Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3hf9Zld7PtNYs4YqfdmAlEqF1Qc.cer
File: 3hf9Zld7PtNYs4YqfdmAlEqF1Qc.cer (raw, json)
Hash identifier: iPSgMJYNloKafIoqHmYOQG3r4FXKiTLzs6U8CFpN7mQ=
Subject key identifier: DE:17:FD:66:57:7B:3E:D3:58:B3:86:2A:7D:D9:80:94:4A:85:D5:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194EB6821573D779BF14E490C16D2FE1036
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/4e44c4-1a11-4b89-ada0-242c25c72012/1/3hf9Zld7PtNYs4YqfdmAlEqF1Qc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/4e44c4-1a11-4b89-ada0-242c25c72012/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 09 Feb 2025 15:50:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213581
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:eb:68:21:57:3d:77:9b:f1:4e:49:0c:16:d2:fe:10:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 9 15:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de17fd66577b3ed358b3862a7dd980944a85d507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7c:96:86:85:db:e8:0f:14:c7:9f:fa:35:8c:
23:ee:4e:a6:d4:7b:13:5f:48:6e:24:2b:f3:c2:9e:
8f:e5:78:08:1a:fa:e4:64:bd:5c:3b:3e:f4:8e:26:
6a:0b:da:7a:10:f5:41:be:bd:1c:6e:41:23:57:ce:
3d:ca:7a:60:97:97:70:69:28:0a:bf:c9:6f:a8:32:
9e:26:38:00:24:57:81:28:c1:39:5e:17:a2:fd:d2:
69:ca:7b:d9:b5:3c:3a:b9:87:00:e1:5a:ae:02:4b:
30:4a:e1:2f:e9:45:3b:1f:54:53:a8:13:6c:b3:c1:
c7:36:7c:cf:ff:00:5b:42:28:fe:08:72:78:c0:b3:
f6:6c:bb:58:b2:20:5a:88:0a:85:bc:5c:a5:bb:be:
02:76:fa:ba:74:cb:31:87:fe:f1:84:56:cb:f1:48:
bc:37:3a:f7:8b:73:c5:43:90:78:14:29:e3:8a:5f:
52:af:66:8a:fb:77:da:d9:5a:7e:61:2f:b0:b6:c4:
68:8a:e9:ec:a5:d5:00:19:74:61:81:73:6b:a5:4d:
3b:8c:41:3d:05:58:7c:dd:a9:75:62:c5:24:28:e1:
6b:55:36:a0:13:72:e7:eb:98:c9:67:55:42:c3:06:
a5:24:b2:da:ee:49:36:c4:85:76:3e:ec:b5:a7:d0:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:17:FD:66:57:7B:3E:D3:58:B3:86:2A:7D:D9:80:94:4A:85:D5:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4e44c4-1a11-4b89-ada0-242c25c72012/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4e44c4-1a11-4b89-ada0-242c25c72012/1/3hf9Zld7PtNYs4YqfdmAlEqF1Qc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213581
Signature Algorithm: sha256WithRSAEncryption
b0:b9:ee:a5:21:0f:e4:84:6b:d0:8e:49:ea:97:00:45:75:6d:
94:69:ae:55:30:9c:52:1f:cf:a5:93:13:00:91:06:c8:79:5f:
4d:d2:d3:87:95:4d:16:15:ae:f6:e9:f8:c8:ca:29:0e:6a:7d:
06:13:87:88:c4:a1:af:67:21:62:f3:ec:be:4a:42:09:89:5a:
3a:18:ce:ff:60:15:88:27:48:e5:dd:f9:7f:6e:1d:20:c0:02:
47:16:b9:d2:0f:c1:59:a0:e9:89:3d:e0:2d:8a:86:7e:ed:1a:
9f:56:ba:02:a3:90:7a:52:b3:81:dd:70:90:48:ce:7d:e0:1e:
2d:11:06:38:d9:bf:c1:4a:c8:9a:77:97:b7:44:53:7d:9b:27:
8b:e4:97:c3:be:55:14:b9:d3:63:37:28:b0:8a:a1:94:03:a3:
e3:8b:e8:68:1c:38:94:ee:c1:a3:2d:f5:53:e2:ca:9d:2b:36:
3e:95:7d:25:4b:bf:2f:d5:ff:02:6d:bf:49:6c:4b:3b:8a:13:
81:ca:68:72:3b:a4:70:5d:e1:f9:b9:ef:ef:6c:69:64:e3:8b:
0d:48:7b:cc:47:8a:0c:69:a1:d1:8a:38:a8:ea:29:4d:2b:fa:
a7:f4:e2:0a:9e:7c:ab:3b:1b:a9:e7:f5:ba:3f:31:fd:7d:2c:
a1:3c:ea:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:18:03 2025 by rpki-client