Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
File: qjX0oGEfcqiSww2CEtIfhswTqWc.cer (raw, json)
Hash identifier: aWL/feGNSY5iSlzy+yGJXibXGqidaTUMNDzIl2CGVHc=
Subject key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C28AE63A0AB961093A2ECE7086E32
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216081
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:28:ae:63:a0:ab:96:10:93:a2:ec:e7:08:6e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:9d:78:4a:e9:a0:9a:e3:87:62:23:5c:f7:
20:48:eb:af:2e:d1:a4:d8:b1:83:ec:a4:af:3f:6e:
a8:3d:22:48:f9:b5:be:14:f2:b2:d4:cd:fe:6b:98:
9d:c9:85:a0:fb:5d:eb:cf:0e:28:a1:d5:e2:e0:9f:
f4:32:8c:b7:ff:6e:5f:d5:86:a6:dc:a3:a7:f0:9a:
8c:82:7a:5e:17:a1:fb:79:34:de:e6:44:21:3c:d5:
ee:34:7b:6e:1e:72:c4:e8:86:64:03:8e:7b:73:67:
a0:79:aa:f2:14:02:3a:f4:22:d9:38:ad:b2:b3:9a:
d2:d6:3c:e4:96:0f:c9:cd:a3:9e:e2:47:ea:9e:7c:
5e:2e:07:da:86:3b:8f:17:79:65:e3:c9:fe:c3:6c:
64:6f:74:da:20:ee:91:73:35:31:5e:b5:f4:6e:20:
6a:e5:4b:e3:f3:4a:42:26:ac:de:b7:81:34:2f:45:
7c:1b:30:ec:2d:6a:f6:ee:06:76:61:42:21:4c:f7:
1e:02:ae:43:28:f9:47:86:cb:7b:27:82:e6:8b:30:
20:b9:bd:61:b0:79:c8:3f:74:b5:db:1b:22:79:2b:
f2:2d:4c:54:e3:75:a0:48:08:33:6c:43:a4:c4:cf:
7c:98:0d:53:2b:f2:c3:1c:b3:4d:a8:d2:c8:48:08:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216081
Signature Algorithm: sha256WithRSAEncryption
79:b0:f4:ff:53:a5:12:aa:ed:5f:c6:01:e0:ce:ef:dd:ef:fa:
b9:5c:ad:e4:c4:0c:ce:3b:63:59:45:de:10:34:37:ee:41:e4:
c6:6d:0a:79:51:57:a1:fe:ba:9d:d9:12:da:4e:0c:f8:6d:89:
55:b5:1f:5a:b0:02:59:ef:a8:08:8d:6f:91:60:66:93:34:83:
83:26:5f:7b:30:91:82:8e:2d:44:a6:54:8a:f9:5a:54:b2:9e:
d2:f8:43:28:d0:71:34:10:48:d0:1e:4b:f5:d8:61:ef:b6:8c:
78:a8:bf:4f:02:3e:4f:9e:c7:0b:79:01:32:32:a0:e1:51:16:
08:b8:ab:52:d1:db:df:52:bd:4e:f5:54:1b:8f:30:9e:58:86:
cb:4a:b6:aa:c6:96:90:f9:19:b6:73:f7:d8:c3:2a:7f:38:50:
43:fd:f5:65:64:82:53:00:e2:4c:09:37:5e:78:31:7e:39:4b:
55:9c:78:e7:77:58:e3:64:43:db:2b:ba:41:73:de:03:95:7c:
e9:a5:65:db:8f:00:43:81:52:3d:9c:2e:73:09:94:67:b6:58:
5b:71:fd:eb:90:04:c3:01:f4:f5:6d:94:5d:e3:c5:96:2c:62:
1c:7d:98:bb:0e:e7:18:05:68:c7:8d:3a:c0:53:8e:93:25:0e:
6a:18:80:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:34:35 2025 by rpki-client