Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
File: Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer (raw, json)
Hash identifier: Utrid1rFKC4fWFsGB7rFmfGkG0cXsQyIoNgb1afVT7U=
Subject key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019581E2654A979423EFEA0BF48EB218E66A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/
Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/notification.xml
Certificate not before: Mon 10 Mar 2025 21:07:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214101
IP: 2001:3fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:e2:65:4a:97:94:23:ef:ea:0b:f4:8e:b2:18:e6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 10 21:07:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:37:ca:4b:01:d0:d9:09:16:da:30:ac:f5:
9e:13:ca:7e:fe:38:cc:f9:85:b1:c5:c0:1e:7e:b3:
cf:c0:c8:7d:a5:46:56:35:1e:dc:9e:5e:c0:b3:ef:
49:ce:e8:ff:1e:83:78:68:5f:a7:e8:bc:a6:2f:ed:
79:71:be:0d:a2:32:5d:b2:d1:7d:97:17:9d:1b:6d:
62:03:b1:fc:e2:44:1b:62:54:d3:3d:3a:72:02:5a:
d8:86:ff:62:a4:86:01:d0:7b:12:47:62:76:e0:f2:
eb:e3:4a:7f:bb:ac:a8:2d:0c:ff:e8:03:65:42:2a:
69:52:39:e5:30:35:f8:ca:ca:56:c1:78:30:7b:99:
6f:5a:5e:a3:08:3e:0b:9f:4d:8b:e1:0b:9c:e6:87:
b4:ba:d5:01:0b:71:75:9a:a5:27:58:ec:75:81:78:
b6:12:48:9a:95:0c:eb:8c:9e:21:ef:94:18:7d:14:
93:4d:31:37:34:17:23:81:b4:3f:6e:57:e8:5f:e5:
2a:9b:8e:9b:8b:0b:32:ff:8e:b4:e8:9b:ab:de:a9:
4e:48:be:6e:e6:18:fc:b5:de:ed:03:9c:44:2a:f1:
5c:b2:f0:b9:ad:db:c8:69:56:a0:c3:c5:f8:70:d9:
0a:15:c9:1b:87:2a:c2:f1:38:a9:1c:ea:c0:26:10:
aa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/
RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214101
Signature Algorithm: sha256WithRSAEncryption
67:90:63:56:06:8b:67:d0:11:b3:4e:dc:38:e4:a7:fa:72:09:
f2:99:00:26:c1:36:79:07:c7:ef:6f:fd:c9:25:87:85:6c:ae:
0d:00:7d:48:92:b5:22:be:5c:e5:84:dc:e1:16:b7:6a:38:72:
a4:9d:5f:68:57:b2:6c:79:78:9d:c0:a9:d4:01:18:47:5a:ab:
7e:d9:0d:2a:58:ff:74:a3:cf:06:4e:67:0a:1b:5c:3a:f4:1a:
75:6f:b9:63:35:09:01:e5:73:27:59:6b:ba:e1:b3:9b:81:c1:
d5:ab:5d:7e:48:c9:2e:57:c9:99:a1:7e:d9:3e:a6:26:5e:d2:
a4:5e:08:d0:fc:36:31:e1:ea:5a:56:1f:72:7f:28:b2:04:87:
ea:07:80:b6:cc:2a:85:a9:b1:88:20:b4:f6:59:12:56:e9:9f:
20:3d:40:46:df:f5:13:b3:46:b6:12:2e:07:2b:36:82:a1:b7:
6e:f9:40:5a:f4:af:ce:c4:ea:67:ba:21:c1:09:14:be:5d:8f:
a4:f1:ba:3b:e7:48:22:b5:12:89:a2:79:03:7a:2a:f0:1b:4f:
fb:a9:07:b2:76:e0:37:14:b0:85:e1:f4:92:31:07:ac:53:2c:
66:dc:03:37:20:6d:12:44:68:0b:b7:fb:bd:06:54:de:98:cc:
6d:86:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:00 2025 by rpki-client