Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer
File: syj-JYobm_YUimzg6KcS8YhAkEw.cer (raw, json)
Hash identifier: B3zIh4qKXtJCPBDNkkNefaqwctMPWkxTwoQizhkOtKU=
Subject key identifier: B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019782F22DE9B0F32EC10DC3B8DB1E2C78B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Jun 2025 12:09:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 83.172.128.0 -- 83.172.133.255
IP: 83.172.160.0/23
IP: 83.172.180.0/22
IP: 83.172.188.0/23
IP: 2a02:cec0::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:f2:2d:e9:b0:f3:2e:c1:0d:c3:b8:db:1e:2c:78:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 12:09:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:c1:de:5c:3a:2b:32:40:20:d9:b6:22:2b:
29:61:9f:c8:03:f0:50:69:95:42:07:de:a5:32:17:
7d:eb:d7:a0:ab:8a:24:de:27:36:07:3f:ab:dd:e3:
d0:ab:2d:d2:98:39:d8:be:ca:69:6e:ef:73:27:b9:
cb:32:c3:09:a9:de:2e:82:a3:5f:b3:58:bc:6f:dd:
0f:8f:50:de:c4:ce:ad:69:34:e9:31:51:01:2e:ec:
01:4f:7a:76:f9:f6:f6:1a:fc:0d:00:e5:c9:bd:0a:
12:8f:06:9c:60:eb:cc:9d:56:50:9c:5a:31:64:e5:
9d:96:c9:bd:f9:91:4a:58:31:29:73:75:e1:e1:76:
a2:30:d2:c9:5c:be:9e:c5:26:7f:28:9c:b4:7b:6b:
dc:03:6f:e2:04:0b:a0:44:73:9f:87:cc:8c:30:57:
e4:bd:50:69:3e:a6:4f:9a:46:94:e9:75:ac:35:fd:
ab:16:da:b6:c8:f0:c5:4e:46:24:ea:16:ae:68:76:
42:02:e3:28:8c:51:5a:e3:da:fe:ba:3b:f4:b9:d2:
cd:95:fb:16:cd:74:bf:03:4c:a0:84:3e:75:11:26:
bc:2e:49:3d:6f:10:60:ec:3e:80:4a:b7:97:ad:02:
8d:71:03:69:21:fc:19:f5:da:2c:b3:60:59:01:da:
fb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.172.128.0-83.172.133.255
83.172.160.0/23
83.172.180.0/22
83.172.188.0/23
IPv6:
2a02:cec0::/30
Signature Algorithm: sha256WithRSAEncryption
8e:7e:ba:5f:32:a2:83:3a:82:3e:8b:37:4f:58:55:f3:03:f0:
b3:21:35:d6:49:9b:91:2c:22:9a:af:58:ba:67:06:86:69:d0:
ff:1e:ab:44:43:a4:25:1d:51:3c:fc:97:1f:58:b6:a5:f0:99:
ee:4b:d2:e8:e6:53:b5:af:be:ed:3d:06:96:c5:70:ab:37:ca:
2d:93:10:90:44:42:4c:18:57:72:c0:ec:a7:22:9e:24:d7:31:
24:6b:4c:fa:57:2d:4f:cb:d2:f0:16:85:4d:4e:7f:f2:ea:37:
29:e7:36:6b:53:fe:04:5b:c4:71:a9:fa:4a:a3:57:eb:23:2c:
1a:2b:26:3e:32:dc:ff:b5:87:89:ea:6b:53:31:02:8f:d8:11:
e6:ef:8c:c3:00:b3:70:cc:df:0e:17:c7:3d:e0:9c:db:b9:e7:
02:b2:df:ec:0e:4e:b1:bd:92:70:8c:d4:3b:43:a9:ea:77:89:
dd:ee:f4:a8:4d:51:b0:92:9c:79:a5:6f:87:43:0d:58:ba:14:
18:b4:70:f4:9e:29:84:f8:83:ed:35:30:8e:3c:1c:a9:76:69:
c9:12:c3:66:76:b6:1b:09:86:90:c0:82:2f:a3:c4:91:89:5e:
33:d6:cf:9f:4f:68:b6:dc:86:91:25:11:13:2e:b3:07:a9:7d:
59:a3:ed:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 17:40:06 2025 by rpki-client