Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
File: u-LMINabMN3hjsDQAs4vkUm_sG0.cer (raw, json)
Hash identifier: +Dl5X3vDajPaVY4fmlNswCadZI0YoxwZLPjID04ikHA=
Subject key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019715EE9BA0BAC40552882A31C355BF29FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 May 2025 08:07:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214202
IP: 2001:678:450::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:ee:9b:a0:ba:c4:05:52:88:2a:31:c3:55:bf:29:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 28 08:07:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:38:87:6e:d9:93:6b:06:bf:35:4d:a5:b0:
a8:97:5c:9b:ca:4f:ca:a1:2b:c3:24:60:b3:e5:b5:
04:5c:20:e6:96:b3:21:6e:19:a9:a6:42:28:63:85:
60:bd:69:74:5c:9f:6a:7f:f2:ea:05:62:e3:5e:13:
02:31:a4:c2:03:fa:8d:9b:e2:3d:a8:0f:2d:a0:25:
bf:90:04:a9:34:c1:08:6f:fa:37:cd:e8:e7:42:7b:
a1:5f:7d:27:ee:c6:b5:58:0a:95:e7:4c:05:b6:fb:
33:c3:e3:1b:98:35:76:ee:8a:0e:11:16:b6:ed:70:
59:1c:d6:5f:f3:fe:39:44:97:0f:9c:44:f5:8a:50:
03:a0:fc:d3:cd:45:31:3d:ff:08:f1:5d:bf:2b:d8:
e8:9e:7d:bb:ef:6b:28:a6:b3:e5:f9:e2:88:d5:ff:
f3:9e:30:6d:b4:ff:76:51:55:04:9d:e5:12:fa:78:
7d:0d:bf:d4:a3:c3:e8:47:8b:78:15:32:08:23:89:
0f:33:1c:e6:b1:89:a0:86:37:8a:ca:25:32:74:b2:
ce:74:f2:5d:8a:76:46:53:e9:2f:85:03:3a:5e:dd:
88:fe:d4:f0:d1:4a:a2:8c:ff:47:87:aa:c6:09:00:
5b:4c:0d:21:0d:53:6d:09:8e:4c:75:e6:07:ab:13:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:450::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214202
Signature Algorithm: sha256WithRSAEncryption
8e:b1:9b:25:74:df:b8:da:41:f7:d0:bd:b4:5e:8d:d4:e8:e4:
d8:67:6d:b1:42:60:cf:92:4d:49:74:ca:f5:d0:11:5e:a0:13:
07:45:fd:9d:30:41:ce:ef:f4:63:b5:88:7c:20:66:66:63:09:
83:bd:96:e7:9e:79:6a:ae:4b:fa:65:75:fc:ac:f8:a3:e2:da:
46:16:90:7b:12:53:d7:b0:b6:6e:b3:63:b9:71:4c:a0:f5:15:
ae:43:ae:57:1a:c4:e8:58:b8:33:ec:d1:24:ee:29:a7:dc:db:
a6:d3:dc:c5:98:b9:4b:6f:58:3c:82:6d:84:f6:28:6e:a4:44:
b1:ca:08:9d:83:cd:9f:4b:67:cb:eb:ef:3d:cb:c5:78:41:9c:
d4:07:ee:7a:68:6c:61:e0:89:5d:44:36:ab:49:36:72:59:b2:
fc:a0:0f:c9:9f:e2:75:2b:0a:1f:2c:39:8a:d6:bb:41:a9:b0:
95:bd:3b:0f:08:36:aa:c4:06:42:c1:b4:4b:dd:0a:11:cc:50:
a3:a9:c6:1b:94:90:98:d3:ab:55:a4:35:89:83:18:36:08:ac:
db:83:58:05:1f:c2:a1:08:d8:df:45:e3:90:96:19:fc:c7:07:
b5:2d:57:bb:15:d6:10:01:14:5f:32:3e:2c:e3:4f:99:a1:d9:
f5:d1:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:59:02 2025 by rpki-client