Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
File: KuK_S6R9cV5T4us9AS0_y80bDsA.cer (raw, json)
Hash identifier: DOIK0kfl32NgYseJUXEwniX1RxKEWVG1XKC67AA0anQ=
Subject key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197CC124AFBE8A0EF3F72B7CF60456F8F29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 02 Jul 2025 16:57:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.62.4.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:12:4a:fb:e8:a0:ef:3f:72:b7:cf:60:45:6f:8f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 2 16:57:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:a4:ed:95:5d:d6:b9:69:4d:03:4d:3e:ea:
2d:d6:19:77:d7:1b:76:fc:bb:be:9d:df:ef:de:2e:
fb:a2:fe:74:20:bc:b5:56:26:2f:f3:43:05:af:12:
ab:4d:38:c4:af:73:f0:dc:29:50:84:6b:cc:83:21:
8a:cc:5e:94:f2:d5:94:17:46:24:0b:52:e5:05:56:
1d:a7:96:99:31:cd:f2:ee:e2:ee:d5:32:15:ce:a9:
2b:29:d1:15:c8:12:05:ec:b6:07:57:37:65:a4:95:
5d:1c:ee:e9:af:c7:1f:16:93:8b:1d:d5:58:e5:34:
71:8a:d2:6f:39:70:ff:d3:a2:30:82:c1:4c:b5:16:
e1:04:71:47:82:60:56:42:c7:0d:fc:28:c7:b0:ea:
b9:3f:99:3b:3a:38:3b:8e:8a:a2:eb:f8:08:cc:8e:
db:92:bc:c6:7f:c6:66:2b:09:98:e6:d1:a4:e7:e9:
99:94:ba:c7:8b:8e:38:cf:b5:52:ad:80:e6:4f:7e:
48:f7:cc:5c:82:76:0b:26:eb:a5:26:13:89:c4:7a:
3e:80:f8:e2:65:e0:dd:bb:68:e8:12:35:97:7b:ae:
1f:72:58:4b:df:9a:d0:83:e1:83:26:48:7c:21:99:
7c:34:c8:2d:07:53:64:71:e3:eb:0e:66:0b:81:b0:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.4.0/24
Signature Algorithm: sha256WithRSAEncryption
80:0a:3b:b4:6e:5f:d2:2f:da:91:b7:9e:20:81:3a:91:60:fb:
4d:ff:dd:82:80:51:8b:5e:72:7e:b0:04:62:02:af:b2:ec:49:
3a:f8:73:60:5c:0e:01:e7:7e:9b:18:95:48:b8:e1:d6:52:a0:
41:b0:c0:5a:38:fb:2a:0a:13:48:fe:9d:ea:f8:04:49:a7:57:
63:b8:3e:52:51:45:a0:b5:04:d9:d2:56:fe:5d:fb:60:22:e7:
5f:13:01:e7:f0:a0:34:27:a9:b2:79:c9:71:84:42:cc:c4:69:
95:3e:be:ee:05:b1:c2:fe:0f:45:3a:87:e4:23:3c:38:2b:47:
1b:a2:03:a7:ea:98:cc:6c:fb:1a:c0:d7:2a:85:74:34:a7:08:
7c:45:57:6f:62:5a:29:66:25:5b:8b:33:f0:63:19:a2:25:9c:
19:b6:74:42:c8:bc:4f:44:23:ea:4b:0a:53:bf:2e:a6:cd:90:
c1:b0:07:11:60:ba:de:d9:02:2f:44:62:fd:e1:34:e6:1e:8f:
32:c5:bb:b3:e8:33:ce:ac:05:8c:34:e2:2d:25:b3:a7:28:8a:
8b:85:f2:f3:4a:30:cf:b8:9d:fa:bb:06:09:18:28:b7:ca:42:
66:65:b8:90:fa:be:5a:47:f7:c5:f9:17:9a:64:a6:6e:31:a5:
18:56:3e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:38 2025 by rpki-client