Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
File: AclpL7GkCf800a87grjj2mRnXDI.cer (raw, json)
Hash identifier: XRlkBY2drCLoSqIiwrv3FqsPO9ZJnUjjACcKtzdEccc=
Subject key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BFBE7B7C8EFCDE14054C50DD7F598
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44180
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:fb:e7:b7:c8:ef:cd:e1:40:54:c5:0d:d7:f5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2b:5c:20:b9:32:10:17:e2:56:08:d3:39:58:
3d:fe:48:f8:fc:35:f6:37:47:94:42:94:25:7f:4b:
76:da:00:5c:f2:e6:c3:6f:ed:a6:9f:f2:ef:d6:e5:
9f:64:35:c0:93:a4:4a:0f:33:a3:fa:43:78:80:d9:
8a:a7:d2:c0:c2:12:29:c3:e0:a9:44:c1:57:11:3a:
6e:c1:95:35:67:d5:a9:54:8e:d3:d7:99:db:74:67:
54:fd:d5:58:67:ef:66:02:26:06:29:5b:e1:b9:65:
5f:15:e6:f3:cc:8e:68:35:0c:e9:0e:92:95:90:f4:
7d:aa:78:c0:d7:b9:61:0d:14:72:dc:3b:df:89:7b:
42:1e:bc:2f:87:9f:da:cd:fe:85:a7:2d:31:66:28:
ab:cd:1d:f2:7f:bb:d7:00:bc:88:03:e0:16:04:86:
05:0b:5c:f2:24:03:10:77:c4:68:3e:06:3a:8d:38:
41:9f:a3:47:7e:89:c9:5a:44:9e:89:9e:b2:9c:f5:
bb:be:3b:d4:56:a5:28:61:f7:41:f0:22:b1:0e:70:
63:42:d5:fb:49:5b:c8:b5:0f:5f:13:ba:ca:be:95:
36:e4:e2:0c:61:8d:35:bb:93:8f:3d:d1:7a:49:19:
5b:f8:0e:de:3e:61:ca:3b:3e:0d:9f:68:a4:3c:ea:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44180
Signature Algorithm: sha256WithRSAEncryption
8b:81:1b:40:33:24:16:b6:dd:e9:60:1b:a3:ac:6c:63:9a:46:
d1:5c:d7:98:85:c2:e3:f8:ea:fa:5c:14:9a:6f:9c:01:de:33:
61:d5:53:f8:f5:d7:1c:fd:eb:1f:ee:c1:cd:47:22:31:45:56:
32:11:16:7e:1a:b0:95:62:82:ba:88:4e:d8:0c:05:e8:0a:ce:
a2:f4:4c:63:21:e4:31:78:86:f6:b6:54:74:d9:2a:fc:fb:2d:
00:3d:62:df:2d:1e:00:8c:ab:1f:fa:34:01:93:1b:a7:f0:89:
4b:e5:e5:23:0c:5a:c9:44:d8:5b:94:46:13:00:8f:64:93:2a:
0a:08:de:82:bf:77:9f:54:10:51:fb:c4:60:f0:0b:dd:4d:30:
5c:ce:5a:b7:c7:5b:dd:dc:d0:7c:30:1c:63:9e:07:e0:d9:5c:
18:47:34:37:bb:fd:db:73:8e:8b:5f:e0:73:fd:3a:da:24:76:
72:24:2a:4c:6b:30:25:24:10:ae:86:d2:cf:e6:16:36:07:6a:
b4:1a:88:c0:6c:2d:19:e6:6a:12:de:59:e6:cb:3f:9e:c2:ac:
34:a2:e8:b9:77:4e:25:fc:d2:ae:1a:30:90:dd:7b:c3:f4:a6:
1e:2b:df:ee:7c:0e:8e:83:06:d5:0c:3c:eb:bc:bf:bf:45:a5:
38:c4:fe:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:47:24 2025 by rpki-client