Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer (raw, json)
Hash identifier: 2uPkzbJR87LcaqdKp+52L/VJnwuGMjJGVCj3YY+2AnY=
Subject key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F4FFF39910E7BC70CC0C957137B8F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214841
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4f:ff:39:91:0e:7b:c7:0c:c0:c9:57:13:7b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:bb:af:90:8f:43:76:5d:26:b9:55:2e:58:
07:35:20:ba:f1:83:4b:eb:53:04:8a:07:46:f6:f4:
12:82:78:51:2f:b4:48:7d:82:a4:f1:c6:f9:a5:67:
ae:4b:7d:61:f2:55:67:01:c0:78:b3:d9:5e:7f:39:
c5:f7:02:76:97:03:0f:76:73:77:60:8d:87:ac:83:
6e:7e:34:92:2d:c1:19:82:4c:28:2a:a2:67:88:42:
40:0f:93:55:0f:65:4b:37:9b:2d:f7:26:cf:eb:50:
86:2c:06:f7:f8:58:3a:5a:f7:82:fa:c1:ac:5f:04:
6f:dc:ae:f1:66:85:2e:0c:0f:c5:05:d2:7b:26:33:
2b:44:cc:8f:0b:31:85:ec:f5:b7:4e:d1:1d:83:c9:
70:9c:5b:aa:74:e4:bb:e1:25:02:3c:ac:19:67:51:
fe:c9:91:5c:82:38:f3:c2:93:e9:60:7b:f3:14:b7:
34:45:2a:cc:28:4d:c3:80:70:e6:4a:74:a8:a3:1e:
0a:3d:44:8c:a8:91:e5:62:1d:2b:78:cd:fa:52:ea:
e8:2d:d7:13:80:76:97:49:bd:0e:a9:7e:29:e1:fe:
a6:ee:61:38:8c:c5:0a:72:ab:89:d6:27:6b:90:e8:
87:db:3b:61:6b:1a:49:56:32:1f:5d:1f:ae:c9:3a:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214841
Signature Algorithm: sha256WithRSAEncryption
4d:9e:d1:2e:69:3f:73:ba:e3:7b:18:5a:bd:47:fa:ed:97:86:
95:b6:df:42:8b:4a:98:28:87:2a:df:73:b1:84:2f:d2:79:e8:
6a:6c:95:22:33:12:93:a8:8c:0d:bb:21:08:b0:25:fb:88:d7:
63:d2:80:9d:0a:81:5d:31:37:71:c2:b6:fb:d7:5d:eb:85:59:
e2:d2:07:91:b5:6d:30:c8:e8:3f:4d:db:2f:e6:f0:d2:90:33:
92:d8:cb:09:fc:ad:9e:dd:9d:4d:65:4f:9d:9f:79:00:7a:46:
e5:be:03:3f:d3:6c:09:95:b5:75:aa:ab:d0:15:7e:16:f8:86:
cf:3a:a0:15:f3:5f:90:e2:30:9e:a5:a3:04:5f:11:45:33:d2:
ba:11:f9:8b:8e:f6:81:5b:d5:a3:68:50:0e:26:18:6e:36:d0:
1d:cb:4b:89:6d:dc:b9:4f:00:e8:6c:ec:62:81:6d:5b:57:87:
9c:c7:59:5d:57:b5:90:f3:00:40:65:1f:3f:94:34:36:2a:2e:
be:84:fc:90:34:0f:d3:47:0b:2b:59:fd:20:d1:78:e7:25:10:
5d:3f:17:12:83:58:0c:3d:8e:62:d4:ee:e4:d1:4f:d6:85:c0:
e2:8c:b6:fc:31:5c:74:5b:f7:45:23:85:93:e8:27:b8:14:78:
f4:4b:68:58
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAZQlj0//OZEOe8cMwMlXE3uPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjk1OWZiOTBhMTU4ZjE3ZGU1ZDgyOTZkZjk1NDQ4MmE4ZDYyMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfK7r5CPQ3ZdJrlVLlgHNSC68YNL
61MEigdG9vQSgnhRL7RIfYKk8cb5pWeuS31h8lVnAcB4s9lefznF9wJ2lwMPdnN3
YI2HrINufjSSLcEZgkwoKqJniEJAD5NVD2VLN5st9ybP61CGLAb3+Fg6WveC+sGs
XwRv3K7xZoUuDA/FBdJ7JjMrRMyPCzGF7PW3TtEdg8lwnFuqdOS74SUCPKwZZ1H+
yZFcgjjzwpPpYHvzFLc0RSrMKE3DgHDmSnSoox4KPUSMqJHlYh0reM36UuroLdcT
gHaXSb0OqX4p4f6m7mE4jMUKcquJ1idrkOiH2zthaxpJVjIfXR+uyTqUJQIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFPuVn7kKFY8X3l2Clt+VRIKo1iEcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2UzMzZh
Zi00NTkxLTRkMzUtOTUzNi01YWJmOWEwNDI5M2UvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTMzNmFm
LTQ1OTEtNGQzNS05NTM2LTVhYmY5YTA0MjkzZS8xLzEtNVdmdVFvVmp4ZmVYWUtX
MzVWRWdxaldJUncubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDRzkwDQYJKoZIhvcNAQELBQADggEBAE2e0S5pP3O6
43sYWr1H+u2XhpW230KLSpgohyrfc7GEL9J56GpslSIzEpOojA27IQiwJfuI12PS
gJ0KgV0xN3HCtvvXXeuFWeLSB5G1bTDI6D9N2y/m8NKQM5LYywn8rZ7dnU1lT52f
eQB6RuW+Az/TbAmVtXWqq9AVfhb4hs86oBXzX5DiMJ6lowRfEUUz0roR+YuO9oFb
1aNoUA4mGG420B3LS4lt3LlPAOhs7GKBbVtXh5zHWV1XtZDzAEBlHz+UNDYqLr6E
/JA0D9NHCytZ/SDReOclEF0/FxKDWAw9jmLU7uTRT9aFwOKMtvwxXHRb90UjhZPo
J7gUePRLaFg=
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:32 2025 by rpki-client