Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
File: GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer (raw, json)
Hash identifier: PFylvIa1LQTBg5AEN0JhjnJaceQgdeV6LZ95Bp/9068=
Subject key identifier: 1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196B869F4BEECFC00CB40798F1786666224
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 10 May 2025 04:17:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210691
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:69:f4:be:ec:fc:00:cb:40:79:8f:17:86:66:62:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 10 04:17:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:ec:ac:dc:6e:3f:50:72:1b:b9:47:5c:72:
ba:bf:73:b5:20:af:95:3a:ae:44:1a:28:a5:a4:11:
e2:b0:c7:aa:26:92:6c:4b:96:59:68:66:1f:c9:89:
35:a5:c8:54:95:01:d9:ac:76:73:9a:76:7d:03:5c:
bb:64:ee:7c:d2:d3:b8:91:9e:1e:6e:6c:2d:99:8c:
35:6a:ff:8c:76:2f:ae:d4:7b:6c:de:d6:4e:5e:8a:
09:fe:e1:fe:67:e5:62:98:3a:6e:f3:3e:65:d4:9c:
be:40:51:fe:42:87:34:9e:d6:69:f6:60:33:94:e3:
09:7f:3b:93:8f:50:45:ad:ce:62:c9:6c:0f:b5:94:
8c:1a:c2:ef:4d:6c:46:e6:17:c3:01:b4:f4:28:80:
65:f1:9f:d1:70:50:64:eb:78:2e:af:8f:b6:a2:0e:
31:c1:3b:60:72:13:33:aa:6c:26:e7:6d:d3:fb:11:
8c:c8:f8:ea:6f:5b:53:ea:61:0c:4a:1c:7f:7e:34:
3c:75:8f:8e:cd:25:21:48:09:f3:cd:06:0c:1e:aa:
c8:97:60:5d:ce:5a:da:e3:29:b0:f2:7e:1b:a0:eb:
7a:fa:99:28:7b:d0:65:20:29:18:e5:f9:db:c7:88:
80:4c:e9:ab:9b:1e:8a:21:59:05:e8:4b:b2:68:92:
5c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210691
Signature Algorithm: sha256WithRSAEncryption
54:1f:7b:51:47:0f:42:ac:08:40:95:0a:36:5e:82:3c:3f:b7:
e4:dd:c6:60:53:3a:97:6d:3a:9c:b5:70:03:25:9d:a8:5a:7c:
02:14:71:52:6d:ed:a9:14:03:eb:2f:ba:f1:d9:bf:b1:9b:b9:
b8:07:e9:5d:cc:0c:48:3c:e6:c9:64:41:d0:5f:00:bf:2f:6b:
d2:4d:b2:34:5d:e5:1e:13:97:19:d5:66:b1:7b:0f:f3:e3:5a:
3a:4b:3e:f8:2c:d4:e3:38:be:18:ce:c0:ef:b0:89:c8:dd:02:
e7:7b:81:0f:32:1a:4c:1f:2a:d9:de:38:0a:97:0a:5f:01:b1:
65:6f:ea:c1:e6:59:3a:65:57:13:b4:3f:bc:1c:15:e8:63:53:
12:f9:7c:af:08:d8:34:38:2e:f8:c0:94:ec:98:fc:7f:20:4f:
d0:78:df:d5:a6:e7:42:cb:c6:2d:96:7a:1d:21:99:79:ae:b1:
75:0e:00:87:ef:36:13:b6:c2:32:14:bd:41:61:4f:4b:a6:6d:
91:06:69:04:ea:8e:38:a6:7e:c1:28:ce:97:f3:9f:1d:b2:65:
b3:c1:a3:98:39:e8:c6:f3:34:b4:45:75:e6:76:fc:b4:89:88:
cf:93:a9:03:0d:36:32:55:a3:bb:f1:2d:02:43:49:60:1d:a1:
e1:a5:dc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:40:04 2025 by rpki-client