Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
File: cnOYybFuqY0iKkwpyvey68mE8oI.cer (raw, json)
Hash identifier: cERMZVGt95iNxEvZ8czdnQ3tSUKgHEaZdxMyiuK5ac0=
Subject key identifier: 72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195355BD6E1FB7A89035F0F1C904EE6F458
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Feb 2025 00:29:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212871
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:35:5b:d6:e1:fb:7a:89:03:5f:0f:1c:90:4e:e6:f4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 00:29:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=727398c9b16ea98d222a4c29caf7b2ebc984f282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:f6:42:d0:af:fb:d0:4e:3d:05:73:19:38:
57:34:1b:b0:1f:b5:4d:f2:0d:f3:83:f7:87:39:52:
12:d0:8b:6c:6b:73:d3:d0:ec:5c:90:8a:4d:08:4d:
0d:5e:0d:d8:2f:61:02:34:72:d8:a1:ac:96:2c:9c:
99:e1:26:c3:bb:6c:e2:80:2e:c7:26:b9:9c:88:3a:
a5:fe:fa:08:3d:8e:18:3f:96:c1:cc:7a:f0:cd:8f:
f8:a8:59:71:ec:d5:e6:19:3f:f8:88:70:56:43:f0:
b7:80:64:63:6f:db:84:ab:4d:06:be:b7:a1:78:0b:
6e:3b:59:f7:fb:97:53:06:82:24:fa:3d:36:97:58:
0c:3c:ad:cd:93:4c:05:b2:9f:d5:a1:d0:ed:5a:df:
4a:5e:bc:b6:1a:b0:5d:10:28:01:40:f2:ee:92:20:
81:db:5f:6d:af:61:5f:23:02:6c:9b:c3:de:d9:19:
5c:f8:42:14:4e:a1:82:08:71:82:2f:2b:2f:bc:32:
b4:7e:09:3e:2a:8c:03:43:ad:cd:94:e1:bf:5d:8f:
7c:a7:ce:5a:9a:2e:ee:13:0f:03:f2:36:23:3d:28:
2c:b1:d4:a4:6e:4f:3a:18:06:96:c0:c9:67:73:42:
17:b1:a7:cb:c2:4e:19:3e:68:2a:93:56:fb:1a:42:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212871
Signature Algorithm: sha256WithRSAEncryption
48:88:d8:3c:51:c9:2b:8e:77:bd:35:b3:d5:0b:74:ce:47:99:
fb:60:8f:74:5c:bc:e8:45:5c:63:a1:1c:44:eb:f8:14:7d:ed:
b4:2c:f2:ed:74:7c:7a:d0:72:df:c0:5a:28:04:01:71:3c:e4:
01:92:8b:7e:25:70:11:ee:90:23:8b:83:77:b2:de:27:fb:9e:
ec:61:e4:3e:6e:a4:38:08:1e:ed:38:bc:b0:3e:66:82:6c:12:
5f:ff:9c:ca:69:f7:88:f6:f5:4a:e3:77:32:94:2a:ab:ef:ea:
d2:70:d3:df:84:8b:3a:3e:53:ff:3b:61:2b:18:3e:fc:18:f1:
7d:5f:f9:da:8b:97:38:0e:0c:c9:c5:96:37:74:13:88:77:b2:
01:b4:e7:ab:33:97:21:2f:82:1a:9c:45:18:aa:ab:d8:bf:90:
96:e8:02:28:3d:2f:26:40:4a:22:f7:fe:97:47:d9:61:2a:cc:
4d:aa:f5:91:94:17:23:0c:58:3c:62:ef:f8:84:e9:31:5c:1e:
bb:ac:4d:c0:b4:92:30:6a:52:da:98:36:46:26:6a:1b:50:02:
9c:81:c1:31:d7:3f:d2:29:6d:3c:e9:e1:29:d3:dc:2b:d1:f1:
22:36:ad:fc:19:ac:3a:26:ab:f0:5f:fc:f1:82:82:ba:8a:91:
3f:fd:59:59
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZU1W9bh+3qJA18PHJBO5vRYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjI0MDAyOTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjczOThjOWIxNmVhOThkMjIyYTRjMjljYWY3YjJlYmM5ODRmMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mr2QtCv+9BOPQVzGThXNBuwH7VN
8g3zg/eHOVIS0Itsa3PT0OxckIpNCE0NXg3YL2ECNHLYoayWLJyZ4SbDu2zigC7H
JrmciDql/voIPY4YP5bBzHrwzY/4qFlx7NXmGT/4iHBWQ/C3gGRjb9uEq00Gvreh
eAtuO1n3+5dTBoIk+j02l1gMPK3Nk0wFsp/VodDtWt9KXry2GrBdECgBQPLukiCB
219tr2FfIwJsm8Pe2Rlc+EIUTqGCCHGCLysvvDK0fgk+KowDQ63NlOG/XY98p85a
mi7uEw8D8jYjPSgssdSkbk86GAaWwMlnc0IXsafLwk4ZPmgqk1b7GkLhjwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFHJzmMmxbqmNIipMKcr3suvJhPKCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzNjNjA0
ZS1lNmE4LTRlNGUtYjc2OS01YTA3ZTI2ZmI4MjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvM2M2MDRl
LWU2YTgtNGU0ZS1iNzY5LTVhMDdlMjZmYjgyMi8xL2NuT1l5YkZ1cVkwaUtrd3B5
dmV5NjhtRThvSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM/hzANBgkqhkiG9w0BAQsFAAOCAQEASIjYPFHJK453
vTWz1Qt0zkeZ+2CPdFy86EVcY6EcROv4FH3ttCzy7XR8etBy38BaKAQBcTzkAZKL
fiVwEe6QI4uDd7LeJ/ue7GHkPm6kOAge7Ti8sD5mgmwSX/+cymn3iPb1SuN3MpQq
q+/q0nDT34SLOj5T/zthKxg+/BjxfV/52ouXOA4MycWWN3QTiHeyAbTnqzOXIS+C
GpxFGKqr2L+QlugCKD0vJkBKIvf+l0fZYSrMTar1kZQXIwxYPGLv+ITpMVweu6xN
wLSSMGpS2pg2RiZqG1ACnIHBMdc/0iltPOnhKdPcK9HxIjat/BmsOiar8F/88YKC
uoqRP/1ZWQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:29:58 2025 by rpki-client