Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer (raw, json)
Hash identifier: JSeB1pMqYR/IBn/1ays8+TbCBySekLVt9QOjGKzy+2k=
Subject key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195527FAD3E46E7E2A430DAF1C5E0F0B839
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Mar 2025 16:17:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212427
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:52:7f:ad:3e:46:e7:e2:a4:30:da:f1:c5:e0:f0:b8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 1 16:17:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:0b:7e:ad:39:88:ae:da:89:1a:e5:3c:41:
a6:d1:ac:f5:4a:ed:b0:4e:6a:d7:a2:8c:19:6e:51:
79:dc:49:8c:5c:c0:d8:99:40:6b:59:db:02:f3:99:
b0:d1:f0:a5:8c:6c:22:0b:9e:37:e6:d0:7e:82:64:
8e:3f:79:5e:4c:ff:1b:b4:cf:a2:72:e9:c9:e4:ac:
be:07:7f:c1:0f:9e:f2:06:24:d1:05:34:8d:16:3d:
9c:01:90:17:66:a3:ec:ae:25:e2:39:6c:a0:ba:3c:
1a:f3:1d:f3:00:06:cc:12:10:04:6d:73:91:c5:27:
58:a4:1c:4e:2b:e9:63:69:fd:d2:3d:10:ed:06:56:
a1:bf:5b:c4:a5:79:d7:6e:2f:be:50:9a:21:61:20:
e2:80:a7:1c:6b:fb:31:44:97:17:9e:ca:75:4b:a8:
3f:11:52:e2:ad:8b:e2:87:ea:92:f3:5e:60:0f:86:
b4:7f:df:1e:26:76:db:06:36:5c:88:16:11:64:06:
79:b5:56:76:0e:90:38:5d:9e:63:17:c4:43:5f:d2:
0a:9b:b4:a0:98:de:ca:01:1a:e8:9a:22:13:73:b4:
8b:3f:9c:1f:01:f7:29:6b:15:22:30:48:5c:21:b3:
f7:5d:67:8b:cc:d1:06:d9:b9:87:e6:23:f3:ad:98:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212427
Signature Algorithm: sha256WithRSAEncryption
b1:bf:15:38:05:28:26:a2:82:95:78:d8:da:38:a5:93:bb:74:
7d:c0:dc:1b:7b:a0:a1:7f:73:ce:87:21:4c:e5:bf:e4:bf:d5:
b0:26:a2:35:c6:1a:ab:5a:df:4a:56:f0:9f:61:6e:e9:13:be:
98:07:d6:d3:47:32:c0:fa:9b:0c:35:bf:0b:7b:c0:7c:9a:81:
5b:24:55:47:ac:64:8e:bc:37:bc:0a:21:c8:0f:24:ce:51:48:
eb:9c:47:38:14:7e:4c:22:00:ff:5e:a9:95:a0:dc:e2:31:c3:
3f:cb:70:7c:d0:45:0c:09:b2:2c:67:3b:d9:2d:55:d7:93:71:
08:29:77:2e:3f:e9:cc:96:e0:d9:61:55:03:78:1f:a0:ec:e0:
96:01:ab:22:44:5e:08:a4:81:d1:90:7b:39:c6:f4:0d:39:e7:
f2:15:93:6c:f5:b1:20:6e:65:fe:2d:9b:a4:1d:40:4f:45:34:
8e:3d:be:78:06:60:15:9f:da:e4:bc:25:25:fd:fa:5d:05:33:
4b:1c:e0:ae:e5:86:54:a3:63:f0:22:d5:76:4e:06:37:21:0b:
74:6f:5f:2c:f0:7c:24:67:ca:8c:19:42:6b:4b:45:36:be:bf:
18:c7:f8:89:46:dd:db:31:9c:0d:54:20:58:3d:ce:e2:ee:93:
99:3f:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:22:21 2025 by rpki-client