Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
File: n-JpKxvOewMnwf51yJKZ4vhiF_w.cer (raw, json)
Hash identifier: X72e1ejVrt7c3j79PHq/lZdbfBGQrecegQrHPMPb8CY=
Subject key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D91CB72CBC8E55487D6972929C46DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202467
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:1c:b7:2c:bc:8e:55:48:7d:69:72:92:9c:46:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:e2:9d:0b:f5:34:9b:45:16:82:f7:40:5e:
eb:18:9e:35:5b:61:b4:d0:3e:f0:08:17:ca:59:a8:
5f:81:f3:9c:fa:d9:90:e8:b8:c7:4f:4a:ff:40:5d:
19:3b:dd:16:63:45:d2:3c:ed:78:96:d7:6f:5b:e7:
74:c7:42:99:6a:1b:c5:d7:dd:13:18:38:de:4c:1c:
7b:f9:d3:10:94:a7:ee:b5:c4:97:77:cd:22:e1:7e:
09:01:a8:98:d4:be:a5:6e:ed:31:a6:32:5b:db:b2:
7f:ac:48:b6:ea:02:78:ed:00:c6:ef:04:04:6a:fc:
2d:16:55:7d:d3:5c:20:de:87:04:c3:04:68:30:04:
38:fa:be:26:a7:b4:71:bb:cf:60:c7:58:20:b4:00:
69:02:34:cb:37:36:ca:ca:3c:8c:b2:23:5f:3a:29:
e0:66:61:5c:33:8e:54:0b:5a:4a:43:50:9f:05:a1:
5c:3e:5f:b2:d4:e7:70:1b:f7:f6:8d:c0:13:b5:26:
58:77:7d:e9:87:2d:7d:e4:da:bb:e4:ad:e4:d8:b9:
cc:8b:30:00:bc:ef:d1:ef:0c:62:62:9e:07:4f:62:
75:82:8f:0a:8f:4d:dd:86:05:2f:f9:d6:a2:05:26:
fe:ba:5b:a2:a9:2c:9d:74:58:bb:0d:c7:e7:03:70:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202467
Signature Algorithm: sha256WithRSAEncryption
20:61:a0:35:ad:a4:46:dd:9a:38:ce:5b:02:d2:78:f1:dc:13:
52:c3:d4:96:5f:01:f5:f4:a6:23:a0:76:47:6d:83:31:28:a1:
4c:88:2a:e2:57:67:ec:d4:bd:91:3a:bf:43:f7:49:76:eb:45:
f7:6f:5c:ed:34:cb:3b:48:77:7e:40:a6:67:d0:6f:a1:bf:eb:
a8:73:32:e3:43:b0:02:70:c3:09:0c:d4:17:23:d4:86:12:39:
f7:f4:7a:82:d1:47:45:f1:1b:8c:74:61:8b:4a:7b:23:2a:a1:
69:5d:b6:ca:fd:95:06:0e:97:cb:c9:2d:86:60:63:26:23:d2:
9f:ca:aa:15:32:53:83:8a:d6:51:2c:83:c7:44:11:eb:92:c2:
25:54:1b:bf:70:92:ff:45:16:31:18:80:2e:51:b3:57:ae:78:
bd:d0:ab:cf:35:d8:aa:82:65:e2:47:86:f8:4f:49:be:e4:29:
fe:85:79:91:06:f0:53:a1:d2:ac:e1:aa:ba:06:0e:ff:03:f9:
59:3d:e2:4d:e3:9c:be:ad:d0:36:c4:52:c1:01:c5:78:0b:60:
4d:05:8c:f5:f6:c7:38:37:cf:a5:cd:68:40:02:96:f3:83:72:
bb:44:3d:ab:44:d1:9f:9b:06:ab:e3:1e:99:70:f7:39:66:a5:
cb:82:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:46:51 2025 by rpki-client