Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
File: 2wy7NfYw1Aytd1B_2r03_e3BIQM.cer (raw, json)
Hash identifier: PbzsD5qL5ZdBwfHoZx8vny+Dmpij1VgmzFyOaRpYp/c=
Subject key identifier: DB:0C:BB:35:F6:30:D4:0C:AD:77:50:7F:DA:BD:37:FD:ED:C1:21:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196EDB3CFC04FFE237623997A4578093075
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:38:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205034
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:b3:cf:c0:4f:fe:23:76:23:99:7a:45:78:09:30:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:38:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db0cbb35f630d40cad77507fdabd37fdedc12103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:89:a7:92:09:7f:cb:d9:cc:91:df:59:76:
19:89:a6:78:6e:7a:e9:6a:9a:fa:76:94:31:0c:22:
dd:1c:72:00:84:6a:ef:0f:38:d5:0e:7d:b1:92:a8:
0e:67:fb:20:32:96:7b:87:53:c8:c1:74:12:a3:92:
84:9a:96:5f:86:b7:d3:20:ad:63:99:1b:8d:8e:0d:
94:b6:d1:92:11:09:01:e1:ec:df:de:c1:16:28:08:
7a:da:3a:0a:a9:7f:d4:0f:53:36:79:43:14:6d:11:
51:ac:d9:af:cf:76:93:0b:31:10:8b:35:0b:c6:88:
10:1b:27:ed:a2:15:83:a8:03:5e:4b:c9:cc:36:e5:
54:18:5f:bc:5c:ce:c6:be:74:56:66:de:cb:3e:01:
87:de:c2:fa:90:56:a2:11:db:e4:92:e2:cc:4e:2f:
5c:0f:52:19:16:c9:bb:f3:19:f9:d0:e6:bc:c6:41:
d2:a5:b3:68:e3:2d:52:89:cc:f1:7c:cd:6e:5e:25:
59:0a:bd:08:29:c0:2c:e8:2a:61:a9:3e:c4:71:c2:
de:61:c4:bf:82:43:b9:c8:a7:de:9d:3f:3d:a7:90:
d9:ab:46:7b:0c:3c:3a:37:df:f0:1b:11:06:77:23:
98:18:d2:77:99:af:1f:75:23:8b:4c:32:2f:1a:c2:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0C:BB:35:F6:30:D4:0C:AD:77:50:7F:DA:BD:37:FD:ED:C1:21:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205034
Signature Algorithm: sha256WithRSAEncryption
1b:20:44:25:55:3f:32:87:42:44:b7:25:a5:73:ba:4c:ac:c8:
10:5b:8c:21:a8:77:cf:64:93:06:6a:88:4a:ec:7f:62:14:3c:
3d:bb:18:d9:9c:c9:a2:97:4a:5f:03:db:c5:3e:1e:32:45:02:
00:ee:5b:b3:4d:b6:43:fb:f3:99:31:1a:08:05:a9:68:2a:c7:
df:6a:f2:d4:1f:92:31:f6:07:ec:13:16:6f:23:fc:cc:91:f2:
f3:9c:26:dd:4e:91:74:03:a6:c0:b8:68:12:12:bb:1d:6e:82:
81:8a:5f:5a:11:41:eb:67:7d:43:ec:e4:d8:19:1b:26:3c:2d:
61:f6:18:67:c5:10:67:da:3a:d3:c5:4c:e2:60:81:c6:3d:71:
1e:5b:50:71:dd:c5:ed:43:e3:dc:59:e5:fa:b6:c0:7b:6e:c6:
2c:05:f7:1c:41:fa:d8:ed:f5:7f:0a:c7:cd:53:91:96:4a:dc:
63:65:8d:8e:8d:0c:56:a2:87:2b:06:2b:2e:16:bb:45:f7:86:
f5:61:a7:29:0a:f4:90:fc:75:c4:3d:f7:4f:84:1a:12:c9:bd:
70:26:9f:c0:f9:d5:ae:5a:2e:0d:af:ce:59:20:5f:f4:05:a2:
a2:48:97:4f:6e:bc:d8:a4:10:09:2d:df:b2:e3:16:54:b0:10:
b1:d4:53:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:59:02 2025 by rpki-client