Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
File: yZdYjBhO3XIdCQotqVwm4aKMBRE.cer (raw, json)
Hash identifier: /+/JsqXr525mExsnVQmdXVlEkQaazkc4zpT+I8SjzVQ=
Subject key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01963D54D9629788B2A6A1971AD00B4B73B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 16 Apr 2025 06:41:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211182
IP: 2001:67c:474::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:54:d9:62:97:88:b2:a6:a1:97:1a:d0:0b:4b:73:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 16 06:41:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c997588c184edd721d090a2da95c26e1a28c0511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:9e:15:10:f1:fb:e4:54:34:d1:37:8e:b3:
d3:7b:30:0b:71:95:eb:49:c5:9d:6d:de:95:a5:e5:
f8:1e:85:6a:97:d1:54:81:3b:05:c8:c3:21:bb:21:
44:86:99:08:86:f6:14:74:10:4e:80:35:90:90:54:
0a:91:f4:d9:ac:e0:2d:8c:af:b0:74:d1:45:5b:b4:
b0:bf:9a:44:04:b7:8f:ca:65:0f:66:8d:ca:ec:ac:
38:d3:8e:9c:ad:a5:61:25:8a:98:d2:eb:f8:4d:d7:
c8:e8:1a:fd:df:41:b9:3c:71:d8:39:76:4c:6a:52:
8e:1e:aa:10:cb:3b:de:84:ee:a9:b4:70:86:3f:84:
53:43:a7:fb:30:a2:26:05:e7:eb:77:50:d2:00:e5:
65:2a:27:82:42:5e:27:a7:c8:74:ee:20:ed:1a:dc:
a3:f1:81:cf:76:50:74:e4:6a:bd:1b:58:b1:2a:e3:
6c:e0:b1:3a:33:60:f9:e7:cd:b5:e4:bf:14:dd:57:
1a:3d:a4:bc:f5:98:61:81:f5:1f:5c:ba:0c:65:47:
ad:bc:d0:e4:83:f7:87:e5:78:46:4e:16:79:c2:26:
41:d6:98:db:b3:ed:78:59:34:11:20:a4:96:ee:35:
96:b4:1d:41:65:8d:4d:dd:a0:6e:d0:b5:59:20:9c:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:474::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211182
Signature Algorithm: sha256WithRSAEncryption
3c:7a:d4:23:8c:96:60:5b:9c:59:d1:9a:bc:96:e5:6a:7b:14:
c1:29:82:3a:07:32:e2:3e:7a:2f:5c:66:8d:87:f8:f4:9f:35:
9d:f9:fb:32:3f:4d:10:20:9d:c0:29:d2:e2:c3:dd:c0:68:6b:
f1:dc:41:ad:48:95:06:ae:e6:3a:9f:a8:b6:d3:3a:b0:e5:12:
4f:fd:ed:73:2c:ed:86:67:95:b5:ac:72:97:89:c6:5d:a5:61:
2f:74:2b:94:6d:6f:f7:3f:ea:b9:01:b0:cd:bb:89:72:26:fc:
6a:24:81:cf:ba:81:ee:d0:3c:23:65:ed:0e:48:34:db:b6:40:
31:1d:03:02:4b:ea:ea:e0:ee:ae:c1:4c:09:21:fb:60:9a:fe:
d0:0f:53:45:40:e9:f2:1e:63:fa:33:47:19:0a:d1:a1:2a:14:
6e:82:3b:02:84:a2:fb:2c:11:60:d0:79:51:97:98:8e:e6:a7:
e1:a1:4f:60:9c:6a:9d:29:bd:93:d5:f2:1e:7c:a0:d9:c1:f9:
b9:99:92:15:a7:ee:3b:98:e4:b5:ca:3f:e4:51:5e:08:be:8c:
5b:ff:7f:1f:c2:eb:10:4c:9b:ab:94:5a:ba:7f:81:a4:ef:1d:
b8:61:3a:5c:a8:ac:e7:50:d3:6e:47:96:3d:28:77:6e:ad:1d:
8c:72:c4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:50:12 2025 by rpki-client