Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
File: LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer (raw, json)
Hash identifier: hDdlrnC8VuTRwWTWx8kbatPAYMA3CqRURw67Yf0oGY8=
Subject key identifier: 2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198D17535763D667E011C54239FBD15D4E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 22 Aug 2025 11:06:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47405
AS: 56589
IP: 91.206.34.0/23
IP: 195.43.145.0/24
IP: 2001:67c:7e8::/48
IP: 2001:67c:7ec::/48
IP: 2001:67c:7f0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:75:35:76:3d:66:7e:01:1c:54:23:9f:bd:15:d4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 22 11:06:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:8d:73:8f:e7:bc:20:a5:9c:ac:37:d0:d8:
82:44:ed:aa:f0:2d:16:13:0e:2d:93:5e:17:ff:ef:
89:96:85:8a:af:d7:61:ee:61:4b:e7:42:ca:b0:28:
b9:06:66:cd:ce:20:83:62:52:32:2f:2a:7b:b3:2b:
f8:75:5e:37:8b:8b:eb:d1:4f:1b:20:03:b1:6f:2d:
d8:00:0f:d1:59:46:1a:4b:d2:29:0a:2a:f6:4d:ce:
42:3c:ec:0a:ee:ea:23:da:67:3e:cc:e2:ac:58:5e:
ab:00:21:ec:4e:58:3d:c8:c3:ee:ec:cf:17:bc:6d:
25:fa:cc:d4:10:c6:22:e8:48:28:a2:58:fc:0f:56:
57:f0:51:d0:cb:c6:e0:b3:dd:12:1a:97:1f:9d:d3:
59:8a:db:02:7b:0a:cb:b7:41:10:bc:56:3b:d1:c2:
a9:78:54:0f:81:24:56:68:0b:51:6a:dd:5e:35:de:
a9:0a:13:4b:bb:9b:bf:dc:67:fe:3d:34:78:d8:f0:
d6:ae:07:80:e1:6f:58:dc:ff:67:d9:36:98:f4:e5:
d8:4a:88:a9:b7:52:a7:5d:09:d7:4a:23:9b:eb:9a:
47:a6:9d:1b:44:0f:b7:01:53:94:5c:0c:58:34:b3:
53:6f:68:67:96:f1:74:61:d8:ca:8c:e4:99:f7:91:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.34.0/23
195.43.145.0/24
IPv6:
2001:67c:7e8::/48
2001:67c:7ec::/48
2001:67c:7f0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47405
56589
Signature Algorithm: sha256WithRSAEncryption
ad:c4:a1:1b:fd:07:e6:24:40:aa:01:7e:0c:0f:42:b1:8b:ef:
07:45:1f:e5:86:ed:f7:20:d9:b3:05:69:78:95:5d:8b:cb:6d:
eb:6a:2f:e2:24:96:60:33:7c:b8:3e:54:f5:b4:1e:f3:3d:b0:
70:74:1e:f6:27:d5:0b:d6:6e:1d:d2:d7:88:41:ef:20:c5:32:
45:a1:57:d3:c5:24:da:7f:79:c5:71:2d:d9:28:3d:d6:7c:a1:
ca:a0:d9:44:d1:dc:95:2e:4f:cf:e5:6d:98:42:db:bc:e9:56:
d0:cf:ce:cb:3a:ac:1f:f4:be:c0:fe:04:82:a5:86:5e:d4:c9:
43:b2:f3:65:60:42:4b:64:7f:5d:27:76:d5:93:02:7f:d6:00:
dd:b3:89:1c:85:ea:51:92:53:54:70:a8:e4:ae:d7:1d:a8:b4:
c2:ed:c2:e8:df:eb:24:c6:fd:e9:52:88:4e:25:a4:6e:21:2e:
85:a0:61:c7:b8:49:1e:44:1a:88:2d:73:36:3b:e0:f0:e7:f5:
bb:ba:e7:4c:3f:7a:c5:7c:44:1b:8b:ce:e5:1f:38:5f:99:8d:
fb:a6:74:f0:0d:d0:b3:05:0a:7e:40:07:93:a8:71:d9:b2:5b:
83:1f:a1:d8:50:1e:11:d6:f1:9c:6c:7c:e8:10:0f:f9:8c:62:
8a:d1:25:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:10:34 2025 by rpki-client