Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
File: cIKkpfKWFe2f7k9nURSF40z3EuA.cer (raw, json)
Hash identifier: MKlEV+y4PBtt+1xZ5T0tRkQWwI17UxQU0dpIe3baLP4=
Subject key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01971DA45F4C6E6B922219038769D12A6679
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 May 2025 20:03:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214481
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1d:a4:5f:4c:6e:6b:92:22:19:03:87:69:d1:2a:66:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 29 20:03:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0b:51:4c:bb:84:24:ce:c6:4b:06:e9:6a:62:
e0:51:3f:f2:6b:3f:7a:21:e8:32:3c:d7:06:98:a6:
e3:63:bb:e5:6b:d9:f4:10:cd:fb:f8:e3:b5:47:30:
78:09:1d:3d:24:dd:f1:a2:98:b2:09:19:91:7a:7c:
c8:32:e3:37:49:40:48:c7:4a:f3:b0:56:88:01:63:
2d:bd:ad:5a:a4:65:3d:a7:61:4f:02:fd:c7:c5:c7:
07:43:0d:b3:b2:d4:44:83:84:38:27:65:1a:3c:7c:
e7:78:44:be:e1:44:95:8b:6a:3e:a1:99:bb:0c:df:
49:6c:f8:b9:16:7b:84:4b:57:45:6f:06:ee:16:e2:
b0:0f:ed:61:d7:ac:68:8e:11:d7:1f:91:b4:0b:3b:
66:41:49:9a:40:62:82:f0:28:26:62:49:75:6d:a3:
16:bb:c0:e7:c4:e5:12:1c:85:9f:47:f2:21:78:2a:
e2:61:e6:d5:c8:f7:28:ea:c9:d2:cd:0a:89:b8:c3:
3d:d5:8e:f1:d7:eb:a8:a1:f2:64:83:e9:03:c9:a3:
23:41:34:2a:57:42:11:fa:a4:e4:9f:b4:ba:f4:7d:
1b:26:d9:bc:2b:0a:9e:fe:4e:49:4c:92:03:9c:fc:
9f:63:8f:37:8a:11:4d:fa:46:ed:b6:04:68:ee:95:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214481
Signature Algorithm: sha256WithRSAEncryption
30:b7:e3:95:d5:1b:2c:c2:7d:53:df:8a:14:4e:ff:8d:e0:64:
91:ec:6c:32:d2:f0:36:3d:79:dc:49:af:aa:9d:38:5b:1d:7e:
bb:26:e8:a1:2e:64:a2:f8:26:ad:0a:9d:b7:b6:24:5b:e6:2d:
72:67:f4:b4:63:f6:73:dc:ed:8f:72:bb:9a:c8:04:5f:f4:0b:
e9:b6:4f:8a:9b:ac:9c:42:2a:40:20:e7:12:8f:17:b2:be:d5:
1a:d1:aa:72:3d:3a:68:df:1c:d1:09:92:2a:2e:06:c7:53:82:
02:4e:1c:dc:ec:2e:f6:57:d8:5b:35:50:38:b2:6e:bc:6e:c9:
ba:1f:4e:6b:c7:f0:e4:9a:4d:98:7b:ce:b9:ed:9a:48:47:f3:
48:56:d2:4a:84:5e:9b:d3:44:53:5d:2e:73:ae:17:04:19:12:
7f:9e:e5:b5:e2:88:57:b4:d2:39:ff:6e:5d:8f:a1:79:ae:2f:
03:c7:50:d5:b0:79:aa:b5:bb:7e:be:b7:37:7b:33:da:73:18:
ce:f3:85:da:cf:92:0d:b1:cd:a0:b1:4a:ae:e8:2f:25:69:28:
c4:f5:7a:59:97:e0:b8:1b:46:dc:cf:71:60:df:3a:09:15:4a:
f4:6a:e4:22:d4:2a:5f:5c:50:a9:9e:6d:46:47:98:15:57:8b:
4f:12:90:ce
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZcdpF9MbmuSIhkDh2nRKmZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNTI5MjAwMzIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDgyYTRhNWYyOTYxNWVkOWZlZTRmNjc1MTE0ODVlMzRjZjcxMmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QtRTLuEJM7GSwbpamLgUT/yaz96
IegyPNcGmKbjY7vla9n0EM37+OO1RzB4CR09JN3xopiyCRmRenzIMuM3SUBIx0rz
sFaIAWMtva1apGU9p2FPAv3HxccHQw2zstREg4Q4J2UaPHzneES+4USVi2o+oZm7
DN9JbPi5FnuES1dFbwbuFuKwD+1h16xojhHXH5G0CztmQUmaQGKC8CgmYkl1baMW
u8DnxOUSHIWfR/IheCriYebVyPco6snSzQqJuMM91Y7x1+uoofJkg+kDyaMjQTQq
V0IR+qTkn7S69H0bJtm8Kwqe/k5JTJIDnPyfY483ihFN+kbttgRo7pWJ/QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFHCCpKXylhXtn+5PZ1EUheNM9xLgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzdiMjg4
NS0zY2YzLTQzNjctYjY0YS05OWUzNWM3MDk0ODYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvN2IyODg1
LTNjZjMtNDM2Ny1iNjRhLTk5ZTM1YzcwOTQ4Ni8xL2NJS2twZktXRmUyZjdrOW5V
UlNGNDB6M0V1QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNF0TANBgkqhkiG9w0BAQsFAAOCAQEAMLfjldUbLMJ9
U9+KFE7/jeBkkexsMtLwNj153Emvqp04Wx1+uybooS5kovgmrQqdt7YkW+Ytcmf0
tGP2c9ztj3K7msgEX/QL6bZPipusnEIqQCDnEo8Xsr7VGtGqcj06aN8c0QmSKi4G
x1OCAk4c3Owu9lfYWzVQOLJuvG7Juh9Oa8fw5JpNmHvOue2aSEfzSFbSSoRem9NE
U10uc64XBBkSf57lteKIV7TSOf9uXY+hea4vA8dQ1bB5qrW7fr63N3sz2nMYzvOF
2s+SDbHNoLFKrugvJWkoxPV6WZfguBtG3M9xYN86CRVK9GrkItQqX1xQqZ5tRkeY
FVeLTxKQzg==
-----END CERTIFICATE-----
Generated at Fri Jun 6 23:34:05 2025 by rpki-client