Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09XiCPMtcw1DHUpNTtgJWx59lDE.cer
File: 09XiCPMtcw1DHUpNTtgJWx59lDE.cer (raw, json)
Hash identifier: BTFu3Wl9Xnm7bTU+lYwy6siyHzu4tXeuJJi1/aoneRU=
Subject key identifier: D3:D5:E2:08:F3:2D:73:0D:43:1D:4A:4D:4E:D8:09:5B:1E:7D:94:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01960435D367AE576ACB32F5F738EC9FD06A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 05 Apr 2025 04:29:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213604
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:35:d3:67:ae:57:6a:cb:32:f5:f7:38:ec:9f:d0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 5 04:29:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3d5e208f32d730d431d4a4d4ed8095b1e7d9431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:cf:f9:8a:37:59:60:77:8c:e0:47:1f:03:
f5:f0:db:a0:b1:50:54:49:19:2e:50:0a:da:17:28:
8a:d6:3a:37:55:24:db:a2:13:84:de:6b:e4:fd:1f:
f3:06:f3:fc:c4:4b:16:43:41:53:6f:e4:6d:0d:b3:
9a:ba:59:22:77:02:07:97:4d:68:ae:7e:5e:ee:f9:
6e:c5:a4:93:22:e7:54:ed:72:6e:78:47:d8:70:7b:
fe:af:a2:d5:7a:8b:f2:8e:85:62:2e:4c:ff:18:5a:
99:8f:ef:a0:65:e3:03:88:c4:2b:30:d7:9d:9e:7f:
0f:60:ee:ee:9f:0e:3c:a6:7e:b1:fe:e9:be:a5:07:
29:2d:89:f8:7e:cf:e5:90:42:b9:53:53:32:1c:c8:
b1:6f:7d:f6:7e:68:47:d8:a0:00:b6:28:7b:38:89:
e6:32:4f:15:8d:2b:bf:43:4d:ec:b5:67:26:1e:f1:
a8:57:63:2d:dd:2c:d9:f0:67:b0:76:d5:ac:66:b5:
08:d4:fa:f9:c5:99:f4:55:e4:31:cd:11:bf:52:ec:
e8:8d:2a:3e:f5:6c:45:ac:2b:6e:e8:e4:a5:b2:8c:
62:50:db:a4:f5:0a:77:14:53:73:f4:33:86:e1:7b:
77:c7:20:52:80:04:ab:56:a3:d4:f1:2e:d8:c0:32:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D5:E2:08:F3:2D:73:0D:43:1D:4A:4D:4E:D8:09:5B:1E:7D:94:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213604
Signature Algorithm: sha256WithRSAEncryption
70:d0:86:7f:ea:83:12:85:c0:a6:cd:8f:59:8f:1f:fa:c9:2c:
44:8c:a8:2b:b6:fb:89:f8:61:fe:07:f5:2b:2e:9c:7e:de:36:
bb:b7:f5:1a:4a:55:33:c0:ef:39:68:4b:61:8d:ed:5a:f3:1f:
be:9b:b1:c3:89:79:71:9f:dc:17:51:7b:23:0b:7b:9b:56:37:
5e:53:33:c6:94:1c:05:62:94:97:82:2b:5f:17:50:73:53:f6:
cc:62:8e:ca:5e:8d:e2:01:58:9d:d7:6e:a0:83:d3:54:3f:10:
52:19:75:63:a2:db:7e:f5:38:38:b2:7e:cd:9a:02:3d:b6:18:
39:77:94:2b:23:52:9a:d1:26:3c:3f:f9:8a:e9:8b:93:89:b3:
d5:c9:a4:4b:44:e9:86:af:3f:e8:7d:1a:ea:06:8d:c7:05:55:
5a:4b:71:da:9c:bd:67:48:dd:45:34:f4:77:dc:d0:ac:1b:f4:
fa:cc:d4:7c:43:41:e8:f7:2c:b1:cc:5b:4c:78:36:d1:23:91:
19:d9:82:ed:43:36:84:85:0e:98:d8:3d:39:8f:e4:20:3e:da:
3a:8e:e7:ab:cd:ea:4e:9e:05:3d:5b:80:91:6b:f5:77:4d:b6:
a7:24:c8:03:6f:73:66:67:53:96:a5:15:76:b9:bb:b8:e4:bd:
66:e0:c1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:43:56 2025 by rpki-client