Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
File: m4Me6Uw3ubEVnH13MpNhgatUHYA.cer (raw, json)
Hash identifier: /7lctNy19/Lgj6v8dl457bes5O+bakckAtCKN+LJ0tg=
Subject key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199529D69E16C3CB1E128E7ABD9F33CC067
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Sep 2025 13:01:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204704
IP: 45.84.64.0/22
IP: 45.154.48.0/22
IP: 185.206.88.0/22
IP: 2a0e:9880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:9d:69:e1:6c:3c:b1:e1:28:e7:ab:d9:f3:3c:c0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 16 13:01:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:b1:c4:03:65:1c:bf:49:c2:9d:dd:c7:3f:
c4:2b:3a:29:80:29:95:8d:d1:33:93:6b:98:ea:ad:
e1:72:a0:89:d5:ed:92:57:e9:75:ff:7b:f6:1f:9e:
f2:6a:18:a2:9d:7b:df:6c:35:fb:f8:30:61:8d:c3:
d9:99:ec:8c:5b:12:31:cb:30:6b:92:b5:6c:cd:a2:
83:2e:94:79:07:30:bd:cb:d1:2b:9e:84:05:78:c2:
75:af:e4:d2:40:4d:18:5b:ce:80:de:c0:38:cc:63:
3f:11:52:cc:48:ed:dc:d1:f6:f8:37:8c:af:1f:8e:
12:e0:9d:ab:94:8e:1f:bb:26:34:8d:af:7e:d2:50:
4d:86:71:af:5c:8f:23:44:4f:ce:38:e7:41:dc:de:
76:13:cd:82:af:24:a8:49:4e:67:d1:49:12:1c:c2:
4b:36:30:20:2e:97:86:4c:16:ef:44:88:a0:a5:73:
11:9b:1b:47:5f:30:61:ef:9b:be:33:2b:c2:e9:b3:
3c:2a:83:24:0e:a8:1f:f7:26:12:5a:8d:d3:38:c7:
1a:44:e1:f7:5d:8c:e2:60:07:e9:be:07:96:37:82:
eb:19:c5:90:a6:5f:9d:f9:63:06:b2:b1:fc:e7:ae:
66:e1:ea:38:43:64:9e:ea:eb:e6:f7:f7:9d:a9:bf:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.64.0/22
45.154.48.0/22
185.206.88.0/22
IPv6:
2a0e:9880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204704
Signature Algorithm: sha256WithRSAEncryption
9d:d7:3b:7d:88:ff:fb:cc:4c:9f:93:4b:d6:74:bf:f7:9d:c5:
d8:2e:eb:9e:02:74:e4:6e:bb:e1:3c:18:49:e4:4f:9c:76:d4:
c5:19:45:c0:35:b1:ed:c6:73:26:d5:cc:7a:2c:ce:6b:e1:00:
b4:d7:7d:ef:1c:dd:7f:7e:ac:65:70:a0:fd:02:f0:04:94:b8:
d0:39:74:ce:af:10:f6:33:34:ef:e0:c3:ca:55:59:04:77:70:
a7:a0:eb:29:a5:23:f1:1c:3b:c1:f9:38:c9:9c:06:a2:05:3b:
2d:83:2f:45:99:ec:dd:c3:a2:6d:5f:16:01:ac:4b:6f:a7:09:
15:65:90:98:5a:8b:ec:51:48:38:25:8d:b8:a8:fc:a5:39:26:
26:f9:fd:d8:28:ef:34:87:8b:1c:d4:01:de:d9:d0:1c:86:6a:
68:bd:24:d2:69:cf:0a:0e:95:cb:c7:ca:2f:cc:37:e6:26:d7:
e3:46:dd:d1:bf:d0:90:62:13:82:c8:d5:85:db:39:e3:3f:82:
9d:61:fe:c8:25:e6:7e:da:c6:35:ad:f2:72:9a:8b:2e:1f:48:
e1:06:ad:65:21:7c:df:35:f0:04:a8:45:20:b9:c5:9c:fa:ff:
cf:88:03:6c:d2:f2:58:30:d3:57:32:2b:50:76:59:1f:80:03:
66:10:f2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:45 2025 by rpki-client