Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer
File: jDJOtM17M3hJro0yb8iZAvUDpMY.cer (raw, json)
Hash identifier: lP5oHksfy3PUpzM82AbCtZ2oYXnJWtv9Q1/a9Ld3cLI=
Subject key identifier: 8C:32:4E:B4:CD:7B:33:78:49:AE:8D:32:6F:C8:99:02:F5:03:A4:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196ED82D98A7555B873E16C760E44D43FD5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 11:44:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.90.72.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:82:d9:8a:75:55:b8:73:e1:6c:76:0e:44:d4:3f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 11:44:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c324eb4cd7b337849ae8d326fc89902f503a4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:43:26:9e:e7:6f:8e:76:d4:f3:f1:2a:d2:
55:59:fd:80:da:ea:63:1d:cb:5f:a3:dc:01:e0:e2:
40:6a:f3:ba:5a:46:25:57:98:58:13:07:de:d1:ef:
7e:24:7d:21:c7:23:b8:ac:17:e1:f5:c9:e6:87:d5:
97:70:95:71:76:6e:c2:8a:23:f0:bc:3d:fe:69:8a:
d5:07:4d:3a:46:f4:90:de:56:b7:bb:e5:42:79:00:
c2:79:6c:37:69:63:c3:cb:d4:b4:ea:72:f1:4a:f1:
49:fc:aa:55:8c:bf:c6:c3:f3:8b:a3:f9:26:28:86:
fe:84:5e:7b:c8:c1:54:2f:b0:11:27:c1:e6:b6:47:
37:77:c9:3c:3c:43:ff:ed:36:09:6c:2f:f3:dc:8d:
87:e9:75:89:72:f6:e4:bd:ac:44:cf:cd:18:96:d9:
89:c0:cc:12:2d:d0:23:ff:2e:4d:ac:03:a7:38:ff:
43:a8:52:06:c4:3e:9d:29:5d:31:b6:cc:56:91:1b:
5a:ef:57:1a:df:0a:f8:3f:f8:23:27:2d:59:bb:53:
dd:a6:f5:a1:de:47:71:e2:e9:b1:2b:f3:c7:6f:68:
a1:cb:a8:dd:bd:a8:47:ca:f6:a4:12:d4:54:88:90:
4b:46:30:1c:40:ac:0f:05:f7:d6:bf:1d:37:9b:ce:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:32:4E:B4:CD:7B:33:78:49:AE:8D:32:6F:C8:99:02:F5:03:A4:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.72.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:e7:a6:c3:ca:e8:a4:a9:9a:02:a1:16:58:ea:ca:5e:52:b7:
a8:2f:fd:d8:0d:7a:0e:4a:9e:10:be:58:13:0e:4a:f1:76:c3:
72:df:9a:60:45:1d:35:73:8d:66:03:af:17:d7:fa:93:b4:ca:
98:a1:b2:0a:96:16:4b:84:f8:32:90:cd:f7:53:f7:05:21:12:
68:0b:fe:69:e4:19:bd:69:8f:f7:d5:17:4d:c3:f8:67:75:2f:
df:b7:03:ca:8e:b6:bf:ce:af:f0:93:13:72:79:21:d8:d2:7f:
e9:3b:98:de:f3:02:2a:9b:f4:e5:36:bc:6e:06:1c:17:0b:24:
bd:15:13:0f:5c:58:2c:e7:c7:a8:a8:cb:de:1d:78:b2:4b:2c:
f6:c5:e1:5e:ac:69:b3:30:97:b1:fa:a8:28:83:4a:d0:49:b6:
d8:ba:9b:cc:15:57:fc:96:a5:31:77:93:ad:b8:b2:74:ef:24:
75:16:0f:29:3b:94:cb:9d:84:d8:23:6a:06:28:ee:7a:c6:76:
27:a8:8d:d2:37:d8:14:e8:15:be:75:c2:fe:06:a3:cc:d1:c1:
d8:4d:ed:d2:62:1c:85:98:29:0f:c2:ce:57:f4:9b:20:d1:52:
04:b1:99:be:1d:b4:b2:3f:e2:7a:72:4c:66:6f:d9:17:b1:d9:
0f:7e:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:47:14 2025 by rpki-client