Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MzGQygcQzRqRIcDn6Wvw4dU3X9U.cer
File: MzGQygcQzRqRIcDn6Wvw4dU3X9U.cer (raw, json)
Hash identifier: Jj3RVu7ZKKUyyCuE+VeORs4sIp0DfA2CyrrhSOnkoJc=
Subject key identifier: 33:31:90:CA:07:10:CD:1A:91:21:C0:E7:E9:6B:F0:E1:D5:37:5F:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195A9E3BE9A86172BD4209AB3F0449B1B80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 18 Mar 2025 15:33:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199763
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:e3:be:9a:86:17:2b:d4:20:9a:b3:f0:44:9b:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 18 15:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=333190ca0710cd1a9121c0e7e96bf0e1d5375fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:d7:6f:ce:ff:a6:24:3b:a2:26:91:e4:2b:
9c:9e:00:db:c3:c0:54:1a:9b:f2:f3:50:88:72:a3:
e1:d0:7a:a5:dd:9f:42:b8:4d:ec:f0:af:3c:43:be:
77:62:66:e8:28:d6:a7:e1:1b:f0:b8:1c:f4:d0:56:
c2:e0:7d:b4:de:d4:7a:46:a3:ff:d5:d0:3c:ab:4f:
f2:5f:52:a2:ff:37:d1:3f:91:44:31:91:33:23:15:
5a:22:1a:e8:ca:70:54:b7:47:a6:c6:45:ca:b8:42:
d3:6c:ef:55:01:72:13:45:36:81:72:3f:1a:ba:7c:
70:a5:73:7f:39:03:e1:77:67:29:48:54:ed:5a:a1:
ff:57:ea:e7:fb:37:ba:fb:7b:37:6b:9b:b9:3b:40:
ab:90:4c:8a:67:f5:34:60:a0:f4:90:11:c9:ca:1b:
b0:a7:04:8b:97:bb:41:43:ff:75:50:b9:6b:f1:e0:
99:e2:bd:30:87:a3:89:b9:b3:44:ca:15:d0:fb:dd:
6e:fd:46:cf:2b:7a:9b:58:54:24:73:f4:b7:86:4a:
de:01:e1:fc:ad:f3:9d:0f:21:13:0a:cf:97:1f:0a:
db:e3:91:c8:57:51:91:a0:53:f6:84:b0:76:b5:01:
f8:75:01:90:3d:a8:59:61:f9:15:94:69:14:37:e9:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:31:90:CA:07:10:CD:1A:91:21:C0:E7:E9:6B:F0:E1:D5:37:5F:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199763
Signature Algorithm: sha256WithRSAEncryption
26:ba:d0:ec:04:bf:fe:82:f1:b4:f4:77:a7:d9:3a:10:ed:7d:
42:e6:c5:45:b5:8a:f6:f4:97:92:27:e5:2d:48:30:cb:0c:e8:
9e:1a:a1:c3:e4:8a:9b:5d:3b:e9:67:9c:a9:b2:3f:06:2f:34:
92:38:12:33:31:34:08:d5:8e:6b:34:1e:f1:4b:f0:1f:d4:be:
24:53:c5:71:13:c6:03:ca:2a:fe:12:ae:a4:b4:bf:81:91:bf:
e6:c6:45:39:26:f1:e8:63:84:66:f5:ef:ac:ca:7a:a9:2f:f9:
0d:48:b1:36:5f:5d:62:14:ca:a9:7f:4a:0f:db:9b:55:83:a8:
a2:f9:9d:ca:34:e5:63:55:75:20:a6:db:26:6f:3f:01:2f:d6:
d0:27:30:38:53:7a:ab:b2:b7:f4:94:04:38:8f:ef:ae:f7:c8:
6b:de:77:8a:2d:b6:f1:da:56:22:1b:1a:8d:3e:1c:fa:f9:02:
c6:5f:3d:9c:ca:b9:87:71:f0:bd:93:b4:1a:ae:65:6c:f9:85:
d5:f6:cb:29:ff:c4:3f:f5:d1:24:7d:05:48:1c:ee:5b:f0:f4:
91:41:54:a6:ad:4c:99:ca:db:bc:05:70:90:ee:e9:6c:86:24:
cb:5a:72:01:47:6c:c8:47:78:8e:73:7f:52:70:00:fe:ac:d4:
6a:69:db:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:58 2025 by rpki-client