Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
File: Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer (raw, json)
Hash identifier: IRO+VguG0YHSqAmBqkQwvtGR3AirqdS84ca2EPVMSCw=
Subject key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01971C60DFC7C88F3FED6D29B2A038BFDA69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 May 2025 14:10:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8241
AS: 57174
IP: 95.215.176.0/21
IP: 185.42.48.0/22
IP: 185.246.32.0/22
IP: 195.146.64.0/19
IP: 213.181.0.0/19
IP: 2a02:eb80::/29
IP: 2a0d:7480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:60:df:c7:c8:8f:3f:ed:6d:29:b2:a0:38:bf:da:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 29 14:10:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=464d733de81fbd486d442358e0c15370520f9312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:98:da:f2:1e:74:29:fe:22:2c:06:d3:7f:
6a:3c:2a:22:b2:bc:1e:48:88:b8:be:9a:e7:d8:69:
93:66:45:1e:fd:44:04:6d:7d:8a:aa:11:ba:09:84:
c7:4f:4f:55:f6:6a:e3:b2:ad:e6:01:0f:45:dd:e3:
83:ab:e1:82:9d:1b:2b:a4:88:f1:fe:81:05:73:fd:
62:84:b1:2f:06:74:3c:f7:fb:e9:fa:f4:6f:da:63:
4d:ce:8d:77:c7:07:dd:ac:90:4e:8f:86:bb:6e:75:
3a:75:38:29:c4:c0:b9:d0:43:d9:5a:89:a4:a5:e2:
72:d3:25:f6:42:a7:90:6a:4c:b2:ff:05:20:ce:7a:
39:3c:a8:26:81:54:de:83:2d:17:75:48:e4:a6:34:
e3:b6:43:26:06:e0:0b:d5:85:bb:bc:4d:53:66:62:
7d:77:8c:38:29:2a:34:a8:09:82:39:9c:68:c8:e4:
42:79:ab:02:6b:89:72:db:78:0f:04:6a:27:07:d4:
52:44:10:fe:83:fe:c4:02:67:f9:b4:c8:16:b9:99:
0b:ee:2e:eb:34:b8:e6:45:68:db:58:ab:9c:51:34:
13:cb:86:4f:04:8d:a0:6d:ea:ea:aa:fe:21:f1:fd:
6c:f9:62:57:42:54:72:34:7b:44:f8:e5:5d:b9:18:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.176.0/21
185.42.48.0/22
185.246.32.0/22
195.146.64.0/19
213.181.0.0/19
IPv6:
2a02:eb80::/29
2a0d:7480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8241
57174
Signature Algorithm: sha256WithRSAEncryption
3d:e9:1b:c7:37:a2:db:88:ee:dd:cd:1e:35:71:f6:de:3a:d5:
66:57:81:30:64:a0:bd:7e:9e:ae:7b:2e:03:4a:71:42:5a:8f:
a6:9a:14:46:49:b7:c8:b7:11:01:e4:0c:a3:a8:da:b0:07:4a:
df:b3:0d:08:a5:f5:b9:c3:66:d0:b9:86:f2:c5:14:89:4b:59:
1b:f7:88:8a:52:1f:f5:47:a4:d6:3e:e4:85:f1:17:0a:cc:d8:
5e:81:18:b5:30:64:4a:23:f0:36:40:b0:26:12:17:72:ac:8d:
99:04:e5:e7:7c:7c:75:f4:cf:32:c8:b8:13:ad:71:27:b2:e6:
cf:fd:ba:2b:2c:ae:75:80:6d:c2:13:73:39:46:b7:fa:83:4e:
79:3e:a0:03:d5:eb:df:3a:9f:62:50:04:37:87:3f:00:57:c1:
57:83:ce:fe:c5:92:25:d4:a5:19:26:87:33:50:5b:89:2f:e5:
b5:d9:82:0f:57:d6:f2:65:c9:35:bd:24:85:ef:52:e4:01:6a:
6f:1d:f8:d3:65:9c:d2:e6:d9:95:70:7d:ef:22:48:d8:ff:cb:
05:5a:bb:84:8b:bc:ce:a4:2c:d8:b4:8e:cf:c2:4c:34:e0:34:
35:91:8f:d8:1b:8c:5b:53:14:9c:8e:d0:16:0c:32:be:db:72:
1d:1f:dd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:22 2025 by rpki-client