Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
File: eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer (raw, json)
Hash identifier: 2LDJQvZc0uw7xPc6/fudInCiyyjDsvQmbWGdGqCTl9U=
Subject key identifier: 78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019736C78210A9C35491B77C151B79A1A52C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 03 Jun 2025 17:12:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197566
IP: 91.224.90.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:c7:82:10:a9:c3:54:91:b7:7c:15:1b:79:a1:a5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 17:12:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78decead419807747c92ace69448113ff0928b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:27:06:b8:43:9e:69:ac:93:66:91:d7:0b:
d6:ad:f3:d3:5f:6e:32:c0:06:ee:d0:e4:74:d0:cb:
5d:d2:18:92:01:89:ba:3f:dc:01:1e:da:65:d0:9a:
ba:06:04:79:1f:18:91:17:cd:cb:64:54:00:a6:b5:
fc:19:a6:24:e5:03:b8:86:ab:97:7c:35:7e:89:fc:
b6:37:4f:13:83:97:21:df:ec:fe:36:67:ef:c7:94:
72:ee:34:ad:3e:eb:34:4f:46:ff:44:c0:65:08:f4:
a0:e6:c3:4b:5f:8c:57:c2:31:8a:73:bf:91:c9:35:
3d:87:ad:a7:ee:21:c5:47:e7:53:46:6a:7f:4a:cc:
49:03:cd:dc:4d:03:f0:76:de:d7:99:0d:cb:18:0d:
4f:74:3b:72:2a:e8:e7:14:08:a0:df:80:b3:10:e5:
91:bc:93:c1:b9:7f:23:70:8f:ca:c3:84:18:b0:19:
3d:24:e1:fa:f1:5a:21:64:7d:a0:1e:80:a9:58:e0:
37:a7:61:33:cc:95:28:75:c2:96:d8:a4:3d:b7:3e:
6b:0e:db:a1:23:ea:ba:ae:12:5d:83:93:c1:7c:e1:
7f:a8:66:3c:5a:f3:1c:d2:3f:d8:df:4b:21:72:9a:
07:07:00:ef:bf:ec:c4:5d:d4:3e:78:27:3e:a1:4c:
d9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.90.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197566
Signature Algorithm: sha256WithRSAEncryption
42:64:bd:51:6e:19:2d:70:d4:97:35:18:87:c0:b6:27:f5:f4:
d6:7b:97:f6:c7:cf:a5:28:4e:81:7c:fc:93:27:1b:be:e1:52:
52:ba:6a:2b:60:e1:3b:58:88:91:c8:7a:f5:38:e2:39:c5:a9:
18:14:a9:31:4f:c5:55:08:93:30:48:9e:f0:73:56:b8:1c:c3:
57:6c:8a:47:b6:42:e4:7f:43:27:ee:40:b5:ff:de:02:5a:33:
70:1b:cb:07:54:07:1f:35:a3:62:3f:a3:aa:a1:e6:ed:86:54:
bb:c8:34:d5:70:17:09:1d:ae:dc:aa:54:ed:1c:44:4d:57:b7:
5f:b6:b5:d3:76:a3:51:1b:76:1b:90:49:6f:a6:f1:9f:cc:a7:
f3:29:07:1a:5f:5b:56:c0:d2:13:01:3f:e6:ba:b2:d4:3a:16:
3a:90:62:7c:e6:3b:98:12:37:c7:e8:29:d5:6a:ba:a3:21:a3:
f9:48:bd:03:70:17:26:1f:33:78:ba:70:93:0e:6a:c5:c0:42:
a3:8f:0d:d0:f2:3a:11:5c:3b:20:8a:b3:9e:02:ea:20:e2:44:
f0:38:dd:7b:7e:63:65:dd:68:a5:f3:0b:83:a9:1e:36:e7:f4:
6c:b5:0f:7a:0c:4a:15:0a:0c:77:cc:e9:5f:c8:5b:33:1a:5a:
34:44:33:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:58:57 2025 by rpki-client