Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
File: R2Bl1x8emPmnynjmFOz19G1aZDw.cer (raw, json)
Hash identifier: SFcA9EGw1iqoFt//WfmsTUbFHVCwH0hzEYrLSg4OKvw=
Subject key identifier: 47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01971B1ADD14164D4064C6236173A653C4DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 May 2025 08:13:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5523
IP: 81.13.0.0/17
IP: 194.67.128.0/18
IP: 194.67.224.0/19
IP: 213.252.64.0/18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:1a:dd:14:16:4d:40:64:c6:23:61:73:a6:53:c4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 29 08:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:51:6f:87:ae:32:92:9f:85:eb:67:8b:50:
92:41:05:11:05:b0:41:ad:4b:9d:0b:fa:c0:d0:ab:
74:1a:32:80:84:a8:69:dc:a0:2d:2e:ba:7f:5c:32:
61:51:31:0e:18:a4:8b:4d:f1:47:18:24:3b:de:02:
46:a8:5e:ec:73:7e:9a:1f:02:66:ac:e2:77:91:45:
8f:bd:2a:ed:fa:1d:7b:ad:f5:7f:78:ca:79:e1:e3:
e8:03:9b:d0:92:52:5f:1f:68:1b:21:95:1d:dd:8c:
0a:c5:64:7f:14:b6:e8:6b:bc:9f:b3:e3:e7:62:f4:
10:49:b9:6d:a3:f2:e5:d2:60:ab:f3:3a:ae:ed:7a:
d0:b8:5d:07:35:41:eb:ef:b5:b5:36:20:90:8b:07:
0e:f1:36:a4:24:f6:71:88:21:4d:84:17:72:4f:2b:
5b:3e:fe:2a:1f:20:4e:7a:a6:9e:2a:93:5a:be:8c:
30:d6:ca:59:62:82:22:32:aa:38:9d:50:8e:d3:16:
05:3e:15:32:9a:f4:44:f6:cd:3c:31:90:fe:63:9b:
a7:bc:f0:3f:1e:b2:a2:88:e0:dd:d2:94:22:91:1d:
72:90:91:8b:4f:0f:57:ce:9a:44:63:cd:8b:0f:e8:
0d:9b:33:8d:1b:be:db:cc:ec:0a:79:d9:d2:cd:98:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.13.0.0/17
194.67.128.0/18
194.67.224.0/19
213.252.64.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5523
Signature Algorithm: sha256WithRSAEncryption
70:76:86:af:67:96:03:03:14:aa:b6:c6:b9:d1:dc:db:13:91:
b9:f6:d4:2e:cc:50:67:1e:61:d7:af:e3:ed:89:a6:20:df:54:
d3:ae:07:fe:ae:b5:a8:a3:21:85:1b:2d:2d:a1:e4:0d:d2:99:
7c:d0:e8:ca:07:d9:9e:35:94:c1:08:45:5b:40:89:c6:cd:cd:
e1:85:ff:1c:48:c3:d9:05:e4:51:df:22:ca:c9:b9:5e:ba:05:
e2:99:a0:df:8f:6d:4c:e9:7a:2d:b3:82:97:0c:de:6d:e4:68:
0e:17:99:37:cc:d4:df:cf:e3:f7:47:80:f7:30:27:e6:90:8b:
2e:ec:5b:e1:71:3d:8f:d4:f4:4c:4a:fa:d3:2f:fb:64:59:50:
4b:cc:f6:50:4b:fc:6b:ee:32:e5:b7:e4:5d:7e:f6:0f:36:15:
62:49:84:cb:67:ef:ff:78:8f:f5:fd:70:73:37:fc:9e:d1:35:
21:ce:8f:d8:f2:8e:b5:7a:f7:05:1a:f0:e7:14:77:7f:2f:d9:
d4:2a:74:3c:27:34:ec:c3:6a:bc:fa:d6:24:e7:97:98:77:79:
86:23:f3:9f:2f:d0:1b:78:23:c5:58:e9:60:c9:d3:ea:b1:d3:
ee:cc:b2:1f:d5:f0:38:70:34:99:da:41:6b:7a:02:37:36:cb:
e7:f3:88:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:53:26 2025 by rpki-client