Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
File: mnF-0dxIgETl4qsAdUM1WM_ejIU.cer (raw, json)
Hash identifier: cu9FLhSlP8hQ+KYz0rrUOaf4ouf2T8nZKJhPl/OrG54=
Subject key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019838098FE782F03F12DDE664355CFF29F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Jul 2025 16:06:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15425
AS: 30764
IP: 5.53.8.0/21
IP: 31.28.128.0/19
IP: 46.47.128.0/18
IP: 62.129.32.0/19
IP: 78.157.128.0/19
IP: 82.209.0.0/18
IP: 84.16.96.0/19
IP: 84.21.96.0/19
IP: 85.135.0.0/17
IP: 86.61.128.0/17
IP: 89.29.0.0/17
IP: 91.106.240.0/20
IP: 93.181.64.0/18
IP: 94.242.64.0/18
IP: 128.0.176.0/20
IP: 164.215.112.0/20
IP: 176.227.248.0/21
IP: 185.5.68.0/22
IP: 188.134.128.0/17
IP: 193.165.0.0/16
IP: 212.109.176.0/20
IP: 213.216.32.0/19
IP: 2a00:ca8::/32
IP: 2a02:c38::/32
IP: 2a03:6e80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:09:8f:e7:82:f0:3f:12:dd:e6:64:35:5c:ff:29:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 23 16:06:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:53:93:18:b7:14:5a:73:21:a6:1f:39:68:
0f:c4:52:50:45:d0:70:25:1c:53:b1:f4:55:65:c8:
97:d4:7b:be:22:58:44:9d:66:4e:75:57:3f:93:7e:
f9:ec:02:16:48:11:2e:a4:01:7e:e1:f0:ff:ba:b4:
34:96:e4:1a:eb:25:8e:86:f9:96:ca:8f:36:5d:de:
59:17:35:c4:91:a7:f1:80:84:f8:ed:23:ea:20:21:
31:04:5e:89:c3:86:f0:6e:82:ca:bb:f4:2d:9b:18:
4e:7e:3b:5a:e4:96:5b:53:e3:2e:cf:cc:3d:18:36:
32:1a:02:57:71:80:92:17:6d:b0:a7:72:42:2e:6e:
91:be:f5:93:52:5a:fb:0f:4d:96:25:4b:66:03:e9:
da:5a:98:c6:61:cc:7d:30:d7:a7:14:22:f9:ba:75:
a0:63:bc:61:0e:26:c1:ff:0b:8b:78:d2:bd:2d:79:
92:ca:53:37:1c:2a:ad:8b:61:48:e8:63:c7:42:5f:
6d:94:dc:d8:fd:69:ef:89:4e:c0:96:58:14:a6:ac:
42:97:9f:b1:c5:34:53:fe:d5:67:2e:a3:bc:11:c0:
3b:63:a2:33:40:00:5b:e4:51:23:27:98:79:f3:76:
d4:01:e4:ee:5c:4e:c6:1e:cf:59:3e:1c:e0:fa:21:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.8.0/21
31.28.128.0/19
46.47.128.0/18
62.129.32.0/19
78.157.128.0/19
82.209.0.0/18
84.16.96.0/19
84.21.96.0/19
85.135.0.0/17
86.61.128.0/17
89.29.0.0/17
91.106.240.0/20
93.181.64.0/18
94.242.64.0/18
128.0.176.0/20
164.215.112.0/20
176.227.248.0/21
185.5.68.0/22
188.134.128.0/17
193.165.0.0/16
212.109.176.0/20
213.216.32.0/19
IPv6:
2a00:ca8::/32
2a02:c38::/32
2a03:6e80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15425
30764
Signature Algorithm: sha256WithRSAEncryption
45:be:3e:bb:8c:a1:c1:59:fd:e7:b0:f7:d4:60:de:83:76:63:
e7:75:ff:21:31:fe:6c:e0:40:56:98:99:23:50:d9:da:5c:4e:
69:16:bc:54:65:f0:2b:0d:01:62:c8:03:d1:3e:39:93:08:8c:
90:11:e7:fe:37:fb:e1:8a:f9:f7:a7:60:71:01:6c:1d:9e:91:
5b:63:df:ea:76:48:4b:8a:b8:5a:8f:22:32:65:55:2f:1b:d7:
67:43:91:ab:5b:b2:6f:fb:85:6d:b8:c2:8c:b6:f1:28:74:ed:
31:bb:30:ca:ff:f6:6e:71:f7:b8:d7:97:cd:2b:0f:2c:90:1d:
a0:e4:bf:23:a3:13:2a:23:c0:b4:3f:2a:32:65:91:cf:c5:c3:
6f:73:95:2c:73:f1:99:6f:27:7a:48:f1:5c:1e:20:84:a1:5a:
a4:46:54:71:d5:43:3b:b6:77:fb:2a:8d:94:12:b9:2f:64:7b:
79:be:66:48:1e:92:ab:13:d2:23:4f:0f:51:91:74:cb:a2:47:
20:34:fa:da:7b:ef:65:17:d7:bd:0f:9a:24:d6:38:f8:6b:d2:
14:6e:ee:a8:d8:96:06:98:15:2e:a4:ed:b5:14:ad:e2:83:1b:
4e:0c:3f:c6:9e:cb:1b:0e:86:aa:99:4d:d8:c6:d3:e6:bb:c3:
2c:c4:97:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:00 2025 by rpki-client