Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
File: mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer (raw, json)
Hash identifier: d+qIYSF8nLOeDnGJisRQT/iVom9Ty4hn8ymFr3206XA=
Subject key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198CCAA1A349DF1EC7C288A3FAB91B22CE4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 21 Aug 2025 12:45:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34718
AS: 39032
AS: 47452
IP: 62.209.128.0/19
IP: 80.80.208.0/20
IP: 87.237.232.0/21
IP: 89.236.192.0/18
IP: 94.141.64.0/19
IP: 185.6.40.0/22
IP: 185.248.44.0/22
IP: 194.55.92.0/22
IP: 217.30.160.0/20
IP: 2a02:f10::/29
IP: 2a03:540::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:aa:1a:34:9d:f1:ec:7c:28:8a:3f:ab:91:b2:2c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 21 12:45:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:b1:13:e7:aa:ae:87:01:03:f4:70:4d:fe:
8b:7a:82:2d:8b:dd:81:cb:c0:ac:ca:98:60:93:36:
22:21:0e:99:f3:54:50:5a:ca:8a:8d:d3:cb:a9:c4:
08:26:2a:23:3b:4f:9f:d1:b3:5a:0e:e9:65:c7:53:
45:af:cf:b1:d6:a7:c0:e5:b4:d0:8b:0c:19:70:bc:
e7:cb:4c:cb:4e:b1:2e:33:b4:a4:df:37:c9:86:2d:
67:77:d5:24:bb:11:bf:18:12:cc:3e:98:b0:58:99:
8b:15:8c:6d:4e:97:89:43:88:77:73:24:f9:b8:6a:
a6:8a:2a:05:49:1c:3b:de:ba:f0:7b:ed:3e:9f:48:
e0:09:18:ed:20:df:23:1e:33:c0:c5:e9:fe:e5:b1:
3f:b0:ce:8f:14:17:6d:fc:e7:a6:5f:18:db:7c:2d:
86:e4:6f:ca:8e:83:c5:e2:41:b4:81:b2:0d:dc:4d:
6e:e7:a0:57:d9:5b:e6:96:cc:72:3c:9c:4a:52:6d:
76:8e:af:83:42:14:11:da:40:80:ba:6d:50:d4:c9:
a0:e7:dc:95:a3:64:c8:6f:41:a3:14:4f:6e:4e:f6:
57:a7:22:f3:e9:08:e8:07:fc:e9:07:49:92:00:b3:
bf:49:93:43:50:fe:6c:47:ff:90:ab:5e:a9:a4:b9:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.209.128.0/19
80.80.208.0/20
87.237.232.0/21
89.236.192.0/18
94.141.64.0/19
185.6.40.0/22
185.248.44.0/22
194.55.92.0/22
217.30.160.0/20
IPv6:
2a02:f10::/29
2a03:540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34718
39032
47452
Signature Algorithm: sha256WithRSAEncryption
28:fc:9e:5d:71:71:de:9d:1b:d3:71:b8:72:21:15:ae:fc:eb:
73:5e:77:21:8a:4a:72:5f:4a:6c:e6:50:6e:8e:17:63:74:a6:
8d:02:5a:6b:b1:e3:04:7d:e1:9a:0f:01:f0:5e:9f:f3:a1:fe:
de:04:66:19:6c:95:00:e0:8c:2f:d2:db:3b:a5:38:ae:00:10:
9d:ee:f8:41:33:6e:ec:af:7b:1e:da:08:6c:98:81:71:af:c5:
7b:b2:da:79:cd:7c:62:05:83:50:cb:21:82:a4:3a:92:30:02:
69:37:2f:65:b8:1a:f1:b4:b6:10:0e:3d:ab:14:f7:4e:8a:73:
45:db:12:95:4d:d3:7d:a9:a8:d5:a2:e0:e3:6f:9f:ad:bd:f6:
69:d9:43:85:9d:8b:cf:5e:42:5e:5e:55:a7:ab:3b:eb:12:23:
b3:b2:51:6b:e4:3d:78:98:b5:01:e2:26:b7:a7:00:b3:c0:8d:
5b:73:72:7d:42:8a:a6:ee:64:c4:58:2c:15:51:60:79:73:87:
02:8c:96:65:d2:7c:55:73:d2:16:02:97:bf:fc:d8:9a:95:b5:
da:5d:e0:ea:8b:e0:ac:36:7e:02:2e:8c:2c:25:4b:77:40:f5:
4c:69:88:94:82:f3:43:10:85:a3:d6:f7:1d:87:56:75:34:b6:
d7:99:04:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:44:33 2025 by rpki-client