Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer
File: 9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer (raw, json)
Hash identifier: kYxXbisoCS8DukECbzuRCFS6mHvSNscjVDjgINOHkBI=
Subject key identifier: F6:90:66:34:8C:BB:D6:7E:19:E5:C1:CF:ED:53:76:54:01:49:8B:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197130FB3DD1C61A51F57A33A63270AD298
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 27 May 2025 18:44:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214299
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:13:0f:b3:dd:1c:61:a5:1f:57:a3:3a:63:27:0a:d2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 27 18:44:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f69066348cbbd67e19e5c1cfed53765401498b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e8:54:f1:7d:29:59:fa:e0:da:b9:e9:a7:2a:
40:f4:d2:ba:85:26:d3:fe:0a:76:18:8b:43:57:8f:
f3:93:d7:a3:a0:d5:5f:f8:e1:e7:38:d8:99:e7:69:
a6:d3:71:fd:e4:fe:cc:a7:9d:e7:19:55:29:65:e2:
ac:0e:13:6b:a3:7b:03:d6:65:6b:da:89:38:6f:c8:
12:5e:c0:ac:d0:38:8c:a2:2e:66:09:15:c9:52:ed:
a5:cd:15:3f:2e:49:50:37:14:e6:b9:b2:19:77:09:
96:91:19:ff:0d:a2:17:b6:57:70:a3:c8:9a:de:68:
61:62:c9:ab:4b:35:42:45:0c:5b:d1:d9:e4:83:df:
80:9c:bd:3e:20:ec:5e:77:53:d8:58:bc:a5:e9:ae:
3b:a2:b9:4a:d5:19:04:5d:9a:35:6d:39:87:bb:23:
53:bd:d9:22:0f:32:11:69:b0:d9:99:83:ec:74:1f:
25:49:ac:c6:a7:fa:3a:bf:0c:ab:16:d1:23:33:6d:
13:af:4f:c9:73:af:a2:6e:fc:47:56:e4:8b:ee:15:
3c:fa:d7:89:fa:c0:a6:9b:95:ac:3f:e6:23:00:eb:
bd:20:16:8a:99:89:e1:a5:f1:97:f1:9d:12:ec:3a:
31:5a:2b:63:52:62:6f:41:7e:d8:4c:3f:d1:9d:8b:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:90:66:34:8C:BB:D6:7E:19:E5:C1:CF:ED:53:76:54:01:49:8B:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214299
Signature Algorithm: sha256WithRSAEncryption
59:55:99:df:25:6d:2c:5f:1e:bc:0b:b9:40:56:98:0a:15:1c:
88:56:24:eb:45:ee:26:cd:e1:af:88:2f:46:66:f9:bc:c8:92:
08:a2:75:60:b3:8d:22:c4:bd:ef:57:8b:cc:81:a5:ae:35:17:
12:98:0d:da:17:2b:34:cf:a4:59:44:13:23:27:64:ee:3c:8d:
53:e1:b5:b8:3c:c4:be:84:76:c0:27:56:c2:e9:73:e0:33:05:
a9:cc:cd:1d:92:c6:95:28:2b:48:1c:45:ff:b9:0b:b0:98:e4:
2b:dd:fc:c9:53:9d:ab:89:3b:4a:c5:8c:25:33:82:23:87:25:
24:4f:1e:40:22:50:55:e9:42:29:9a:b6:dc:3e:98:0b:a8:04:
4c:b5:e9:9c:04:fb:fa:4f:8c:8f:e0:e8:33:cd:a5:b9:ef:69:
6c:87:fb:06:68:c6:f8:4a:2d:6d:2a:4f:ff:69:d5:9e:65:7c:
6e:e9:4f:4e:94:e8:5f:3d:79:36:f7:f4:81:2c:8b:d5:a0:ec:
d0:39:ab:e5:bc:13:0c:8e:e3:47:ac:27:eb:c5:2e:f0:b7:da:
24:2f:81:ac:89:40:79:1d:86:48:fc:04:3f:6a:cd:74:bc:c9:
15:ce:8f:90:79:4f:47:26:15:ec:7f:fd:d9:a5:84:3c:d4:2c:
44:2d:03:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:37:51 2025 by rpki-client