Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
File: C5DjdpRNMClN6kHyH7fx4co2ipM.cer (raw, json)
Hash identifier: bMwhccQK8zEo/tIQ7YL3G0iDWwSH70VabQZRWAk3tnQ=
Subject key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019764460571686AFB1E8DD422F4FA5888D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Jun 2025 13:13:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210736
IP: 93.123.45.0/24
IP: 2a14:e580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:46:05:71:68:6a:fb:1e:8d:d4:22:f4:fa:58:88:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 12 13:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:66:e3:ab:3d:40:88:bc:8f:8d:5c:b8:55:
ea:d8:17:f6:43:d6:74:7f:e2:89:d4:de:42:1a:b7:
bd:a4:bc:18:cf:7b:9d:e7:05:de:03:f9:dd:32:49:
35:2b:ba:4f:f1:32:78:66:a4:32:2c:bc:03:2c:1f:
1e:ba:ad:21:cf:e3:92:6d:98:03:20:c3:37:01:1b:
97:46:94:b8:ff:d7:9e:1c:5f:22:e3:3b:09:4c:49:
f9:7d:f2:f7:9e:78:d7:9e:4b:f3:43:d6:f9:d5:63:
f6:5a:00:b4:2a:a7:5b:13:56:65:29:96:2e:09:f8:
84:8b:e0:40:7f:f6:94:fe:ec:c6:7f:2a:b9:1a:ce:
09:eb:e6:71:47:1b:13:54:80:8f:e1:0e:f2:00:52:
70:03:4b:64:6d:1f:94:bf:b0:55:51:fb:83:88:34:
cf:e1:7c:fd:f6:75:ff:14:61:7b:05:0f:12:85:6f:
b3:13:1f:8f:9e:23:83:7c:2e:33:ee:dc:07:8c:14:
72:8c:19:60:40:a9:d2:34:e8:8d:b9:cb:b1:76:b0:
bb:e0:6f:2e:e5:54:67:3e:4d:a7:65:59:39:84:24:
af:fd:ac:49:56:5f:30:50:d8:38:77:10:e9:26:df:
3c:74:c7:50:46:c0:e3:bf:3a:13:b3:0b:29:be:88:
81:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.45.0/24
IPv6:
2a14:e580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210736
Signature Algorithm: sha256WithRSAEncryption
33:fe:f5:8f:25:8f:2a:81:0e:53:79:a2:93:b3:8a:76:77:a9:
cd:1c:12:d6:a0:82:e3:d0:af:0e:91:84:74:c5:10:0d:49:bf:
57:c5:18:20:6a:57:12:8b:44:c8:24:af:14:04:91:69:6a:0f:
83:ba:46:14:0c:bf:00:89:60:e0:ed:63:ed:31:b0:e5:b2:07:
f6:f8:41:1b:ae:ba:0a:00:97:12:a5:c0:43:4d:24:63:f6:7d:
c1:a1:b6:de:77:02:a8:e8:a3:37:f9:dc:55:6a:8e:12:88:75:
15:65:dd:ae:11:16:fc:4e:88:41:bc:6e:2e:e8:29:75:9a:ec:
bb:1d:4d:de:9e:c2:06:3a:0a:86:2b:d2:df:ed:95:6a:80:c2:
81:5d:f4:27:87:71:79:fe:da:d2:c9:b4:00:8c:94:8a:69:89:
09:46:15:a3:85:54:17:1b:03:27:16:c1:ab:7e:4f:3e:36:95:
78:46:f5:0b:9e:05:2f:89:a3:4c:65:01:55:dd:c9:35:91:37:
bd:d3:3e:11:57:82:ff:d8:ee:01:75:86:1d:ee:96:52:d5:81:
d3:f0:89:8b:9e:d2:b9:b7:99:e1:fb:1d:1d:ea:7b:55:cd:fb:
70:e6:ee:d6:4b:a8:e8:08:24:f9:e3:00:c6:98:4f:91:2c:98:
d9:26:6c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 16:33:45 2025 by rpki-client