Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer
File: fIJLILMxe7jIm-pPDzTQlC0dcU4.cer (raw, json)
Hash identifier: 0b7ZRATC7D5FQDC/g9I7+Rxm82OnuAeXcWjl7+DUMB0=
Subject key identifier: 7C:82:4B:20:B3:31:7B:B8:C8:9B:EA:4F:0F:34:D0:94:2D:1D:71:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196ED5D3FFFCC52D9A9506ADDC6A83C936C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 11:03:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43963
IP: 91.198.226.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:5d:3f:ff:cc:52:d9:a9:50:6a:dd:c6:a8:3c:93:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 11:03:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c824b20b3317bb8c89bea4f0f34d0942d1d714e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:6b:46:57:d2:78:60:36:45:10:83:01:74:
22:ec:5f:4c:f9:83:c2:90:f1:6a:62:2d:0e:8e:9f:
7e:15:72:6b:81:a5:37:66:0d:2e:54:4f:89:67:c1:
71:b4:e2:f4:01:29:87:43:aa:b9:64:56:bc:f7:45:
0d:fd:94:23:d1:bf:74:d2:df:0b:a7:38:9d:eb:38:
de:46:b2:9b:74:cc:23:58:f1:d5:6d:00:15:f2:20:
1d:86:f8:47:fe:e4:2c:4a:d9:5a:ac:a5:09:d2:1d:
ec:93:fc:03:b5:71:9d:2e:85:f2:fe:02:89:67:a6:
ad:5d:57:14:90:23:01:c7:09:78:d9:b3:20:95:c0:
5c:d8:f9:38:0c:6e:0d:68:4b:b2:85:37:8f:05:5d:
76:30:d3:f5:ee:3f:d2:e8:9e:04:4d:b6:4a:88:ab:
6f:3b:26:4b:3e:e8:6b:7a:65:d0:25:a7:ba:ce:e7:
38:a1:21:b4:d3:5d:92:b7:61:af:fb:1b:b7:5d:4f:
06:ad:d2:59:c6:b9:f3:4c:eb:4f:dc:34:27:fb:09:
28:db:41:cd:d7:be:77:74:0f:17:f2:a7:0b:f2:3c:
e6:46:dc:74:65:1a:4a:48:5a:7b:cf:17:13:ca:7d:
2e:54:3b:f6:47:13:6e:9a:10:47:cd:ed:06:8d:11:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:4B:20:B3:31:7B:B8:C8:9B:EA:4F:0F:34:D0:94:2D:1D:71:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.226.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43963
Signature Algorithm: sha256WithRSAEncryption
27:b8:9e:89:b7:74:27:17:d5:be:a7:e4:44:0e:e3:ca:3d:de:
d6:7f:2a:d1:b0:9c:f0:4b:f4:20:bc:e8:45:11:d0:2d:5d:df:
74:48:bb:0a:8c:e3:88:9e:b0:e3:89:74:e5:b3:3b:51:bd:be:
71:b5:5b:d8:89:e0:9a:1a:82:58:ff:07:88:27:61:4c:98:b8:
7d:a7:24:42:88:a6:74:06:24:7e:39:e9:bd:3e:5b:ba:4a:3a:
79:59:f3:03:c6:f6:a9:b1:78:80:73:bd:ed:3b:bd:e1:22:7f:
67:5b:75:c9:7a:77:5d:08:1c:ca:38:3b:ae:2b:0e:2c:69:58:
df:83:23:d4:b2:3b:4e:b0:50:af:02:44:b9:50:20:cd:93:c6:
71:4a:47:f3:cf:30:5d:a0:98:77:45:92:da:16:f7:47:8f:83:
27:2d:50:a7:a1:99:b8:62:27:3a:6c:72:e1:ed:80:b8:e9:a5:
8e:3e:ff:b4:bc:a6:5a:7c:b9:b4:f6:cc:26:66:24:09:ed:09:
e6:6c:ed:39:f0:5f:14:e1:6c:d1:77:a4:f5:96:e7:e6:18:40:
4b:95:53:60:19:81:96:63:e3:ab:73:e7:ba:26:71:7e:bc:bb:
bd:12:c6:b5:81:b9:d3:1e:0d:4a:27:63:bd:fd:50:ba:83:2c:
e9:1b:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:56:39 2025 by rpki-client