Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
File: YE6Z8sS9AZ63cxUmRSbdauHWK00.cer (raw, json)
Hash identifier: BLJQa5cVGF2xPLviqd6VyQV9vEyjqRq/9yAAGEXC1Ts=
Subject key identifier: 60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196ED9D7C1073F601037ACD12CF4253DEBE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:14:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35198
IP: 193.238.200.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:9d:7c:10:73:f6:01:03:7a:cd:12:cf:42:53:de:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:60:97:06:40:db:28:f4:6c:cc:e7:29:1a:
ca:85:b7:28:92:f7:7b:17:62:43:c6:c2:a0:37:d0:
82:8a:c3:94:72:af:c5:38:00:cf:6c:75:23:a0:4a:
bb:d6:45:ee:58:86:15:38:ef:b3:e5:f3:65:02:a1:
b8:df:5d:95:3a:53:80:9f:91:cb:91:8e:75:4c:d6:
0b:f9:89:b1:6b:9c:e8:d0:ae:88:ba:ea:b4:c4:c2:
b0:17:3d:03:f2:47:bf:62:91:bd:25:79:77:fc:cc:
b9:ec:d8:0c:b4:05:79:ac:f3:3b:58:0c:c3:1d:09:
89:90:12:60:b7:f9:ff:2d:06:0d:81:91:49:8e:c1:
09:83:19:cd:29:b9:dd:6b:4e:a6:42:55:bf:9e:5f:
e6:6b:1c:b3:f9:33:3f:d1:fa:17:b7:d9:4c:4f:49:
d9:2d:32:59:06:79:cc:fb:78:bd:64:65:be:23:06:
9f:d9:3c:2c:2d:c5:18:0c:c2:76:3f:13:96:e5:ac:
a3:ad:2a:3d:21:13:61:27:e6:da:74:83:a6:6a:92:
4f:f3:e1:81:e9:66:88:d1:8d:b4:ca:7a:e6:0d:a1:
96:fb:70:22:9f:22:3f:45:a8:ee:5e:e6:3d:c1:97:
4e:22:f7:f1:97:43:c4:28:c5:14:f6:f2:0f:72:97:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.200.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35198
Signature Algorithm: sha256WithRSAEncryption
6c:76:81:c0:56:7c:9c:47:49:1c:28:8e:58:1e:9e:18:bb:61:
b7:2c:ac:91:87:2b:c5:71:36:1c:83:58:90:2a:78:3b:5b:80:
0b:dd:a4:c7:e1:f3:ec:2c:30:db:03:3b:82:bd:7f:bb:cc:1d:
25:83:58:77:10:8b:22:17:56:be:14:d5:2a:c8:ad:4d:4d:8c:
d4:7f:98:f7:40:57:4e:74:90:0b:af:6a:20:36:5c:e9:70:cb:
f5:ac:6c:c4:c1:48:23:1c:e0:4b:d3:89:94:b4:e5:79:fb:81:
91:07:9c:96:d5:64:8e:12:44:af:7d:ab:b9:b9:e0:72:3f:e4:
8f:f2:23:b8:14:25:45:7a:41:9c:af:68:46:ea:ce:b9:43:41:
e4:c6:6d:b4:a9:d9:14:a5:d4:f5:c4:92:3a:ce:ac:df:52:7b:
da:44:d0:94:ba:dd:3e:2c:14:63:f9:3b:83:be:c8:d6:0c:4e:
f9:09:78:b0:9c:e2:c8:dc:34:fd:39:0c:19:52:28:32:86:18:
77:86:55:5d:fd:c7:37:7d:c5:49:fd:bd:7a:fa:06:38:99:fa:
f7:19:f9:d0:bf:02:dc:7d:bf:3a:47:50:6f:dd:99:d6:cb:22:
39:a4:19:7e:da:9d:97:d8:15:6c:e1:bb:4e:c8:8a:51:4e:83:
2f:ab:b7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:29:17 2025 by rpki-client