Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
File: 1EZzVsX7atsuunE8gBkUsvTX860.cer (raw, json)
Hash identifier: RyyckwrAECDP1fmI5NjclMvvCNYIYflNfFi3Nz9DlM4=
Subject key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01963883F6033F54CBD11335B2F1008D3ED3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Apr 2025 08:14:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213116
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:83:f6:03:3f:54:cb:d1:13:35:b2:f1:00:8d:3e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 15 08:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:88:93:2f:0a:41:73:18:19:60:2d:15:ee:
67:c5:5a:c7:be:88:1a:99:02:35:72:21:a2:0e:46:
20:f6:fa:a6:a0:5e:5d:35:5c:1f:14:92:24:f7:29:
aa:13:9f:1c:3a:44:9e:cb:9a:0b:7f:b6:20:e9:cd:
02:1c:63:d3:83:28:b3:55:45:fd:92:be:ca:1f:e8:
de:ee:1b:48:74:38:b0:8d:90:d7:00:f2:45:a4:ad:
92:eb:f6:06:5c:ba:9a:c2:8f:aa:0c:5c:cd:5f:78:
d1:83:57:82:d0:41:28:e5:c6:4f:af:64:78:b0:e1:
d3:6b:07:e0:ce:18:f9:f9:4b:e1:14:f1:19:a6:a3:
68:cc:a6:2f:cb:53:4e:8a:45:b8:40:f7:0f:60:2b:
77:7e:a7:02:c3:78:7d:7a:d9:75:3e:d3:73:a9:9f:
78:a3:17:f4:89:52:1f:de:19:9b:01:15:a1:7d:9b:
4f:83:7e:65:8c:97:ec:f8:20:33:18:bd:c4:bb:70:
0a:30:de:7f:15:a6:e5:45:e6:75:5b:f6:3c:d6:6a:
f9:d4:de:af:17:b7:21:d0:03:e9:10:6b:ba:98:7d:
e3:15:34:3b:71:ee:e4:86:b4:06:f8:8c:34:f6:42:
b3:ce:9d:66:e2:db:e8:e1:9c:df:98:2d:2c:28:3f:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213116
Signature Algorithm: sha256WithRSAEncryption
a3:62:62:01:ec:35:2b:91:dd:50:6f:6c:4c:ea:4a:7e:ad:9d:
28:09:88:03:95:d7:aa:bc:a6:76:02:2f:7e:f0:40:e5:5b:d0:
85:27:a2:9b:95:25:78:2c:be:7e:11:27:bf:d4:24:8c:07:bb:
74:12:6a:87:3e:fe:16:13:12:ee:94:7d:2f:7e:55:a9:90:d1:
c4:d1:93:44:c6:2a:c1:4b:4b:10:9a:f0:e3:a7:dc:d8:4f:56:
fd:1e:ad:33:86:a7:09:37:87:3d:cd:9a:30:98:c1:66:ee:32:
3f:64:86:6c:e1:b0:08:60:fc:13:bd:cf:d1:f1:27:ec:3d:b9:
1e:d3:4d:68:80:82:23:57:3b:64:04:29:c5:05:44:9e:95:e2:
d6:d2:2f:f6:3d:bf:87:b2:bc:f1:11:10:8a:4f:73:c0:3a:3d:
0c:ef:d6:9d:99:4d:d1:a9:bc:e6:dc:0b:46:65:d1:e6:04:20:
6e:cd:a9:a8:99:00:f3:0b:27:4b:7a:bf:17:41:de:30:b2:e5:
4a:f0:16:35:c4:af:14:06:c5:10:df:1b:9a:22:d3:07:56:4b:
f8:83:3d:e4:92:0d:95:b5:32:8d:94:a0:60:20:0b:58:fb:5d:
88:35:5a:b3:00:71:74:e1:8a:8d:45:3f:ea:e7:05:97:11:7b:
f6:76:dd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:10:57 2025 by rpki-client