Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
File: 8gRTIEA3KhoBrACJS58IvT_hreM.cer (raw, json)
Hash identifier: MlPWJoMpem/63j5seq7vMGh716KRXNGdUma1frVwoJA=
Subject key identifier: F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01971BA1C736541EEDCE6B5E729226EF4EAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 May 2025 10:41:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208934
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:a1:c7:36:54:1e:ed:ce:6b:5e:72:92:26:ef:4e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 29 10:41:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a1:07:3c:a8:8d:ab:b4:df:c1:38:6b:ad:8a:
26:f6:f3:ab:96:44:f1:17:88:87:d5:8e:f6:4e:7c:
b6:6e:9c:5b:0a:54:b7:99:da:5a:b3:6b:a8:bb:72:
44:3f:52:64:f3:a3:59:b3:cf:90:37:fd:8c:6f:9f:
99:a3:94:f7:ce:1a:36:b9:6b:b5:b9:ce:bb:2c:71:
8b:36:7a:1f:6b:c2:d6:20:ca:cb:4c:00:e5:29:5b:
de:aa:db:1c:02:48:e3:63:83:e4:69:e7:e8:fe:42:
78:fd:9c:8a:60:9e:6d:82:33:0c:ea:8d:35:ab:e7:
3d:5d:4b:93:e4:a3:f6:e5:6d:e1:31:65:9d:c6:13:
fc:62:fb:8d:f6:cd:f3:bc:c0:c2:87:ef:99:bd:e7:
ed:b2:67:9b:c6:6a:f6:f9:bb:0c:40:19:d6:da:16:
6a:7f:94:b7:d5:d4:af:62:be:c9:4d:d9:4b:3f:c2:
bc:70:eb:de:4a:76:66:49:75:17:ce:d7:50:ac:74:
ce:6f:95:5e:b7:f8:8c:c0:be:b1:46:e6:f8:bc:9d:
9e:04:9d:78:41:f0:cf:79:02:9b:70:78:8d:9d:ae:
57:7a:fd:ac:05:09:db:b0:5e:60:a4:22:4f:dc:39:
ff:3a:4c:2c:56:94:9c:ea:4d:a4:bd:5f:29:aa:07:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208934
Signature Algorithm: sha256WithRSAEncryption
2f:46:f8:80:0b:d1:d6:1d:b9:01:48:52:5c:2f:15:5c:1d:7f:
ca:42:09:75:8d:18:b7:29:49:27:44:0a:a1:c2:81:17:54:65:
e3:1d:b4:cb:51:44:51:fd:f1:68:ea:7d:1a:d0:32:5b:b1:ce:
68:0b:91:6e:27:d0:7d:42:4a:b7:69:ec:cd:bf:4b:fb:fd:1f:
ad:58:96:8a:3f:67:b6:70:14:aa:74:42:5c:34:67:9a:0a:19:
4d:c4:04:da:e1:ac:bf:47:2c:f4:18:9e:4a:71:fd:22:f0:f0:
85:6d:a8:88:c1:f2:d0:a6:0b:ef:51:50:0a:f4:39:c4:63:56:
82:3d:33:0a:26:3b:08:30:cd:e9:82:43:90:e2:2a:86:21:3f:
f3:a9:e3:70:78:be:cb:ff:ca:75:04:d5:fa:99:67:3e:e6:a2:
d3:1e:fb:99:c0:4c:c5:34:62:ee:47:bb:63:de:49:7d:2a:85:
5a:e9:22:92:aa:94:ae:34:7f:70:c3:df:20:b6:0a:c3:68:7a:
73:59:db:dc:c8:32:1c:9e:b2:ab:84:49:8b:30:f5:7a:48:11:
7d:16:77:cd:56:b6:8e:bc:44:7d:dc:a2:95:dc:28:56:95:6d:
34:2b:b3:10:23:17:1a:46:dc:65:ee:c0:08:2d:a6:fe:65:31:
9a:84:1d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:54:32 2025 by rpki-client