Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0nHk7YQlOD9sgcIaSJSkN2NnXvw.cer
File: 0nHk7YQlOD9sgcIaSJSkN2NnXvw.cer (raw, json)
Hash identifier: ZYRQvh2NUPANjBzkknlRoLqzYGj97To1uGHnwN7V9vw=
Subject key identifier: D2:71:E4:ED:84:25:38:3F:6C:81:C2:1A:48:94:A4:37:63:67:5E:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01964CF0B0408D093B65661E2014D9DA91ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/8e16cc-821f-4bd5-9fed-ab810d534bdd/1/0nHk7YQlOD9sgcIaSJSkN2NnXvw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/8e16cc-821f-4bd5-9fed-ab810d534bdd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 19 Apr 2025 07:26:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213625
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:f0:b0:40:8d:09:3b:65:66:1e:20:14:d9:da:91:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 19 07:26:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d271e4ed8425383f6c81c21a4894a43763675efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:95:fb:97:c7:ee:85:2f:f0:7a:2d:ec:44:
e6:d6:93:22:0e:00:44:47:1a:f7:d6:bf:cf:f8:30:
3d:33:a1:fb:5f:f6:24:be:f7:c1:97:fc:a1:a9:c8:
02:d3:0c:8e:d2:5a:ab:c2:f1:a1:bb:22:88:06:b8:
47:7f:b6:71:19:a5:9e:e3:e7:9c:24:da:0e:b7:35:
4c:85:10:37:14:bd:38:55:28:14:e3:af:bb:8c:84:
16:56:24:02:7d:d7:57:8c:c6:da:eb:cf:79:4c:8c:
21:a1:44:3f:04:21:0f:30:8c:ae:30:76:10:9c:2b:
4d:b8:a7:97:2f:42:78:40:5d:1d:b8:91:ca:27:fc:
5b:66:03:39:4c:4d:fc:be:04:34:33:3c:88:1b:44:
08:a0:d1:08:9e:87:1c:d4:95:d9:99:be:24:c9:d6:
af:3a:ca:98:27:f6:9b:a1:85:77:f2:c2:d8:b5:c9:
25:21:37:d0:61:05:e2:95:43:39:8d:9f:f6:f5:1c:
72:65:4a:5e:ed:2d:47:ba:4e:f2:71:ea:cb:aa:c8:
8e:e9:97:b1:63:89:1a:2a:11:31:dd:7f:bf:c0:5f:
e3:a8:6c:15:3b:c4:e7:28:7f:13:d1:a1:a0:b0:96:
8a:f9:61:f4:19:42:75:1d:6b:3b:48:5b:67:d6:e6:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:71:E4:ED:84:25:38:3F:6C:81:C2:1A:48:94:A4:37:63:67:5E:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8e16cc-821f-4bd5-9fed-ab810d534bdd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8e16cc-821f-4bd5-9fed-ab810d534bdd/1/0nHk7YQlOD9sgcIaSJSkN2NnXvw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213625
Signature Algorithm: sha256WithRSAEncryption
3a:a3:1a:15:0a:81:48:c7:9a:16:e6:ce:77:eb:9d:70:ce:7a:
17:8e:ca:59:72:c4:c1:54:29:c2:e9:8e:fe:14:d1:34:e3:7f:
26:f7:23:2e:98:cb:d4:03:b7:72:04:6f:0d:11:84:ca:c9:8f:
e0:f0:b4:2a:b7:b3:2a:17:4a:34:4a:65:55:0d:35:8d:4f:60:
d1:3a:cc:31:fd:cb:15:14:65:0a:9a:ff:5e:69:d7:29:a5:42:
b3:d6:cf:e8:c3:b2:a6:64:2c:a6:83:05:ef:11:8d:75:f0:8f:
41:23:af:59:0b:b4:a1:f1:2c:5b:fb:25:b9:cd:c5:e2:fe:95:
64:13:5c:16:e5:e5:ee:59:8e:d9:10:a7:72:6f:8e:21:64:5a:
98:f7:7d:60:d5:e7:90:ee:24:f7:de:b4:94:a5:71:47:06:92:
45:f2:5a:0c:3d:7a:f2:d3:66:7e:b8:f8:33:62:0c:d8:de:13:
7a:3c:d5:cd:68:25:dd:ce:c5:fe:83:73:a9:b5:cf:77:65:97:
b4:fa:3d:cf:89:30:35:cc:fa:ed:d1:53:49:1e:99:69:42:52:
53:82:ac:ea:f3:73:22:e2:06:17:73:b3:c3:d8:95:26:5b:fe:
ea:59:fe:ce:bd:04:ba:88:06:55:a1:91:fb:26:d4:75:bd:85:
38:f8:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:25:07 2025 by rpki-client