Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer (raw, json)
Hash identifier: Jsdpq0hx/WlkBsw3/MaYHJNkYXmKVmcVs4IGVqzDzuY=
Subject key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196824182E80EF271D0BD30702E8D803D14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 29 Apr 2025 15:54:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211902
IP: 45.91.172.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 13:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:41:82:e8:0e:f2:71:d0:bd:30:70:2e:8d:80:3d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 29 15:54:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:0d:58:35:cb:4d:1b:b7:19:80:84:19:d2:
31:d3:5d:bd:43:92:db:3b:da:d9:03:6f:93:d2:cc:
ca:05:99:61:15:c4:cc:00:0c:78:12:0e:a9:cd:27:
4d:67:7b:33:a5:2b:d7:fb:b3:37:a7:f7:c4:aa:31:
9e:9c:6e:8b:4d:38:63:00:b0:94:e2:dc:b2:ac:ff:
1f:26:db:4e:4e:80:41:0b:d8:8e:a4:86:2c:30:59:
e6:c2:3e:63:2a:4f:50:5b:a9:e4:b9:0e:93:81:c4:
bb:b4:1c:65:d9:5f:ea:31:93:ea:cd:39:3f:2e:b6:
8f:2b:ff:cd:db:ea:d3:29:c2:ca:94:9b:5a:18:29:
f4:b3:a0:04:7e:1b:3d:89:d4:6f:1c:a3:fa:ad:90:
0a:14:73:32:13:c2:e8:4c:70:77:c7:e7:84:f1:f7:
b4:0b:b8:63:fc:5d:b4:1e:db:0b:5b:09:37:70:58:
41:75:a3:69:36:69:4a:7a:35:53:36:19:7c:62:77:
1b:1c:22:a2:af:27:37:9d:02:99:c7:44:1c:b9:62:
ea:82:de:48:0e:29:9c:a3:ef:f5:fc:6e:a7:fe:1a:
d7:13:d9:40:d5:e8:47:56:3b:87:34:2c:9e:79:0c:
bb:c7:d2:5f:4d:10:7d:d4:48:fe:82:f7:cb:a3:4f:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.172.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211902
Signature Algorithm: sha256WithRSAEncryption
57:2c:86:12:bc:ad:b8:c5:4f:50:a4:1a:2b:f5:33:ae:2d:4a:
f2:f9:58:eb:c9:70:89:c2:86:c7:87:82:6b:87:63:bb:35:6f:
02:17:44:99:da:a0:da:20:bb:3c:0f:21:73:4b:6f:04:b0:ca:
15:b6:5b:61:9f:b8:bf:c9:59:ac:27:5c:07:72:c4:f2:55:98:
b4:ee:6d:a3:b4:99:20:65:fa:e9:33:2d:46:cd:cf:2a:5a:11:
c0:f6:7f:ec:0c:a0:e6:cc:1f:49:a5:46:d4:e3:5b:77:e1:35:
50:10:30:47:5f:b9:f6:93:fb:e8:d8:96:19:7d:33:f1:4f:18:
cb:08:7f:38:8f:86:83:fc:76:d5:50:11:94:51:69:5d:a7:f4:
cf:4a:ec:1e:98:96:a1:17:45:a6:3d:59:6c:d8:8b:40:78:3d:
8c:7a:87:59:5e:ae:31:23:9e:9a:43:2c:fa:76:34:5d:65:82:
94:20:62:ed:ba:49:ad:2f:15:a3:f8:d4:e0:a9:4e:a8:6b:6b:
87:49:47:73:cd:7c:a9:92:d8:a3:8d:8b:8c:96:10:e0:85:10:
94:61:df:4d:de:5d:18:03:96:e2:76:ff:73:a1:ef:c0:96:5a:
97:fb:44:a8:90:65:7e:e5:4a:91:87:ef:2a:5f:90:ed:1a:52:
33:c4:b9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:12:50 2025 by rpki-client