Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dJm8fW4g9ytAmz-7qsGDSAyekNc.cer
File: dJm8fW4g9ytAmz-7qsGDSAyekNc.cer (raw, json)
Hash identifier: AdUZk3os7IzTqXb9Ww1VjpbfD1QhfNEw/BUJh4rrmBg=
Subject key identifier: 74:99:BC:7D:6E:20:F7:2B:40:9B:3F:BB:AA:C1:83:48:0C:9E:90:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196ED5E6CBC0F8EDA12C2DDFECF15288343
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 11:05:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43244
IP: 91.196.212.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:5e:6c:bc:0f:8e:da:12:c2:dd:fe:cf:15:28:83:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 11:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7499bc7d6e20f72b409b3fbbaac183480c9e90d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:9e:70:89:4f:47:39:05:b0:56:c2:5b:a2:
87:d1:21:85:5c:0f:e5:c5:b4:77:8f:8c:c8:6f:fb:
91:c5:25:e0:42:58:89:13:4b:d8:c7:52:1f:67:08:
19:9b:38:07:99:fe:06:da:6d:bd:75:47:35:14:f1:
98:eb:9b:1e:1a:66:c8:20:4d:0a:51:10:4b:ef:92:
2c:e3:20:43:86:e0:92:7a:15:e1:c4:ad:d3:53:cb:
8b:5c:9d:72:58:b1:93:a9:ce:cd:c2:b6:82:0e:26:
56:e9:5d:e9:ac:84:bf:cb:7a:9a:8b:9f:5f:4d:45:
bf:08:92:9f:80:17:2f:a7:cb:29:4c:ec:82:8b:e9:
13:a7:64:6f:92:cd:69:ea:3a:7e:75:f4:5f:b8:3f:
cf:3d:ee:c0:34:f2:ba:39:34:d2:ef:8f:99:8a:8a:
d5:06:21:99:3f:c6:a7:7c:fd:5c:0e:7f:4d:c2:69:
be:54:08:66:d1:eb:e7:29:ad:2d:87:b1:cc:d9:05:
83:e3:06:76:cf:7b:f0:f4:f6:18:16:4e:19:61:a8:
21:6d:c1:ef:e6:d6:d3:ad:68:55:77:93:a5:2f:f6:
de:db:e3:cb:3b:56:a2:15:ea:cc:c3:0c:97:b2:da:
61:92:1c:c9:0b:24:fe:ee:c0:b7:07:4f:46:1f:d8:
1f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:99:BC:7D:6E:20:F7:2B:40:9B:3F:BB:AA:C1:83:48:0C:9E:90:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.212.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43244
Signature Algorithm: sha256WithRSAEncryption
99:6d:a2:c8:a3:04:cc:85:ed:29:5f:07:d7:cc:e7:95:71:fc:
6a:3f:0c:85:6f:1c:a7:94:5d:ea:01:0b:89:58:af:7f:2d:45:
b9:d7:79:47:2e:0f:a7:b6:bf:c8:e6:c8:e9:65:1e:61:fa:65:
65:a4:48:e0:35:23:82:d3:22:76:19:69:40:9e:73:18:6f:fd:
f1:fb:68:e1:87:80:1d:a3:71:8d:31:c9:5a:e2:f6:f8:a7:e0:
65:f6:e9:d1:5b:12:b0:6c:92:7b:6e:1a:ec:1b:8f:44:4e:2e:
95:c9:39:f6:b8:cd:38:6f:bd:b3:50:c3:cd:35:e8:bd:f8:14:
d6:fc:88:32:11:99:49:b1:56:6f:4e:79:6d:d1:6d:e9:ce:b8:
a1:8a:e7:b6:5f:29:b3:a1:5f:ee:8d:18:0d:ef:91:70:41:d5:
6c:1b:5f:17:c5:1f:67:f9:67:bc:1f:05:c1:70:3f:61:f6:0c:
bf:b0:74:da:6b:e6:b2:d0:55:83:10:3f:8d:88:d7:c5:1e:e9:
4e:53:bd:57:ca:41:47:d1:30:18:b4:50:78:72:8d:dc:a5:50:
68:7d:77:29:4f:a7:0c:e6:8d:bd:c9:ef:3e:5a:25:54:74:f9:
a7:ba:f2:75:1d:63:02:0b:5d:a9:78:25:da:53:9f:d9:99:d7:
6d:af:76:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:57:13 2025 by rpki-client