Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xf04PhaNLsn7w5DqjZmkuvfsO1s.cer
File: Xf04PhaNLsn7w5DqjZmkuvfsO1s.cer (raw, json)
Hash identifier: JZFb5MgsFDpg4I/fvGSBi22OGoCj/R3wRGfK+66U5t4=
Subject key identifier: 5D:FD:38:3E:16:8D:2E:C9:FB:C3:90:EA:8D:99:A4:BA:F7:EC:3B:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197223CB30EA695DF98FF1EDD1602477440
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/34404a-4132-4e83-8e46-390e935beda3/1/Xf04PhaNLsn7w5DqjZmkuvfsO1s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/34404a-4132-4e83-8e46-390e935beda3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 30 May 2025 17:28:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203145
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:22:3c:b3:0e:a6:95:df:98:ff:1e:dd:16:02:47:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 30 17:28:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dfd383e168d2ec9fbc390ea8d99a4baf7ec3b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:13:b8:00:05:d4:a5:ec:6e:15:63:20:ec:
ba:bd:bf:3b:26:37:79:db:4d:4e:c5:84:7e:68:02:
23:d7:a1:7f:98:ab:ad:d4:6e:0d:2c:d7:93:c1:a3:
fd:2e:6a:f6:90:de:be:4a:79:00:d9:1c:17:87:b7:
8f:0b:39:b5:fe:b2:24:1b:4c:50:d2:52:03:f3:6f:
21:86:b7:dd:14:75:bd:da:7e:57:2a:8f:85:96:c1:
6f:7b:d8:2c:bd:79:92:2c:d8:18:fa:37:63:48:10:
5d:16:5a:7f:35:34:0a:01:f3:c7:3b:4d:4c:20:79:
63:ce:c9:3e:46:ba:ef:97:f8:05:a6:05:2b:94:57:
1b:dd:21:fb:08:55:81:d7:45:38:af:f7:90:a1:60:
c2:e4:23:82:cc:e3:ab:9f:d5:40:72:76:46:0f:e4:
8a:7d:c5:7d:74:e8:5c:9b:e4:e9:10:22:1e:c3:47:
c9:aa:e7:dc:9b:a6:cf:39:4e:1a:45:68:a3:5b:e1:
7e:c6:e4:70:27:42:e7:ea:16:4d:1a:db:7e:a8:32:
45:74:cb:1b:f7:8f:ac:fd:0b:9e:44:f4:c0:be:5f:
ac:3e:5b:07:53:01:b2:73:bd:61:78:6c:1d:d5:6e:
97:7d:f2:d6:43:19:7b:b2:e3:5c:81:a2:94:dc:09:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FD:38:3E:16:8D:2E:C9:FB:C3:90:EA:8D:99:A4:BA:F7:EC:3B:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/34404a-4132-4e83-8e46-390e935beda3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/34404a-4132-4e83-8e46-390e935beda3/1/Xf04PhaNLsn7w5DqjZmkuvfsO1s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203145
Signature Algorithm: sha256WithRSAEncryption
44:81:e9:6d:d1:0e:df:da:a0:6c:48:52:9e:dd:ea:33:fb:bb:
de:fe:5f:7d:d8:df:9c:35:95:d8:b9:73:82:2c:12:0d:5d:4c:
3b:78:48:44:a1:61:c2:0d:c7:4b:c2:38:49:22:17:41:21:63:
52:c3:5c:8e:b4:51:0a:39:88:9e:f2:48:17:a3:1d:65:0e:d4:
ee:af:f3:9f:52:c6:45:c9:ce:43:13:23:3f:e3:60:42:ac:9e:
6c:40:01:ab:9e:8e:df:4d:8c:0c:da:46:90:d3:63:fa:a8:4a:
d9:c6:8b:ef:15:43:43:b0:2f:8c:04:4a:33:51:37:fc:09:32:
3f:dc:b5:78:7c:f0:b1:5b:89:27:aa:04:3b:57:e6:11:3e:a7:
26:d0:7e:37:f3:d1:8f:05:d3:90:d7:ed:b9:62:b6:d1:1e:60:
1c:9c:ae:a8:8b:1d:9d:5d:d5:40:5e:42:ad:a4:8f:97:19:e4:
0c:23:ba:ba:89:fd:54:aa:21:41:c5:99:bc:3a:88:19:ae:8c:
cc:8e:4c:0f:6e:b0:a0:86:0d:d2:23:58:91:80:2a:5f:40:a5:
e8:fa:61:f6:57:30:b6:db:7f:5d:0a:4e:b7:54:5b:d8:62:55:
97:71:42:98:1b:9c:6c:fd:c1:36:73:96:20:ad:5b:67:bc:17:
96:49:f4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:47:36 2025 by rpki-client