Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
File: GHpwT0heEd7avFYmTl2AwUh-CEI.cer (raw, json)
Hash identifier: vEwmA0mH4uyQt1k/MPKJBAq4D05HGU8fpqPBYC1dt0g=
Subject key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196CA0055836ABA4521FACB1B54F8B9CF8E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 May 2025 14:15:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5398
AS: 44160
IP: 77.220.64.0/19
IP: 193.221.216.0/23
IP: 2a0f:e880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:00:55:83:6a:ba:45:21:fa:cb:1b:54:f8:b9:cf:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 13 14:15:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=187a704f485e11dedabc56264e5d80c1487e0842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:06:e4:0c:a0:78:50:db:29:24:c9:c6:1a:
09:b1:ef:1b:59:84:b5:ab:70:97:85:2b:a8:9d:e5:
9a:9f:7f:60:ab:d4:19:b7:23:f1:4b:32:5d:fd:e7:
02:a8:ac:27:39:4a:e0:58:59:f4:63:16:38:33:91:
58:7a:6d:65:5f:69:4c:d2:ed:d8:c0:32:11:3e:a6:
30:1a:86:65:e4:db:b2:8a:c8:61:8f:19:a9:e1:d2:
8e:59:54:93:86:b8:09:3f:18:38:2b:3b:38:91:8e:
d7:70:97:87:60:7b:b5:28:0b:b3:94:5e:e1:0f:39:
e6:18:99:25:b2:aa:69:f7:54:9c:68:25:2a:de:7c:
c0:95:48:c1:23:ba:ac:78:8c:04:95:fd:04:50:8a:
e2:47:e8:6c:55:33:99:3a:5e:85:27:0c:fb:0c:ce:
3f:63:42:9d:fb:e1:6c:5c:b2:49:e5:5e:13:cb:d2:
77:eb:37:5c:96:76:80:7a:40:aa:f3:e3:56:20:f0:
0a:a9:eb:4c:09:12:de:9e:0e:dc:c2:91:3b:d1:a5:
30:35:33:eb:e9:80:97:a6:83:91:90:9b:56:d0:67:
f6:fd:5f:d1:37:5c:8e:68:99:b5:06:4f:67:4a:49:
a9:cb:0a:48:b2:d7:3a:f0:5a:a1:67:69:40:ba:e7:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.64.0/19
193.221.216.0/23
IPv6:
2a0f:e880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5398
44160
Signature Algorithm: sha256WithRSAEncryption
5d:78:6d:6f:52:43:1a:e2:cf:a1:fb:97:df:8c:52:74:09:0a:
56:d1:7b:aa:8d:64:26:18:4f:58:a9:4e:5a:c1:4c:05:bb:b4:
75:c5:55:4f:4d:9b:42:02:27:8f:02:7f:2a:0e:bf:9e:18:f7:
eb:49:3c:7c:58:0e:cc:e5:d9:50:da:33:14:64:d8:fa:b8:82:
10:c5:7e:e3:53:93:0b:a3:96:f4:e3:ed:eb:0b:48:92:fb:f1:
0c:63:ca:7e:35:ad:f3:ea:22:10:38:05:0f:db:15:21:63:88:
ee:0a:eb:b3:36:e1:37:09:c5:b1:aa:5d:0f:92:a9:9e:a6:eb:
88:ff:5f:4d:6d:32:6f:76:e2:d5:09:f8:1e:8f:56:72:f6:b4:
da:94:1f:95:ac:77:bf:ac:f3:5a:ce:72:f0:c1:01:ac:00:a7:
5e:df:07:69:fa:1c:08:73:24:bd:c4:1d:5b:2f:03:d9:fb:19:
9f:e3:c9:60:00:39:ba:57:f1:50:1f:a1:21:9b:9f:0f:6e:57:
00:64:c7:19:f5:40:2b:f8:66:93:2c:2e:ca:f8:2d:fb:d1:a4:
a4:65:dd:59:1e:26:b5:7b:f3:8a:0a:75:3e:7c:b1:6a:1b:53:
da:f4:36:de:2a:a6:32:00:72:7e:98:e6:86:06:91:13:41:68:
89:28:cf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:45:15 2025 by rpki-client