Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
File: kvSd6GhPEof09ssYXVz33oDJC5Q.cer (raw, json)
Hash identifier: LNyD55RuVyZzs7sley8AtGycOHybZ1kCrCcySABUBKM=
Subject key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196D81CB7F8E5D6FBCD89E4730CF560F9F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 16 May 2025 08:01:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.139.198.0/23
IP: 45.156.52.0/22
IP: 95.214.172.0/22
IP: 95.214.180.0/22
IP: 185.115.207.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:1c:b7:f8:e5:d6:fb:cd:89:e4:73:0c:f5:60:f9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 16 08:01:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:86:20:e8:67:02:96:93:d1:6b:10:5b:bd:
8c:d9:d7:96:2b:4a:97:e6:3d:8b:6d:a1:9d:78:52:
13:be:21:88:3b:dc:70:ce:bc:2c:cc:6b:5c:40:de:
e6:5f:44:11:14:0d:40:e8:69:f1:41:2a:c8:fb:8e:
f7:5a:22:0d:ce:14:b5:ea:a0:75:a4:d3:78:b6:81:
60:6d:fd:2f:57:c4:58:fc:fe:ca:48:33:51:a6:8b:
9f:47:67:d9:3d:92:d6:05:63:b2:25:b4:61:07:fc:
1e:36:b2:70:82:6b:83:0e:7a:11:c6:d0:27:6e:f5:
f0:59:dd:47:4b:f5:52:56:c5:0f:a1:2c:6f:53:3c:
ab:6b:1a:f9:ae:06:6b:cf:c5:cc:7d:7b:95:11:f6:
ef:88:86:3c:54:cb:ba:2e:36:ff:7a:f1:aa:f6:88:
67:8f:90:5a:28:e9:38:6a:bf:84:e1:e3:4a:15:07:
2b:c5:59:73:6d:e4:a5:ef:dc:ea:43:31:47:46:1d:
10:1d:0f:db:3f:3c:3d:7a:40:77:a2:ee:e5:61:f9:
71:15:ed:61:2d:c6:31:81:e6:c6:8c:3c:95:d7:a3:
41:4a:02:3e:1f:5f:63:ab:68:75:c1:da:d9:fd:47:
d1:c8:78:1f:65:ef:bf:62:43:68:ef:88:ed:13:c7:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.198.0/23
45.156.52.0/22
95.214.172.0/22
95.214.180.0/22
185.115.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d5:08:78:c9:f1:a1:16:3a:71:18:04:35:3b:0f:ea:c5:8a:
90:9d:38:56:1a:fb:9b:ab:94:aa:02:e3:bc:a9:65:69:1f:70:
37:35:f6:05:97:89:ff:e2:33:52:ee:81:62:f0:07:d7:72:0b:
83:76:01:a4:42:61:3e:06:f2:2b:f4:91:0a:35:d3:59:70:c9:
cc:7a:d8:ba:e3:5b:fe:be:ee:8b:92:36:69:c6:f0:91:26:c4:
20:a3:2b:25:ba:53:d5:71:61:92:d2:51:f7:04:56:53:02:12:
e2:0c:ab:61:20:74:59:f2:1e:0a:80:80:34:53:cf:1f:f8:fd:
fc:41:74:43:5a:01:0c:89:fa:16:49:82:16:49:fe:0a:89:3f:
fe:8a:82:d9:b7:f0:86:57:ab:f9:b1:d1:ca:ad:a3:c9:7a:0c:
fa:3b:74:1b:1f:f4:65:98:72:1b:2b:06:c5:6b:4f:82:4b:5a:
1a:6e:b6:6a:cc:a2:84:9d:e1:1e:53:af:a3:0d:8b:30:02:3f:
ab:fb:d5:0f:5e:fa:75:3d:73:a8:57:1a:38:bb:32:d9:57:30:
83:79:38:74:b6:9e:38:6b:04:d7:e5:3d:37:6e:c0:d2:51:a0:
b7:11:e0:68:3e:62:8e:99:4e:5b:6a:c0:34:97:f1:58:b1:7c:
ea:ff:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 02:20:09 2025 by rpki-client