Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UtlINdtX9r4TjoZPWT7mrai4PtA.cer
File: UtlINdtX9r4TjoZPWT7mrai4PtA.cer (raw, json)
Hash identifier: aes1X+T9dghnJAUSGzxHzOT84hgMyhvmLvuMkaEoBsc=
Subject key identifier: 52:D9:48:35:DB:57:F6:BE:13:8E:86:4F:59:3E:E6:AD:A8:B8:3E:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196EDBBAAE84F35E34F6EC124E7137887B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/6de2dc-ecd2-4af8-bb0a-3d08aabd5e9b/1/UtlINdtX9r4TjoZPWT7mrai4PtA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/6de2dc-ecd2-4af8-bb0a-3d08aabd5e9b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:47:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207735
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:bb:aa:e8:4f:35:e3:4f:6e:c1:24:e7:13:78:87:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:47:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52d94835db57f6be138e864f593ee6ada8b83ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b0:eb:a1:39:ee:3c:87:10:09:ca:18:d2:67:
fb:40:34:bf:24:b7:c7:ab:df:cd:0b:90:cc:9c:3b:
34:5e:42:77:94:08:a0:c3:52:d6:45:e8:0f:6c:46:
84:82:8a:2d:06:7f:0e:ed:ef:8f:2d:df:ff:fb:15:
66:34:fc:c4:9c:55:17:ae:42:4e:c0:ea:9a:08:46:
1b:2a:f4:be:87:fd:7f:ca:18:9a:d3:92:48:e4:00:
45:94:21:ca:dc:18:9f:22:ee:e3:4e:50:7c:44:21:
61:4a:d7:8c:e6:55:d6:f9:33:95:67:d7:35:3e:83:
4f:ca:15:67:28:bd:d4:ff:6a:3a:15:9c:29:e8:fc:
fc:64:0b:bf:bb:ce:a5:0b:0b:e6:27:60:4b:26:69:
39:0f:04:29:17:27:c8:ee:d8:5e:6e:c3:c8:b1:67:
11:ff:0b:c3:60:c0:b4:6b:70:2f:72:97:19:53:bc:
9a:1d:07:c3:83:6b:ac:f8:0d:f5:bd:c1:3e:9e:3d:
5e:27:bd:ee:6e:8d:c2:35:a1:c7:5c:01:9b:7b:17:
07:c2:15:35:26:25:98:1e:18:26:2f:86:20:db:26:
94:86:d6:aa:27:32:f5:cd:c2:8b:ec:51:7e:6c:91:
b3:6b:1c:c1:52:37:69:8b:7a:87:2c:69:67:09:38:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D9:48:35:DB:57:F6:BE:13:8E:86:4F:59:3E:E6:AD:A8:B8:3E:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/6de2dc-ecd2-4af8-bb0a-3d08aabd5e9b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/6de2dc-ecd2-4af8-bb0a-3d08aabd5e9b/1/UtlINdtX9r4TjoZPWT7mrai4PtA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207735
Signature Algorithm: sha256WithRSAEncryption
6b:f6:c2:0a:e2:bc:4a:5d:52:70:b4:3c:79:3c:ab:93:c8:75:
36:98:f1:71:64:8d:a6:0d:f9:9f:9c:71:fa:5f:98:ce:7b:40:
82:91:91:ce:b3:3b:50:b8:7a:87:f7:1d:15:65:4d:e6:22:43:
bb:37:ec:f4:c8:9c:10:31:d2:fd:de:e6:29:76:0c:2c:fe:c7:
05:2e:8e:e8:f3:af:c1:70:3f:9f:8d:0e:b9:e6:0e:44:3f:02:
d8:7e:8d:4e:ca:d3:57:82:87:ff:da:31:8f:c7:50:ac:15:68:
3b:0c:e6:72:e6:4d:47:8c:4e:ef:9e:12:b2:30:1c:25:f2:d5:
ca:57:be:e7:09:c7:01:3e:1e:3a:a2:9b:f1:21:99:8d:97:84:
50:c6:c9:d0:b1:8f:21:f1:ad:10:47:16:80:f9:fd:ac:16:7b:
b8:3a:35:00:4d:97:21:d4:37:1a:73:9f:81:8a:50:0f:b5:b9:
6b:cc:3d:5f:a7:00:39:44:6d:3d:71:04:f3:76:47:6f:71:d5:
cf:0a:45:b1:53:d9:80:c4:13:86:4c:23:eb:0e:a8:c3:3f:2e:
d6:38:d8:46:c0:3c:bf:06:b7:50:43:61:47:49:b3:08:37:81:
ca:69:f4:3e:67:ca:c2:f0:98:2c:5a:22:f6:94:08:b8:8d:2a:
a6:b1:bd:72
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZbtu6roTzXjT27BJOcTeIewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNTIwMTI0NzAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmQ5NDgzNWRiNTdmNmJlMTM4ZTg2NGY1OTNlZTZhZGE4YjgzZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7DroTnuPIcQCcoY0mf7QDS/JLfH
q9/NC5DMnDs0XkJ3lAigw1LWRegPbEaEgootBn8O7e+PLd//+xVmNPzEnFUXrkJO
wOqaCEYbKvS+h/1/yhia05JI5ABFlCHK3BifIu7jTlB8RCFhSteM5lXW+TOVZ9c1
PoNPyhVnKL3U/2o6FZwp6Pz8ZAu/u86lCwvmJ2BLJmk5DwQpFyfI7thebsPIsWcR
/wvDYMC0a3AvcpcZU7yaHQfDg2us+A31vcE+nj1eJ73ubo3CNaHHXAGbexcHwhU1
JiWYHhgmL4Yg2yaUhtaqJzL1zcKL7FF+bJGzaxzBUjdpi3qHLGlnCTgmWwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFFLZSDXbV/a+E46GT1k+5q2ouD7QMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzZkZTJk
Yy1lY2QyLTRhZjgtYmIwYS0zZDA4YWFiZDVlOWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvNmRlMmRj
LWVjZDItNGFmOC1iYjBhLTNkMDhhYWJkNWU5Yi8xL1V0bElOZHRYOXI0VGpvWlBX
VDdtcmFpNFB0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMrdzANBgkqhkiG9w0BAQsFAAOCAQEAa/bCCuK8Sl1S
cLQ8eTyrk8h1NpjxcWSNpg35n5xx+l+YzntAgpGRzrM7ULh6h/cdFWVN5iJDuzfs
9MicEDHS/d7mKXYMLP7HBS6O6POvwXA/n40OueYORD8C2H6NTsrTV4KH/9oxj8dQ
rBVoOwzmcuZNR4xO754SsjAcJfLVyle+5wnHAT4eOqKb8SGZjZeEUMbJ0LGPIfGt
EEcWgPn9rBZ7uDo1AE2XIdQ3GnOfgYpQD7W5a8w9X6cAOURtPXEE83ZHb3HVzwpF
sVPZgMQThkwj6w6owz8u1jjYRsA8vwa3UENhR0mzCDeBymn0PmfKwvCYLFoi9pQI
uI0qprG9cg==
-----END CERTIFICATE-----
Generated at Fri Jun 6 12:18:18 2025 by rpki-client