Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
File: 8eV-NQ06bbilgFWSmfC504vMWVI.cer (raw, json)
Hash identifier: HBlY7+erL+XTtmnUeUAd2DMmKrLXxiVs2hGdNfe4Hos=
Subject key identifier: F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196D860C153F72D0FDEFA1B26AEE742306A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 16 May 2025 09:15:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a12:dd40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:60:c1:53:f7:2d:0f:de:fa:1b:26:ae:e7:42:30:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 16 09:15:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:93:68:e4:cc:06:6e:f3:ac:70:5b:6d:c4:
44:df:6b:13:83:b8:9b:4e:68:c7:0d:d3:50:03:ca:
4b:b8:30:7d:11:ea:65:23:d5:d1:29:59:58:af:0e:
ff:63:f1:90:8a:5d:4c:44:cf:79:1f:eb:27:ab:d6:
d9:89:e5:ed:52:9b:08:0e:50:ad:57:37:19:4a:db:
b5:cc:9d:83:a6:43:86:0a:f6:bd:18:3f:0c:c5:8f:
b5:88:46:5a:80:ba:8f:46:86:2d:91:b4:4a:e8:f3:
f4:40:11:86:eb:55:25:48:6c:00:29:9c:cb:2d:7e:
82:76:c5:4e:3c:99:d3:50:e2:a9:7b:b6:a6:55:9b:
f4:87:27:ec:3f:34:32:e0:df:78:b6:c0:11:38:ab:
2a:c0:af:cf:65:04:be:8b:af:97:c3:a4:a5:70:7d:
73:c0:cc:b0:31:be:4f:28:a8:dc:2e:1d:80:18:62:
7d:aa:bb:18:48:bf:6d:1b:3a:ab:35:ff:e0:61:58:
3a:62:3b:0e:cf:d3:e6:b5:e0:68:9d:3e:d1:1a:ab:
de:f4:7e:57:c5:fd:59:e5:c9:3d:cc:7e:bb:57:67:
9c:65:86:49:d2:00:89:51:d5:c1:65:e5:19:a6:a5:
ab:fb:88:66:0d:62:20:16:94:26:64:53:1d:39:39:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
6d:d2:84:d1:94:75:f8:b4:f5:16:4c:04:e2:c7:f3:61:59:3c:
39:53:86:c4:ed:e0:8b:73:dd:04:90:7a:be:7b:50:81:97:96:
5b:f8:b6:42:b2:0d:e4:c8:f1:d2:67:fa:c7:3b:bf:31:0d:7c:
e9:7d:1f:1e:ec:52:c2:7b:fc:c3:e7:1d:98:d7:1e:7c:51:c6:
47:f5:5e:d5:c7:a5:30:3d:89:e2:0a:2f:36:f2:fa:05:f7:17:
6a:bb:85:bb:bb:21:56:b1:fb:51:88:e9:e3:2d:5f:fb:f0:54:
96:0f:69:8f:b5:06:e2:ab:d6:4e:a0:24:67:60:70:19:c5:d5:
8e:24:57:6c:8e:65:57:af:f8:32:a9:ec:86:bd:81:06:63:ee:
4f:2d:a5:84:a7:f4:8f:b9:82:98:bf:32:63:56:36:2f:06:33:
10:a1:54:de:0f:ba:40:f6:53:f0:b7:e2:30:eb:9a:e2:79:26:
e2:d6:ea:5e:47:57:69:e0:c2:41:2e:e7:56:20:e4:c0:82:9c:
f3:3d:a5:2c:68:37:7f:e6:15:9a:cc:de:ab:2d:f6:ff:29:c2:
a1:99:8c:61:36:05:b6:7a:38:35:a2:de:fb:e1:7f:ba:ed:3e:
f9:2a:7f:c5:57:68:41:d4:9f:2f:11:b9:61:7b:e1:f2:a8:88:
c3:a8:c5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:48:34 2025 by rpki-client