Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
File: xLMV8myhzbhEERaAw88EN7TBJ-Y.cer (raw, json)
Hash identifier: G8sc+gG69C6cQTMzTUkPBS3ojInF5bfC3f5HiHiRj+E=
Subject key identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01990ED961C07B3FDD8D0B578408B97F55AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Sep 2025 09:12:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208431
AS: 213342
IP: 45.136.220.0/22
IP: 194.116.239.0/24
IP: 2a0e:9b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:d9:61:c0:7b:3f:dd:8d:0b:57:84:08:b9:7f:55:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 09:12:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:32:f1:17:17:bd:90:c5:bb:e5:50:b2:70:
4d:34:bf:2d:ac:b1:da:3d:e6:03:dd:f0:de:e6:66:
40:b2:56:7e:0d:d4:be:64:d6:1e:c6:a3:1c:1a:c2:
0d:fd:37:91:e7:8d:e1:ac:ad:32:1e:f0:f2:1c:e9:
d7:5f:90:b7:72:b5:4e:c6:0e:e4:d4:c5:44:92:6d:
6d:8a:2d:a7:b1:c7:5c:a4:5f:af:7f:fc:9a:15:30:
90:bb:34:4a:83:3a:72:69:eb:34:a3:3c:f1:7d:6e:
3d:eb:bb:91:49:0b:0d:49:33:28:ff:6a:14:88:c7:
ba:7f:a5:6e:57:8f:3c:12:6b:c2:c3:7d:9d:78:e1:
3c:8e:7a:5c:c0:10:ad:e4:a8:45:ab:71:6b:95:21:
c5:91:23:c3:57:a1:dd:f1:94:98:52:2e:7a:5a:84:
96:f2:ac:af:05:e1:0c:6d:01:2c:57:85:ad:54:c2:
41:cc:48:11:77:73:cd:bf:99:e6:78:0a:b5:47:79:
7f:ea:83:56:df:fc:13:44:2c:93:7a:f3:94:b6:5e:
74:44:d1:4d:fb:1f:91:0b:6d:11:9a:17:c8:fe:18:
e1:79:1c:4d:87:bf:ca:67:fb:fb:73:8c:fd:e6:ff:
03:e0:ee:54:15:e0:2b:8d:a4:da:9f:68:20:af:e5:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.220.0/22
194.116.239.0/24
IPv6:
2a0e:9b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208431
213342
Signature Algorithm: sha256WithRSAEncryption
30:2d:c1:35:00:f6:62:b1:ec:b2:ea:c1:9c:b4:ca:56:e5:4e:
8e:c9:9b:b7:64:02:3c:5d:d2:c6:c0:21:17:3c:90:96:fd:a4:
c4:51:60:92:6e:38:56:c3:c9:8e:a2:06:df:56:27:ef:24:82:
26:02:11:aa:62:47:c2:03:ed:0d:86:f4:bb:0f:5d:e9:e7:10:
09:7c:fe:f2:00:58:b4:00:46:2b:9b:5a:ac:5c:4f:a4:6d:8d:
2f:a9:68:dc:52:31:3b:07:30:63:74:13:96:ff:92:d1:56:7f:
5c:73:f4:cc:8f:04:32:0b:2a:07:5f:80:41:77:1c:59:73:44:
6a:e7:f7:90:da:7d:bf:88:70:47:2b:a5:bb:a4:04:97:12:4a:
af:53:e3:7d:8b:71:b7:f8:9a:24:cf:ad:df:5d:a0:eb:00:a5:
a7:39:e5:88:8e:5a:a3:51:cd:40:73:2b:d9:b9:00:26:e5:77:
b0:f0:62:00:29:e4:78:fd:04:4b:26:f7:17:45:72:c5:89:ae:
91:41:51:ef:7f:b0:94:5c:11:8a:07:2d:ff:66:91:e7:b6:dc:
48:12:13:9b:ff:29:83:6f:bb:58:9b:99:8d:ac:d1:2f:97:25:
4b:60:5f:d0:70:85:56:05:a7:eb:48:72:6c:73:4d:6b:9c:b3:
af:ff:52:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:40:00 2025 by rpki-client