Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
File: MtYmm4lSBJZffsl_Gdi12ckwt40.cer (raw, json)
Hash identifier: vNgIs+yjBMpcBxIXTfEdP8oFLMjU+0i8WQ/AziwtGb4=
Subject key identifier: 32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196EDBE14FE199A5E7D2F4CC101AE1DD8D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:49:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212251
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:be:14:fe:19:9a:5e:7d:2f:4c:c1:01:ae:1d:d8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32d6269b895204965f7ec97f19d8b5d9c930b78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:9f:29:a0:70:04:88:78:a1:ae:b8:ce:73:
52:91:82:f4:d6:88:5e:41:26:2d:d1:3e:36:8d:35:
40:3c:80:90:4b:27:e5:46:64:33:83:dc:63:dc:d5:
33:37:2b:f2:c9:d5:cb:c6:90:f6:3a:0d:87:a9:73:
7d:78:b4:97:7c:92:99:cf:33:e8:1a:e3:f5:d7:c6:
2d:37:be:4e:ae:20:1b:0a:ab:88:f6:4c:c2:a4:3f:
3a:36:dc:7a:d1:38:c9:8f:8a:91:0b:89:d4:b8:aa:
e4:a2:70:3d:68:b8:c0:9c:02:98:3e:bf:19:ca:1c:
87:7d:51:3e:d6:71:87:69:f2:16:55:83:61:5e:63:
96:00:66:37:8e:26:fc:fd:20:05:8f:b4:3a:c9:f1:
1a:a0:17:39:03:c9:1e:a8:ce:7b:2d:d1:08:52:b1:
7f:a9:ad:32:7d:49:d7:4e:3f:ea:14:29:70:4e:4f:
da:19:30:88:ea:ab:2f:bd:b1:e4:ca:9f:9b:7b:18:
52:52:2e:70:d8:87:23:91:bb:9b:f6:3f:99:f6:37:
54:40:e0:b0:b8:1a:c6:9a:fa:52:23:01:6a:37:aa:
80:1d:15:00:aa:d3:9c:0f:c5:8a:c7:4c:ab:6c:b1:
a9:86:28:80:17:34:ad:dd:fc:45:0f:6b:d1:f1:d7:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212251
Signature Algorithm: sha256WithRSAEncryption
3f:a6:36:de:32:6c:7b:35:5d:88:90:d6:51:2d:56:79:20:36:
e5:28:35:13:b7:94:5b:05:2c:bc:7c:2a:de:4e:b9:5e:7b:75:
cb:0d:ee:e8:1e:a8:13:bc:d3:ed:1c:d2:89:8e:97:0f:4b:9f:
a2:e5:9b:ad:c4:21:fb:bc:99:4d:9d:ce:68:ec:55:cb:3e:63:
f8:af:9d:65:3e:7c:d1:51:f3:8e:f2:b7:00:18:80:1a:22:f0:
5e:95:1e:1b:5b:72:d9:d1:45:f8:b1:49:06:a1:47:03:dc:9f:
36:35:93:bb:27:2e:6d:08:54:49:0e:8b:da:f4:cc:56:5b:18:
d5:66:d0:54:6a:64:1a:63:9f:05:5f:d6:7a:69:12:84:f0:37:
6f:60:2f:54:14:dd:21:2d:02:bb:d8:48:61:a0:7b:12:e4:7b:
e0:87:7a:c2:25:73:84:5a:aa:e0:44:d9:14:0c:f6:77:53:f0:
ae:fe:f3:8b:a9:b0:81:8b:52:a0:c9:fa:2c:81:5b:a3:4e:32:
4b:2d:17:b0:87:6f:ca:6c:c5:55:5b:05:73:61:6c:1a:4f:19:
65:e7:7c:4a:15:d6:31:22:3d:8d:40:04:d2:3f:1a:1a:d3:5e:
7c:3b:0d:6c:5f:60:70:73:4f:b1:42:b9:3a:29:f6:3a:79:4d:
6d:5a:ee:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:13:41 2025 by rpki-client