Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67YrcxkGEIQRy1VV2BvcOj_cbbg.cer
File: 67YrcxkGEIQRy1VV2BvcOj_cbbg.cer (raw, json)
Hash identifier: 6lRCPRj2vpNPOFJAbadrXnRI6SlWx5P6uTMb6TKRakM=
Subject key identifier: EB:B6:2B:73:19:06:10:84:11:CB:55:55:D8:1B:DC:3A:3F:DC:6D:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196FC34431F8D0F9FA347797602C43E6D27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 23 May 2025 08:13:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214917
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:34:43:1f:8d:0f:9f:a3:47:79:76:02:c4:3e:6d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 23 08:13:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebb62b731906108411cb5555d81bdc3a3fdc6db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:8e:c1:2c:9b:cd:e1:4e:7c:40:93:cb:aa:
f8:fb:80:a7:cb:61:2a:a2:db:a6:d7:ec:91:9c:f9:
1a:6b:b5:0a:48:ce:fa:2e:f9:65:ce:5b:79:ba:4e:
2c:28:34:b9:5b:9e:b4:e5:a2:b5:c5:33:08:34:df:
99:3e:eb:1b:ce:d9:a7:25:41:fa:c3:9b:3a:03:9a:
be:76:51:1d:cb:81:4e:2c:12:4b:1c:2c:7d:38:a6:
67:18:73:4e:69:96:66:68:55:e6:77:4e:ab:d1:4c:
18:52:72:5a:73:01:37:fb:88:ba:91:9d:a6:93:b3:
5b:f8:74:93:06:73:d4:c5:3a:be:90:5b:d6:c5:5a:
8a:6a:8d:af:35:51:37:ea:1f:ef:4b:0b:2a:3d:da:
d8:6d:d1:49:9b:0a:81:68:3b:aa:96:89:c4:0d:f1:
26:0a:69:f1:b8:f6:1c:ea:e1:c4:9b:3b:e0:1d:59:
f5:55:bf:ea:7a:5c:40:8b:14:cc:4a:b1:bc:6d:95:
6a:1c:07:67:9c:05:3a:69:92:88:43:4c:76:e3:b5:
df:9a:2c:e7:40:84:bf:0e:52:67:e6:de:1b:31:9d:
73:a9:2d:a5:86:29:c9:e6:e5:f6:b6:86:ea:67:7b:
6c:a9:0f:33:a0:a9:bc:82:31:5b:f0:a1:0e:a8:6a:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B6:2B:73:19:06:10:84:11:CB:55:55:D8:1B:DC:3A:3F:DC:6D:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214917
Signature Algorithm: sha256WithRSAEncryption
b0:00:df:c3:c0:cb:01:6e:f5:4b:27:2c:25:be:75:81:65:22:
f9:19:f8:7b:e0:9f:69:70:21:79:7e:51:8a:f6:72:b7:c2:83:
c4:9a:e4:f9:a3:8c:46:35:24:46:a2:e7:7a:3d:0b:37:ce:24:
23:48:c7:76:bc:2d:6e:17:ca:f9:b2:ed:b0:c8:ff:bd:5a:3a:
60:cf:4d:ff:2e:92:74:21:fb:04:72:5b:f1:d5:7d:b8:38:9e:
7b:91:b3:8e:79:dd:75:f3:1c:26:b3:ed:eb:df:31:b2:04:61:
64:27:4f:7a:e8:6e:c3:df:31:c5:70:48:7b:84:7c:72:41:52:
ea:8c:c8:eb:24:e3:c1:19:22:aa:17:95:88:c1:ce:b5:65:60:
2a:cf:5c:ce:31:7a:e4:9a:12:38:71:6c:89:e6:dc:f1:f7:5b:
bf:67:10:f6:a6:32:bf:95:13:64:c2:68:e6:0c:01:e5:c9:b1:
49:88:d1:10:6a:50:18:fc:01:03:e0:78:8a:01:89:e0:cd:49:
82:02:33:cd:3a:ab:ec:00:d6:35:af:e0:26:1d:10:85:ff:c2:
75:f5:6a:bb:b8:23:71:07:a5:a1:2a:15:af:dc:94:f4:19:ff:
52:d7:6f:fc:57:86:1a:c4:32:87:1a:ae:7c:7e:48:5b:bc:d7:
90:df:6a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:39:32 2025 by rpki-client