Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
File: _v9e0ddTW8-gPh8oisLHdWobEWA.cer (raw, json)
Hash identifier: 20YRekAzkbCi95oaytZUfnXjTfIzAO2y49d16bWoBkY=
Subject key identifier: FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196ED86DC6248B9842AD837CD61198CEE93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 11:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199694
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:86:dc:62:48:b9:84:2a:d8:37:cd:61:19:8c:ee:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:03:68:6b:6a:1d:76:f3:10:07:54:06:56:f5:
94:3f:8f:5a:a9:d2:29:ea:f1:e9:0a:45:ff:65:2c:
bc:a1:25:31:0f:c4:fd:87:1a:f5:3e:6c:62:a9:c9:
41:09:19:1e:87:f0:77:7a:b7:8c:b1:2e:8d:67:d9:
e9:6c:96:3b:65:65:64:15:1f:42:a8:f9:12:23:38:
9e:ec:31:82:4c:33:9c:7f:65:68:97:2d:2c:e0:de:
53:cd:fd:63:cd:5c:09:09:90:ae:35:ed:ed:0a:9c:
f2:dd:36:ce:ea:09:18:cd:bd:b4:93:2c:b4:d8:07:
0d:51:3d:c6:d7:bd:f6:72:33:83:8c:a6:39:ef:56:
4d:50:0a:39:47:27:70:20:90:ec:05:51:6e:b5:44:
a6:50:3f:1f:53:61:6d:3e:66:0b:1d:7c:a2:29:a5:
61:13:14:b0:d6:eb:13:07:2c:19:3d:32:a7:70:e8:
a2:43:ce:04:43:75:fa:5d:98:a1:d3:32:7d:de:38:
75:b6:a3:7f:68:71:1e:68:7e:d9:81:8e:a0:e5:f8:
6a:3e:04:9b:ba:e9:af:92:55:68:68:b3:c7:90:d8:
45:88:78:4f:7c:a6:2c:68:f1:22:81:fb:d9:9a:c4:
fd:fb:36:0e:05:b8:38:00:9b:61:c7:6d:ea:c0:d8:
af:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199694
Signature Algorithm: sha256WithRSAEncryption
a2:0b:40:30:39:2d:fb:9f:31:c3:66:4f:a6:7d:0c:db:5f:d1:
86:3f:51:dc:36:99:cf:ac:35:01:14:f5:5d:46:7f:52:c7:f7:
e8:14:4c:68:91:db:09:5b:e2:35:b0:42:23:c1:61:02:1f:54:
67:af:30:19:e1:59:de:bd:26:3c:69:99:54:f7:31:f6:01:28:
6e:34:05:77:b9:ca:8d:5b:2f:d7:27:68:b2:22:84:ae:a3:ec:
49:a9:7e:2c:37:30:90:32:4f:fc:38:0b:89:0f:06:cc:d9:fc:
85:0f:4e:95:e7:6d:5f:a4:a2:0f:cf:30:16:90:6b:3c:28:ae:
32:e6:17:96:96:0c:29:07:ea:0d:f7:90:87:d0:3d:a6:23:07:
58:82:28:18:a2:ba:68:5e:49:dd:6b:f3:c8:43:22:f1:d1:8d:
7d:89:c4:28:b4:f2:02:58:d6:15:e0:ef:cd:de:76:c1:58:94:
1a:45:94:78:be:c3:6c:79:a1:08:f6:5a:11:42:b5:24:99:3f:
a7:f1:79:f0:56:ba:7d:a7:1d:cf:74:24:56:02:04:ba:a6:bb:
0b:2a:d8:8e:58:c8:72:10:ee:23:1d:d4:c4:2c:a7:f8:02:5a:
d5:a5:ca:3f:a7:fb:8e:80:71:7f:d8:75:b4:1c:92:1b:26:da:
ce:76:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:57:34 2025 by rpki-client