Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer (raw, json)
Hash identifier: yO1/F/cj/2TKDSZirvPRirgVGI6DVp8W/MyyDcyoFcA=
Subject key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01973C68E33D9CC2888630482C47B8FB9247
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Jun 2025 19:26:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a07:eb80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3c:68:e3:3d:9c:c2:88:86:30:48:2c:47:b8:fb:92:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 4 19:26:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:f8:9e:e1:81:fc:78:00:28:ec:0f:5d:4f:
80:f3:df:7d:ae:f3:2e:f8:e9:b8:f2:13:37:0f:d9:
a7:49:3c:26:20:56:85:c0:d0:b7:38:60:14:89:e2:
85:f6:70:7e:e1:a0:f2:9e:0d:04:e2:b4:2e:d6:c2:
14:c9:fb:78:8c:49:1a:c4:e8:c3:b3:1b:b3:90:7f:
65:c4:8f:41:cb:06:20:9f:a8:99:3a:dd:78:e7:1c:
6c:19:24:de:c5:0f:02:a0:07:b6:2f:84:67:ed:75:
8b:37:20:50:29:9f:7d:ad:5a:ec:36:81:a6:e7:30:
0f:68:b6:21:9b:0e:fc:4f:b3:4f:e2:d9:36:ee:9e:
36:fe:68:73:68:cf:c4:e0:b6:01:44:ac:da:02:86:
6b:08:f0:ac:57:1e:de:93:6c:ba:73:07:79:bb:f0:
75:2e:c1:12:08:74:b9:af:b2:c6:c1:ce:d2:16:02:
06:8f:7b:33:36:2e:4f:a1:8b:51:1f:68:bc:42:7d:
7d:e2:b6:c2:6a:b7:06:85:eb:4f:3e:e2:bb:56:a1:
67:0f:f7:39:5c:67:d9:9d:49:1a:25:f2:64:dd:14:
f8:1a:e5:53:99:97:69:8e:0f:9d:d8:68:b9:f0:c3:
ee:d5:80:ba:d8:69:ea:c6:3c:f9:b0:5c:c4:e3:60:
b2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:eb80::/29
Signature Algorithm: sha256WithRSAEncryption
a9:bb:cd:f0:f9:fb:13:86:27:ab:40:f5:ec:0d:c2:67:63:3b:
10:9f:68:2e:5f:97:b1:3c:a3:76:8e:d6:74:94:56:68:80:f3:
e4:b7:9f:d9:a5:c7:72:2a:78:68:56:17:ce:3f:27:60:77:ec:
e0:23:53:1b:2b:2b:ca:95:21:f8:fe:f8:45:31:36:04:19:5e:
65:46:c2:9c:e3:f6:c7:91:b1:e9:22:57:64:d2:18:cc:90:af:
4a:a7:39:fd:e6:7f:0d:a6:18:ce:8d:55:03:d0:9f:d7:c7:6c:
a6:b7:ce:b8:c5:0b:ea:35:95:6b:a9:3a:83:a9:95:6c:bf:8c:
5a:48:f6:8a:2b:16:8c:5c:67:85:43:df:03:52:b9:80:9b:5d:
de:f7:c0:2a:0a:fd:bb:86:d7:0a:68:c3:5b:50:f3:79:da:5a:
8c:07:98:97:e9:bd:0a:3c:f8:f5:d5:4d:d4:f8:59:ca:11:94:
ed:b4:ee:48:c2:74:28:86:3a:6b:f3:f2:90:8d:9a:c0:a4:4e:
14:a9:2a:59:84:37:28:15:26:d3:b8:6c:a7:d5:52:32:51:7e:
3f:7e:ab:40:b0:3d:1b:71:c5:d1:e6:a5:05:71:4d:44:cf:4c:
ca:90:65:b0:4f:2d:d4:7e:e5:9e:da:1d:df:3d:dc:2d:03:88:
95:82:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:55:00 2025 by rpki-client