Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
File: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer (raw, json)
Hash identifier: J8zI/Pma+4PWtDBh2QywMkvbcPQ36ITMu/wgc0s8t2c=
Subject key identifier: FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196EDB5E8FEA5E4C20E56A5BD260D4651F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:40:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205355
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:b5:e8:fe:a5:e4:c2:0e:56:a5:bd:26:0d:46:51:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:40:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe51bda6cdc898f674441fce5c7421b46f611d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:90:48:c4:75:d0:df:08:c4:58:de:01:7b:
2c:ca:66:17:09:f8:5d:c3:50:5c:f2:c0:8c:e1:7f:
6d:0b:42:ff:53:48:8f:73:61:8f:97:58:67:94:cf:
33:5d:d9:fc:39:9d:a0:f7:b4:63:34:c8:f6:3d:a3:
94:b7:25:9d:ab:0c:76:be:96:b1:5a:a8:fd:5c:8d:
3a:f8:16:e6:e6:fd:de:5e:a2:9b:ea:92:0e:6c:0b:
7c:bf:3e:72:d0:dc:38:94:61:4b:92:65:4f:54:49:
63:a3:b0:bb:08:9f:c6:a7:12:93:af:d8:ea:40:be:
90:00:f4:13:64:33:e3:9e:0e:ce:e8:ba:e9:a8:61:
61:9d:31:0b:a3:e2:32:d4:ab:d0:92:e6:58:c8:47:
55:bb:e8:7c:b8:e8:e9:fb:79:94:13:5b:5f:91:db:
3b:3a:43:5d:f9:42:f4:b7:ed:a8:33:f0:0e:5d:36:
09:61:da:1f:38:ea:cd:03:74:5f:f1:bf:1a:34:43:
b5:c5:a0:73:e7:45:2d:4c:e1:f1:42:34:a1:f4:c0:
5f:f1:d5:41:e3:f6:a1:a7:4d:da:75:f3:4d:3c:02:
7d:97:20:dc:31:3a:bb:39:74:1d:74:b6:43:f6:42:
7b:ef:d8:99:22:d4:2a:7c:3d:6a:13:cf:f5:3f:31:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205355
Signature Algorithm: sha256WithRSAEncryption
91:9e:74:64:2f:ed:e9:95:a1:13:8b:4d:8d:ec:c3:a5:48:cd:
91:55:ad:d4:1c:36:e0:da:c4:1a:5b:7a:24:c1:ba:40:ec:d3:
1d:aa:fc:7e:fa:1a:5d:0d:66:24:9d:6a:b9:e6:39:b6:e9:05:
36:92:54:a9:6e:71:bb:53:00:76:5f:38:27:c8:91:c4:e4:48:
29:24:d9:13:31:db:25:0d:f2:37:0f:e0:41:7e:ea:04:06:fe:
b2:ca:bb:d0:f1:3a:50:38:16:1f:1e:c7:4d:24:31:fc:f6:fa:
fc:6c:c1:e0:15:da:b7:6c:0b:9e:f3:8a:69:6d:41:3a:57:16:
87:df:dc:58:7c:e3:39:89:45:1d:1a:45:58:08:53:6c:1f:8f:
ee:0d:7c:23:42:31:c7:4a:51:3f:46:26:30:e9:f3:84:bc:ac:
0f:3b:e1:53:8b:04:b9:1b:78:2c:95:e2:44:5b:3d:8c:07:a0:
0b:c3:8b:14:07:4d:ba:1e:ea:47:64:8c:ef:d0:4c:6c:41:ac:
33:4f:eb:43:88:2d:57:84:46:3b:a4:5c:f8:59:c3:95:7c:67:
b6:1d:83:47:40:3c:09:a9:4a:8a:89:17:4e:88:e4:44:44:12:
c8:3c:1e:43:96:49:d3:74:13:49:86:c7:28:46:26:bc:db:c2:
27:94:fa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:39:42 2025 by rpki-client