Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ePKehzghWcpegTh9fud-US-tFjY.cer
File: ePKehzghWcpegTh9fud-US-tFjY.cer (raw, json)
Hash identifier: MuyyhSjT7rzIITVd2NA4YzAWchZEh3lxBBoPcXBIm7U=
Subject key identifier: 78:F2:9E:87:38:21:59:CA:5E:81:38:7D:7E:E7:7E:51:2F:AD:16:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01970C63FBF89BABF5B1805867D0167B1E4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 26 May 2025 11:39:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51505
IP: 193.28.156.0/24
IP: 194.46.62.0/23
IP: 194.154.32.0/19
IP: 2a14:6700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:63:fb:f8:9b:ab:f5:b1:80:58:67:d0:16:7b:1e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 26 11:39:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78f29e87382159ca5e81387d7ee77e512fad1636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:7b:89:30:26:3b:54:0f:d3:88:c7:1b:52:
9d:c1:73:30:f2:23:d1:39:5c:5c:4c:d7:17:40:99:
9b:af:4d:b8:9c:ca:ff:c4:ed:b6:25:51:5c:58:69:
bf:ec:20:bb:6d:66:1a:7f:c8:c7:26:9e:5f:6c:8a:
d2:01:9e:f0:96:66:87:5f:f2:50:77:50:80:58:f3:
7e:14:ab:9c:90:e4:7d:b7:69:eb:9d:50:39:f1:a0:
51:b9:50:be:01:11:69:c8:8b:5a:76:0a:71:3b:99:
ff:a2:f2:8b:9e:d6:d5:08:43:9b:9d:28:57:e7:53:
ad:91:98:65:2f:66:9b:c2:53:50:5b:2c:54:e2:7e:
7a:31:c4:03:57:a4:ff:98:30:dd:2b:e6:af:5c:1c:
dc:40:27:7f:5d:f4:cb:b2:06:19:7c:46:37:b8:b6:
34:db:98:33:86:a8:a4:7d:3e:97:1f:51:63:ba:19:
a9:ac:c7:37:e4:0b:cd:ad:2d:7f:13:1b:ca:57:4e:
34:49:84:4a:fb:86:94:d8:b9:47:58:fc:89:be:5e:
ab:9d:75:4e:c3:6f:86:97:1d:63:c6:a3:bf:90:18:
d9:ca:ce:32:7f:d3:9d:ed:ac:0b:1b:ee:b2:ed:8b:
b9:29:4a:e2:81:df:a6:61:ed:41:b2:70:d2:19:1a:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F2:9E:87:38:21:59:CA:5E:81:38:7D:7E:E7:7E:51:2F:AD:16:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.156.0/24
194.46.62.0/23
194.154.32.0/19
IPv6:
2a14:6700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51505
Signature Algorithm: sha256WithRSAEncryption
62:7c:e9:3c:d3:79:d9:f8:8e:d3:71:a3:43:78:ca:f4:ca:d1:
01:65:1c:5b:cd:9b:2f:9b:ca:be:f1:6c:e8:22:27:8c:f4:18:
ab:14:a7:96:50:76:b5:67:f7:90:46:72:4b:5a:76:c1:c7:fd:
57:85:13:63:34:eb:9a:e2:db:94:54:ad:2b:a4:f4:48:7e:d1:
20:1f:5a:27:e7:48:16:f4:70:4c:02:c5:12:ce:9e:33:34:38:
2a:72:f8:4b:14:59:e6:d4:b1:7b:f5:a0:6b:c6:fd:b8:f7:34:
15:21:d5:9b:f9:1d:3f:6c:45:e3:ff:9a:e4:c9:9c:29:32:f2:
6d:69:e1:7f:23:93:44:12:6e:c4:28:c7:e9:05:e4:7f:a3:f2:
56:f9:4e:5c:f6:f8:fe:ce:7e:12:99:82:11:dc:04:4f:62:e6:
f9:3f:d3:92:3d:a6:db:1c:1c:02:4a:d3:60:63:5d:34:b8:9a:
d7:59:b8:03:f9:c0:05:45:e0:ae:fb:0e:1d:77:53:d6:5e:23:
07:5d:4e:85:dd:93:2d:3c:76:1e:98:1c:bf:33:98:2d:f8:96:
81:bf:89:ab:60:f1:3b:1a:38:d3:8e:bd:60:d5:a7:b2:de:bc:
65:ea:94:03:65:4d:ec:48:ed:38:79:a9:3b:07:1c:b6:dc:c9:
6e:52:5b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:00:42 2025 by rpki-client