Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
File: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer (raw, json)
Hash identifier: tiTsZyZo7xlultu+AzKIB+7yHBb/jIYS/CASYa4EEYg=
Subject key identifier: 3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196ED922C9FB04801964395FAB5601307B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:01:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29653
IP: 193.16.229.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:92:2c:9f:b0:48:01:96:43:95:fa:b5:60:13:07:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:01:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3edd1cf4370085b6d25714091436f6686028d558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:81:84:38:ab:81:40:fc:f9:97:cd:65:5f:
e2:ca:14:93:a9:8c:70:91:93:e2:a6:fb:b1:a5:59:
c5:19:d3:50:53:85:16:3b:4a:b3:24:e3:b6:54:64:
17:95:9f:27:04:ab:ac:67:62:3e:4d:df:75:25:8a:
e6:7c:26:6c:db:ed:e0:7d:b0:aa:dd:50:55:07:19:
89:d3:49:ff:a7:4a:6f:bc:b9:bb:eb:a6:25:db:a7:
2f:32:4d:81:c6:7a:c4:ac:5d:99:ea:4b:56:8f:b7:
ff:3f:72:60:48:87:b5:32:1d:ce:52:1d:2e:e7:4f:
0c:82:99:5a:d4:f7:e4:9d:df:4a:b9:33:73:be:54:
f8:5b:0b:e6:a0:3c:27:d0:c3:2e:38:60:e4:af:6a:
e3:d2:f1:99:7c:6c:32:ad:93:cb:1b:dc:37:63:b9:
1b:da:5f:f9:86:2a:2b:f3:85:25:a4:90:25:9a:ee:
53:c6:00:d6:e6:c8:fc:e9:0b:a1:5a:35:3a:00:c6:
1a:7b:1f:59:a6:65:3c:ef:1f:6a:1e:fa:e9:fe:25:
5c:5f:bf:a6:76:42:41:69:f6:bc:4a:e3:61:31:14:
d1:5b:d6:22:99:de:73:6e:e7:fb:84:4c:9b:c6:8b:
07:a1:39:e5:2a:c6:5d:d0:49:98:56:b2:1c:39:c3:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.229.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29653
Signature Algorithm: sha256WithRSAEncryption
ae:3c:57:1d:a0:6d:41:20:34:dd:65:79:c0:2b:c6:25:20:ae:
70:d8:72:19:4f:c5:2a:ca:4c:53:6e:ff:bd:13:f1:46:34:77:
d3:38:c9:94:9e:4f:af:48:43:c3:66:df:75:35:69:1c:4c:45:
60:7f:8c:dd:4f:e5:0c:85:43:2a:08:b5:d7:54:cc:7c:27:dc:
b3:97:0f:87:c6:81:c8:c6:96:4f:93:05:3e:aa:4c:65:db:3b:
d4:38:1c:e9:17:b7:54:e5:2b:90:32:33:d4:80:16:98:bc:6c:
90:19:71:0e:9f:64:9a:9c:d8:c7:b9:0d:3b:3c:6a:86:ec:42:
b7:2a:5e:38:66:97:79:32:f2:a7:a9:b8:d4:9b:fb:a4:c0:e2:
b8:c6:9f:b5:1d:fa:45:0b:02:e8:11:f3:6a:58:d4:88:38:70:
0c:ca:8e:f7:59:31:a7:1d:34:3b:2e:fa:d5:15:f5:df:ed:e6:
31:ba:a7:0a:12:ae:57:f6:d6:bb:54:e6:37:aa:51:7d:35:90:
85:ae:d0:bf:f5:72:d9:b2:30:4e:e6:2c:1d:af:46:01:4e:6e:
2f:9c:97:f1:d2:d1:fb:be:61:f0:0b:45:29:05:0a:11:75:21:
cc:e5:67:0a:98:cf:21:c1:49:93:20:c1:07:57:dd:53:3d:99:
16:b1:64:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:50:49 2025 by rpki-client