Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
File: RUH1XBZZBCT7NMZeDi6sIogkcNs.cer (raw, json)
Hash identifier: GHiHxGT1bgHCIhhFrqt1yx+7RbEhK+LscRq3C+8BQDQ=
Subject key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425216B320F383F45847EA2F0D0E5B0CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216435
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6b:32:0f:38:3f:45:84:7e:a2:f0:d0:e5:b0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4541f55c16590424fb34c65e0e2eac22882470db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:61:b3:bc:25:b4:76:af:e8:bb:c4:db:d2:
46:11:19:8e:03:09:1c:11:3c:ce:ae:72:fd:2a:fe:
41:c5:92:22:34:b6:c7:84:1b:2f:b2:b7:68:ab:79:
08:67:5b:b3:04:d7:41:0f:cc:15:22:90:08:d5:bf:
0f:7e:ad:fb:88:d2:eb:dc:15:af:2d:f8:74:25:8f:
f2:82:8c:a7:e5:a0:5f:64:d1:c6:d3:67:64:3c:66:
ed:ea:20:b8:6a:8d:46:5e:b2:26:f7:31:ee:f2:1a:
4a:66:39:26:1f:8c:35:ff:0b:65:bc:d2:54:9f:61:
38:aa:21:5d:3f:34:bb:8d:7c:2d:81:53:4e:8d:57:
c0:2d:33:81:81:50:d9:60:97:29:6e:26:de:1a:45:
f6:e8:6f:48:a4:fc:3b:53:bb:21:ae:17:39:75:ad:
1f:64:f9:8d:e1:0b:4c:fe:ef:5b:30:0c:47:e7:78:
1b:1e:fa:aa:61:4f:d5:56:cc:c5:48:41:4d:c3:32:
ac:40:b0:a3:8a:e3:9e:50:be:16:10:9d:a8:1e:32:
65:1e:43:59:ed:3e:4b:fc:c4:2a:5a:95:52:4e:25:
26:ba:3b:9e:a5:68:38:15:4e:54:9e:b6:51:6b:62:
94:1d:17:53:c9:d5:28:0d:39:4c:ac:fb:19:bb:75:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216435
Signature Algorithm: sha256WithRSAEncryption
33:a3:70:44:f0:76:d1:cb:9b:9b:45:4a:ca:d0:b2:2a:a5:41:
24:f3:3e:1d:ab:ad:ad:f3:03:bf:67:ef:f4:cb:f2:70:5b:0c:
1c:f1:e7:79:ec:56:9b:c8:b9:79:f7:45:d6:6f:e0:17:6e:8d:
7f:11:07:e5:1f:d7:b3:d3:5b:24:68:34:8b:0a:42:7a:5c:8d:
60:ed:21:5b:35:b1:c8:d4:b8:9f:08:d6:02:61:ba:89:30:cf:
7d:5b:ba:71:19:af:e6:c3:5e:24:d3:88:65:56:7d:06:ee:bc:
20:ca:f3:41:b8:9f:2f:db:07:84:7f:64:08:68:5e:6a:7a:60:
a3:5d:62:d7:ed:41:12:12:5c:c1:96:31:f6:af:41:fa:7b:db:
b7:6d:f3:29:15:97:08:66:db:77:95:be:3e:9a:b0:2d:22:13:
41:1d:a1:be:56:92:a0:35:8c:b7:fb:6d:d1:d8:fa:bd:00:5f:
8b:08:35:82:9a:4f:4c:d2:46:92:da:7b:14:89:61:96:08:27:
5f:34:de:e0:06:7a:77:9a:58:03:7c:df:6c:ba:d9:c9:db:05:
43:cd:1d:04:99:06:9e:15:ab:9d:6b:42:5b:ec:93:c7:e7:72:
de:83:ba:ea:ba:bc:c1:f7:ab:2a:99:50:72:10:44:f6:ec:1b:
80:5b:ee:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:59:43 2025 by rpki-client