Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
File: cmMziKelz-mnyhn9dMki3LEladM.cer (raw, json)
Hash identifier: xzs7s7o1HANwsn6Win+p3EmEGyUiaRvaQyvEED9/LV4=
Subject key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01975E4EFFFA89082B801E60BF0CE01235B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Jun 2025 09:25:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34863
IP: 31.29.96.0/19
IP: 46.226.128.0/21
IP: 62.106.77.0/24
IP: 81.23.32.0/20
IP: 85.204.20.0/23
IP: 85.204.24.0/23
IP: 89.35.96.0/20
IP: 176.116.26.0/24
IP: 185.2.252.0/22
IP: 185.63.48.0/22
IP: 185.252.195.0/24
IP: 188.94.200.0/21
IP: 194.30.173.0/24
IP: 2a00:fc8::/32
IP: 2a00:7820::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:4e:ff:fa:89:08:2b:80:1e:60:bf:0c:e0:12:35:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 11 09:25:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:13:af:32:55:a7:14:b1:3f:ff:1b:84:6d:
8a:af:9c:2f:c5:51:1e:60:cf:54:d5:d5:cb:64:2f:
c8:93:37:8f:ba:57:2d:ea:25:f9:3f:d1:21:a1:01:
77:6d:6e:ce:c0:71:56:8c:19:db:22:d3:ad:35:3e:
41:77:dc:30:e4:7b:3f:cf:dd:eb:6b:af:aa:89:cf:
d2:50:58:76:75:54:42:d5:95:26:39:25:68:01:05:
1e:c2:2a:e7:8d:14:ac:c4:c9:9c:ff:1b:ca:c4:b5:
e3:b3:da:e5:bc:4a:87:36:33:06:ef:b3:b2:ca:62:
e2:2a:22:86:29:a4:49:f0:95:00:60:3a:bf:6f:1c:
45:e0:d7:35:92:ea:7e:19:24:fd:f8:d6:97:1c:7b:
51:78:a3:ea:bf:c1:98:09:e6:3b:b5:c6:33:f2:34:
be:fb:25:45:10:bd:c6:3c:d8:14:cb:cc:4e:16:c7:
4c:d5:b9:03:13:67:61:8d:4d:84:e1:30:39:4c:c2:
bc:56:d0:fc:8a:f9:ab:2d:d4:eb:27:30:7e:0f:69:
a6:76:ee:30:4b:d3:53:8f:0f:1e:ea:5e:b0:7b:33:
41:b4:57:ca:59:7f:b0:8b:56:aa:d2:cd:3f:bc:e6:
dc:f7:fc:a7:b7:e2:7b:65:cd:86:0c:7a:10:31:6e:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.29.96.0/19
46.226.128.0/21
62.106.77.0/24
81.23.32.0/20
85.204.20.0/23
85.204.24.0/23
89.35.96.0/20
176.116.26.0/24
185.2.252.0/22
185.63.48.0/22
185.252.195.0/24
188.94.200.0/21
194.30.173.0/24
IPv6:
2a00:fc8::/32
2a00:7820::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34863
Signature Algorithm: sha256WithRSAEncryption
9d:1f:92:ab:4e:d4:67:24:74:d6:26:06:92:5c:99:ac:aa:2e:
b6:b1:45:e8:67:0b:8e:86:33:e3:8b:7e:b0:37:fb:03:eb:0d:
25:e4:c5:54:41:a6:28:74:ed:56:e2:e8:c3:b2:f8:d7:80:94:
ec:71:1f:c5:44:26:1a:44:2c:74:23:98:92:7e:7b:e1:29:9a:
fa:66:7a:59:c4:d7:dc:2d:c9:1a:b7:77:f1:2d:d0:60:bb:2a:
4a:60:50:f0:ac:8a:95:ab:e3:f0:3d:68:e1:eb:b7:23:88:46:
29:49:c1:05:99:0d:b5:c4:06:3b:02:ae:81:64:98:df:d9:b0:
ba:da:9e:e7:4b:d2:5e:1a:73:1b:75:24:36:77:a5:fc:97:97:
86:b0:16:a1:36:5a:2c:fa:94:2a:4c:70:2f:6b:ef:1c:4d:3f:
65:2a:6b:44:2b:2b:dd:a0:da:44:57:d5:f2:0f:91:e8:ca:c7:
a0:32:fd:7c:da:de:d5:33:c7:97:62:59:73:07:8a:19:a5:29:
b0:ac:69:c6:f3:07:d8:55:ae:75:0b:2a:1c:1e:5e:c1:9f:ee:
e8:17:04:ed:94:5c:57:60:9f:21:24:06:ba:9a:1e:0a:d5:c3:
c8:85:54:27:89:5a:89:a1:aa:a4:dd:3f:8b:8b:f7:5f:26:ee:
72:3f:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:30:16 2025 by rpki-client