Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
File: dnmIT2MwtlBg7cQcysDlRtOApQQ.cer (raw, json)
Hash identifier: Na35MqyFQX6f4UhbG781BcHA5SyzF77l9kMmkD684NE=
Subject key identifier: 76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198E0CFB4CFABF4C6BC3ABCC292DAF0BE43
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 25 Aug 2025 10:39:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31072
IP: 193.23.53.0/24
IP: 195.3.196.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:cf:b4:cf:ab:f4:c6:bc:3a:bc:c2:92:da:f0:be:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 25 10:39:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7679884f6330b65060edc41ccac0e546d380a504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:81:95:17:93:c9:ad:ec:8d:b1:bc:b8:05:
7b:76:97:3a:0a:f6:5f:25:1c:14:ec:93:03:c3:bc:
32:30:3a:94:cf:b8:7c:6d:51:02:ba:a5:1f:d5:7b:
ee:1b:c8:fc:ae:d2:5f:aa:45:5c:23:0a:af:a5:4a:
ff:21:15:82:aa:cf:98:ba:f7:29:57:e8:5b:8a:5d:
51:1e:df:81:98:b6:2f:1f:25:5f:a6:1e:78:ae:17:
f1:4e:e3:ca:4a:49:67:6e:ee:e2:fb:17:88:c2:4b:
7c:ea:1b:6c:21:41:78:2f:9c:fd:63:06:f0:84:54:
56:43:a0:61:d2:de:64:0f:ea:76:92:8f:ec:76:96:
27:49:54:68:80:c2:ee:90:e7:e6:47:12:3a:0c:68:
d7:cb:74:7f:75:67:a9:66:76:d8:31:31:14:60:6f:
94:e6:79:7b:03:e3:f6:98:74:a0:40:e6:65:32:43:
f7:ab:14:37:53:02:9e:99:81:98:9d:90:cf:cc:b2:
f8:d6:8b:39:c8:fa:cf:31:ef:a8:f0:8b:6e:93:41:
fd:5b:36:49:f7:5a:e0:07:19:94:f0:68:a8:15:d7:
c6:dd:38:c7:34:54:04:dd:1f:de:e4:4a:7a:6d:51:
75:60:fb:1f:0b:df:c2:5f:97:5f:96:33:ac:80:9f:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.53.0/24
195.3.196.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31072
Signature Algorithm: sha256WithRSAEncryption
14:1a:1d:18:54:0c:e2:05:ca:11:2f:57:aa:33:30:5f:bd:81:
bb:47:7e:f3:13:ae:d2:83:be:de:a0:1d:3a:80:73:74:5d:fe:
52:25:c3:03:34:83:7d:2c:e9:b9:cd:03:27:fa:bd:3f:29:39:
6a:f6:ab:54:ce:d7:6f:d6:d2:11:b4:bf:41:2a:46:74:fc:4b:
d2:be:f3:dc:da:e8:b3:3c:6c:22:ac:1a:f6:19:b3:a4:c8:9d:
6a:0f:f2:fe:44:30:94:d2:ce:a5:e8:1d:4b:f3:0e:d7:ce:9d:
ee:70:1e:47:e2:79:6f:60:b2:eb:f5:2c:67:73:99:57:75:17:
10:c3:40:17:39:79:3c:d1:f1:4e:68:74:5e:82:ca:ef:c5:73:
9b:6f:e0:e4:1f:62:7e:66:a7:bf:5b:0f:f0:6f:08:d7:35:14:
ef:2e:21:d1:fc:0a:40:e3:ca:08:19:55:fe:13:40:6a:f5:2f:
bf:18:8b:9f:ed:c4:d0:fc:8a:c5:8a:88:4c:32:f7:68:f5:3c:
ae:c5:20:a8:67:9c:13:4f:87:33:f2:42:0f:f2:37:54:3a:c8:
84:aa:74:08:cc:f5:fb:75:b6:41:7c:38:98:b0:2b:b3:7f:fc:
3d:88:a5:5a:c8:f1:e7:1e:13:6b:e9:05:35:d0:52:b1:c2:eb:
0b:67:94:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:19:32 2025 by rpki-client