z4Khg0cKk1dxcGUWX2mT7XoLEVImLW/EndCM9s=
Subject key identifier: 73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196C8E063F05E888DA84738A4E32385B900
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 May 2025 09:01:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204288
IP: 91.210.110.0/24
IP: 193.33.38.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:e0:63:f0:5e:88:8d:a8:47:38:a4:e3:23:85:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 13 09:01:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73d31367608564d8783bb242486e93d6506e7f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:0b:00:c7:6b:1f:ea:ed:5e:7b:27:c7:9b:
53:f9:12:68:7e:ea:b0:32:dc:5a:36:36:72:80:11:
bb:4c:1b:7d:2b:02:5e:32:5f:09:64:40:b4:ce:dd:
68:84:ad:46:a4:5b:e3:90:14:2a:6e:07:c3:88:40:
b6:bb:ce:fb:a0:da:b3:5e:2a:e4:fe:e1:41:0e:98:
0c:6d:cf:25:a6:2d:2a:b5:bb:fb:2b:27:94:05:a0:
d9:a3:77:3d:1f:a7:38:5d:59:c8:1c:d0:4c:f3:9b:
7e:d1:f8:d8:88:57:45:55:0a:15:22:4f:c7:ef:ec:
ea:9e:aa:8d:c0:01:ce:22:f7:b0:6f:d6:83:91:3e:
04:7b:14:fa:72:73:e8:d8:fc:ad:94:e4:8c:ee:0e:
ff:a9:ca:22:eb:e9:c4:9b:84:68:92:66:89:02:14:
50:64:4c:38:82:66:2d:2a:78:64:50:8a:b6:ac:3a:
f9:ad:fe:7b:13:7a:b9:e7:21:f4:64:78:4f:99:b8:
97:a6:fd:e3:14:23:11:98:ed:19:41:ab:f4:bc:ef:
2a:84:86:2a:29:05:16:c4:77:e0:b6:cb:d8:a5:e1:
a2:7a:b6:cd:47:d7:3e:ba:8b:81:21:d6:5b:50:d6:
11:57:ed:1c:84:97:aa:0c:ac:d1:f4:77:c0:d7:42:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.110.0/24
193.33.38.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204288
Signature Algorithm: sha256WithRSAEncryption
00:85:31:26:0e:4b:cf:02:a1:0c:c3:41:04:6a:30:cd:04:36:
6a:89:8e:9d:97:53:87:80:4e:5b:8e:de:e2:09:89:98:63:47:
dd:25:83:cc:b6:65:e6:09:b1:ef:2d:6b:2c:62:ce:99:20:90:
39:3e:6c:2b:63:01:b6:c0:7e:8c:0f:b6:b8:cb:3c:c7:47:6a:
32:bb:ad:ba:a6:5f:06:04:7a:45:03:95:1e:04:97:2b:22:8f:
77:3b:d7:e7:af:64:2c:bb:1f:14:9d:5b:6e:0a:46:db:6d:00:
00:76:89:95:08:aa:a4:4c:43:96:07:7a:49:24:26:50:6d:57:
3c:91:34:ae:86:ed:28:58:ae:99:73:89:96:56:54:c4:56:12:
a8:0d:be:95:0a:39:8f:26:87:35:88:90:8d:c7:f8:14:54:53:
0a:46:27:d3:ca:47:18:be:1f:4d:c5:b8:68:1e:b7:b8:97:3f:
e7:cc:2f:2b:8a:3d:d4:6d:22:3d:6f:3f:0b:66:34:cf:1d:00:
56:b7:6e:9e:54:95:0d:a5:19:f9:d6:07:14:f5:79:c8:f1:b7:
5d:73:b9:04:aa:52:50:e4:46:a8:9f:72:a6:8e:6c:7d:f3:50:
c7:2d:e6:59:7d:0c:99:3e:69:df:85:cc:6d:aa:0e:d9:aa:d7:
83:f6:12:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:52:59 2025 by rpki-client