Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
File: jvxhDOe89HllH9lRjCiJTtHrWoQ.cer (raw, json)
Hash identifier: lcME0Twja43JyzDaUBpDdXVDZH8uEyod0HT2tI6F7ak=
Subject key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01971679BCC1B0FC1CD194267B4C44697B8A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 May 2025 10:39:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.103.203.0/24
IP: 195.54.166.0/23
IP: 202.122.129.0/24
IP: 2a14:280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:79:bc:c1:b0:fc:1c:d1:94:26:7b:4c:44:69:7b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 28 10:39:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:5c:35:da:a5:2f:53:27:02:59:0c:b2:be:
e2:c8:48:70:dd:f0:41:8d:52:ff:6b:a0:69:f9:51:
10:ba:7d:02:1b:b2:60:23:ac:fa:1c:d5:dc:df:6a:
dc:5f:27:12:74:d0:01:5a:ea:e0:bf:7a:d6:58:1d:
f9:1a:95:12:fe:45:c4:d1:25:d2:26:4d:d6:4d:f6:
23:0e:b6:bd:f5:a7:ba:7d:18:0c:ca:b3:b7:15:50:
4d:dd:83:54:e0:a3:85:de:cc:6e:78:cf:a7:94:ca:
8f:f7:09:0c:fc:c6:f7:6f:43:b0:13:67:50:c3:a7:
ea:c0:95:50:92:89:a0:ed:f9:0a:ac:cb:0d:65:7e:
b3:ed:ee:d4:07:e9:f8:63:3e:c7:1b:29:3a:b8:0b:
3b:ca:c3:92:89:ae:34:f0:64:29:a2:be:20:3d:62:
6f:94:f2:f0:a2:60:e1:61:5b:45:c5:7d:bc:39:5c:
f5:c6:42:23:68:48:6b:7f:fd:03:d6:54:48:f5:b5:
00:be:14:03:7c:97:5b:0c:1f:79:51:66:0d:0e:63:
95:db:0d:19:d3:52:46:b5:5b:92:88:5a:20:d3:ce:
06:90:2b:67:5b:65:42:c5:5d:f0:fe:29:08:c5:8c:
d8:0a:1f:3b:3d:5e:ed:72:68:75:fd:1d:22:56:5a:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.203.0/24
195.54.166.0/23
202.122.129.0/24
IPv6:
2a14:280::/29
Signature Algorithm: sha256WithRSAEncryption
16:0a:bf:49:5f:f8:b5:e4:70:e7:3b:63:e4:b4:67:07:75:04:
66:42:a4:01:95:80:b9:2d:5c:13:ca:16:ea:0e:4a:36:a6:ce:
3f:d2:0d:67:4d:aa:bd:08:d3:9e:54:94:a6:88:5a:f3:ab:26:
3e:07:e2:29:e9:6d:2e:50:f4:78:f0:25:cf:af:2b:49:98:29:
09:ee:7c:7a:b4:fe:6b:13:da:2e:7f:99:39:f6:b6:00:28:80:
f1:93:8d:92:03:0a:d1:bb:ec:4b:44:f2:1d:1d:c9:07:12:7a:
f3:d8:51:d9:a3:27:54:d9:37:14:a8:8b:91:6b:dd:7c:58:a1:
c5:12:c7:09:f7:79:1e:ca:15:3c:eb:52:9a:3c:17:a8:33:af:
69:b1:63:41:62:d5:e8:a9:d2:7e:fc:63:73:f9:75:c4:36:2d:
bf:d1:af:89:62:bb:9c:cb:b5:99:38:72:88:d7:99:7f:34:01:
5b:fd:be:c5:b1:5b:3c:e7:e7:08:22:37:3d:f0:93:3d:4f:11:
f1:7d:76:f1:34:59:35:d9:f8:7c:84:69:d7:18:2d:6d:ef:00:
30:d1:c2:8c:a0:8f:f0:b2:ec:f3:4b:0c:31:76:f3:07:23:16:
36:b6:a4:34:09:f8:2a:d5:1f:de:78:0c:51:15:7e:1c:3f:9c:
a1:a4:40:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:13:37 2025 by rpki-client