Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer
File: gXS2uiCeYit5ihT86qlEdi-nYpo.cer (raw, json)
Hash identifier: 5YBDQyz+sRcpZ1qmzOxCxJMR+Q7ab4hejHB5I8oBk3c=
Subject key identifier: 81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196D954EBC50CD73F61EC29EC8D6A28B31A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 16 May 2025 13:42:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211747
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:54:eb:c5:0c:d7:3f:61:ec:29:ec:8d:6a:28:b3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 16 13:42:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8174b6ba209e622b798a14fceaa944762fa7629a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:62:2c:e8:75:27:a1:8d:bb:c4:31:a5:99:
ee:01:07:4e:a6:03:11:1e:dc:08:00:0f:9c:04:5f:
57:68:0b:19:d6:81:5a:88:c2:a4:c2:50:2a:0a:04:
a6:4c:38:32:f7:c0:ab:6f:cf:62:f8:71:33:33:f8:
dd:2a:af:56:0b:ce:47:06:83:4f:9d:31:0e:c2:94:
3b:4a:85:33:79:34:3f:df:fa:71:61:23:ad:41:97:
68:d7:09:0d:6a:fe:d5:5c:f0:21:56:e8:9e:a4:f6:
71:3c:b6:ff:36:96:f9:dc:ce:3e:7f:d3:8f:c8:05:
20:f0:cc:f6:04:8d:fb:48:40:d7:f7:be:f8:99:f4:
6a:f9:ac:15:2a:a2:33:23:e2:d2:ec:fb:01:c0:45:
45:03:31:69:60:a1:5b:f4:ad:d4:d9:09:b6:86:45:
b2:d3:96:32:cf:94:37:3e:29:d7:22:c0:27:02:d0:
aa:9b:fa:27:6b:6c:bd:8f:e8:f0:7c:61:a6:a0:1c:
eb:76:b6:0e:5d:5b:7d:cc:8c:93:4b:cf:c5:d4:04:
36:e7:50:c8:68:ab:69:ce:cd:0a:26:90:5e:1b:17:
6e:50:6d:23:ed:b3:68:31:07:3e:0c:f6:f4:8f:da:
c8:be:45:f0:7a:3c:84:ad:0b:a9:d2:13:ad:74:85:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211747
Signature Algorithm: sha256WithRSAEncryption
24:ed:03:00:01:53:23:80:92:82:ed:14:f1:5f:a5:dc:b1:25:
96:4e:20:f9:c8:f4:6a:5a:3b:4f:e9:72:59:b8:ed:e3:a3:1c:
aa:b5:7a:fb:59:ed:d8:9b:c3:fa:10:29:10:15:5c:8f:a7:d8:
97:86:6f:9c:30:45:a7:b0:e7:38:43:95:88:bc:2f:73:f4:22:
49:2d:73:90:b0:b9:ac:46:bf:c3:01:a4:95:91:e9:9a:67:34:
c7:f1:01:39:34:b1:c2:2f:f9:ff:e6:a2:e8:f8:72:97:c8:73:
ae:f4:de:e6:27:0e:a9:ca:7f:e4:e8:ac:3a:13:00:1d:bc:bf:
dc:d0:a6:60:5c:7c:24:8b:df:71:fb:ef:e5:82:0c:be:da:84:
45:94:4a:e6:51:55:a7:6d:5d:a7:e0:7e:d3:cb:9d:ce:88:82:
2a:11:ab:89:a1:1d:cd:e6:b0:a8:5a:88:1d:58:fe:0c:c4:5d:
fa:c8:ca:58:4c:88:f2:f4:3a:7d:99:23:11:f7:a1:45:49:5b:
d8:c2:46:02:ef:18:0e:43:bd:54:1b:7b:53:43:fe:f6:86:94:
5e:16:f3:a6:75:15:a3:8d:6a:6e:6a:fd:b8:a1:a6:1c:83:15:
41:c0:a2:c6:f3:dd:a9:b4:db:77:16:07:89:79:15:46:a2:c3:
a0:95:b8:8c
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZbZVOvFDNc/Yewp7I1qKLMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNTE2MTM0MjIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTc0YjZiYTIwOWU2MjJiNzk4YTE0ZmNlYWE5NDQ3NjJmYTc2MjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFBiLOh1J6GNu8QxpZnuAQdOpgMR
HtwIAA+cBF9XaAsZ1oFaiMKkwlAqCgSmTDgy98Crb89i+HEzM/jdKq9WC85HBoNP
nTEOwpQ7SoUzeTQ/3/pxYSOtQZdo1wkNav7VXPAhVuiepPZxPLb/Npb53M4+f9OP
yAUg8Mz2BI37SEDX9774mfRq+awVKqIzI+LS7PsBwEVFAzFpYKFb9K3U2Qm2hkWy
05Yyz5Q3PinXIsAnAtCqm/ona2y9j+jwfGGmoBzrdrYOXVt9zIyTS8/F1AQ251DI
aKtpzs0KJpBeGxduUG0j7bNoMQc+DPb0j9rIvkXwejyErQup0hOtdIVfnwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIF0trognmIreYoU/OqpRHYvp2KaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2RjOTA4
Mi01YTlmLTQxZWUtOGQ0NC02MThjZDA2ODJiMTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvZGM5MDgy
LTVhOWYtNDFlZS04ZDQ0LTYxOGNkMDY4MmIxMC8xL2dYUzJ1aUNlWWl0NWloVDg2
cWxFZGktbllwby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM7IzANBgkqhkiG9w0BAQsFAAOCAQEAJO0DAAFTI4CS
gu0U8V+l3LEllk4g+cj0alo7T+lyWbjt46McqrV6+1nt2JvD+hApEBVcj6fYl4Zv
nDBFp7DnOEOViLwvc/QiSS1zkLC5rEa/wwGklZHpmmc0x/EBOTSxwi/5/+ai6Phy
l8hzrvTe5icOqcp/5OisOhMAHby/3NCmYFx8JIvfcfvv5YIMvtqERZRK5lFVp21d
p+B+08udzoiCKhGriaEdzeawqFqIHVj+DMRd+sjKWEyI8vQ6fZkjEfehRUlb2MJG
Au8YDkO9VBt7U0P+9oaUXhbzpnUVo41qbmr9uKGmHIMVQcCixvPdqbTbdxYHiXkV
RqLDoJW4jA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:42:42 2025 by rpki-client