Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KyO4dALEaK1icsN77YjlzcbkwGE.cer
File: KyO4dALEaK1icsN77YjlzcbkwGE.cer (raw, json)
Hash identifier: IDOkFAKZlaR96JqNMAobS6zq9hrPXDqNOBQ5czwniPo=
Subject key identifier: 2B:23:B8:74:02:C4:68:AD:62:72:C3:7B:ED:88:E5:CD:C6:E4:C0:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196AF0FB08C31BD07A5998D2AB77A74B537
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 May 2025 08:42:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209192
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:0f:b0:8c:31:bd:07:a5:99:8d:2a:b7:7a:74:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 8 08:42:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b23b87402c468ad6272c37bed88e5cdc6e4c061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:35:2a:58:75:d3:83:1d:c4:47:a3:b8:b7:
d2:24:c4:7d:a0:c6:96:c0:d1:47:21:95:1c:10:ce:
97:ad:c3:cd:4c:7d:60:33:e4:73:5e:6e:3b:94:2f:
59:89:b1:c9:2b:57:37:a9:45:d2:2a:5e:0e:f6:f8:
50:cd:73:a0:a6:ed:ff:53:06:ba:31:d5:33:b2:6b:
7f:55:ad:bc:c9:3c:6d:57:eb:e5:2a:40:de:3e:52:
e1:9a:09:a3:4b:83:60:07:7d:fb:a5:8a:d5:1a:67:
5b:ae:1e:3e:2c:bb:f8:97:9b:d6:f7:97:99:d3:94:
19:c3:fd:1e:a8:e5:e2:74:44:c8:bc:aa:d6:1c:ef:
38:b1:13:d7:33:23:be:85:c4:1f:48:0a:5e:d8:70:
33:b7:64:37:e3:41:52:5a:40:40:2f:f8:94:8a:30:
7e:fb:b6:39:41:db:80:66:e7:ba:e6:35:b1:2a:d8:
c3:68:a2:2a:52:b2:91:f1:3f:91:00:30:f6:66:2c:
24:3c:8a:45:5b:11:b5:ef:84:4b:f6:f4:bb:ab:c3:
25:2c:6d:19:4b:7a:bd:42:4c:2f:9e:dd:d1:88:65:
fc:2c:36:d6:d9:1b:5f:5a:de:24:2f:11:3f:d2:ab:
b6:b6:ba:cc:34:03:eb:6b:4e:1a:8e:ff:60:f7:e1:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:23:B8:74:02:C4:68:AD:62:72:C3:7B:ED:88:E5:CD:C6:E4:C0:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/854660-5fa6-427e-a5e8-654da8b40716/1/KyO4dALEaK1icsN77YjlzcbkwGE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209192
Signature Algorithm: sha256WithRSAEncryption
0a:8e:78:50:78:50:8e:b0:bb:60:30:51:e8:9d:c4:18:81:c9:
89:fb:11:69:59:a4:6a:45:ee:6b:68:57:a1:b9:1c:53:d7:4e:
e3:c1:ba:bf:42:91:1a:ec:a2:3a:81:71:ab:00:44:88:ea:ff:
19:e8:ea:c7:97:53:f8:44:10:f8:a9:f6:eb:01:73:a2:8e:ce:
c4:10:82:ba:6a:3d:e1:f2:f9:c6:6d:ba:5b:08:fc:0f:5e:b4:
57:05:7f:cd:4f:b6:a6:65:3f:35:d8:38:34:57:78:57:94:12:
a0:61:4d:24:16:79:00:30:f1:81:10:a8:00:36:42:b8:14:79:
10:25:4d:7a:61:45:f6:3c:7a:65:7b:e5:87:81:10:41:2d:06:
44:32:19:9b:a4:c6:d3:46:78:b4:59:de:be:c0:01:4b:fa:27:
b8:43:92:01:4f:d1:36:da:0b:3c:07:4a:2b:78:16:57:86:e9:
73:b9:66:d6:e9:ae:f9:91:5c:5e:3b:b9:81:c2:06:4a:c0:c4:
68:24:6a:ca:e9:50:6d:ab:91:3d:76:11:f5:14:c5:17:19:aa:
ac:57:6b:50:4d:77:51:1c:6a:53:5a:fb:83:a3:6a:5f:bb:8f:
74:5e:b9:25:1a:b7:fa:5f:17:18:75:c0:70:cc:c1:6f:94:79:
ca:5f:62:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:08:56 2025 by rpki-client