Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k_1xQs81pwNZl0trWjfXBp1Njj8.cer
File: k_1xQs81pwNZl0trWjfXBp1Njj8.cer (raw, json)
Hash identifier: g2TuMGZBbtJ2gmaacXNbdnz5pl7cUmIUr9PNPgsyQK4=
Subject key identifier: 93:FD:71:42:CF:35:A7:03:59:97:4B:6B:5A:37:D7:06:9D:4D:8E:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019579FBF71D5E3512CDF7402D0E9AD93BDD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/1/93FD7142CF35A70359974B6B5A37D7069D4D8E3F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 09 Mar 2025 08:18:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198025
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:fb:f7:1d:5e:35:12:cd:f7:40:2d:0e:9a:d9:3b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 9 08:18:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93fd7142cf35a70359974b6b5a37d7069d4d8e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:c7:44:1b:b7:aa:ca:ce:44:9e:d6:ca:33:
5f:96:c5:5d:30:df:1c:02:f0:79:b9:a7:91:df:dc:
af:36:d7:c4:b4:fa:2f:97:59:a9:2d:e8:d3:20:f7:
6e:ea:0a:f6:73:fe:0b:ae:82:d5:da:01:0c:1c:14:
7f:54:e2:16:24:42:45:9a:f5:8a:28:5e:97:86:c3:
d7:b2:de:f2:44:5f:8a:56:fc:50:b0:31:81:c4:00:
57:b3:68:21:29:2b:a3:38:e1:bb:25:d5:7b:b5:f6:
4f:a7:0c:ca:3a:b1:6b:75:c7:bf:8c:6d:39:3c:75:
4e:d5:bf:c3:27:90:20:72:39:b5:c8:9c:00:26:cd:
17:48:e5:47:02:8d:79:04:e4:af:05:18:ec:a6:98:
ff:7c:c9:32:f0:da:1a:9a:53:fe:29:82:fa:a4:d1:
5c:a3:ce:3c:50:07:51:fe:38:f8:33:45:0f:d6:7f:
46:20:6a:70:a5:2d:a8:08:05:ad:e7:7f:53:58:ba:
ea:a0:90:9f:9f:29:43:ca:6c:b1:e3:a5:68:70:ca:
13:4e:d4:f2:b8:5d:27:db:d8:b4:b0:bf:47:c2:c8:
ef:49:24:71:3a:aa:4c:90:ee:f7:aa:5c:d9:a0:8a:
09:d1:e5:df:8d:78:aa:41:c1:1d:75:44:7d:36:2d:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FD:71:42:CF:35:A7:03:59:97:4B:6B:5A:37:D7:06:9D:4D:8E:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/1/93FD7142CF35A70359974B6B5A37D7069D4D8E3F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198025
Signature Algorithm: sha256WithRSAEncryption
87:81:39:0a:ec:32:9e:91:67:02:5c:c3:ac:ef:57:1d:82:9d:
24:cd:c4:a3:fd:61:b6:fa:c0:72:45:c2:7b:0b:b4:2a:7e:27:
6a:6d:c9:28:af:c6:74:d3:c8:63:de:4b:80:53:73:97:46:58:
72:26:ab:ea:77:74:a0:47:39:ac:be:94:c4:02:42:b3:9c:e2:
16:f7:a4:8b:c4:c1:5a:06:7a:12:1b:b2:e0:d2:c9:1b:4f:05:
b0:64:c6:54:4c:c1:15:d1:24:0e:d9:8e:68:6b:06:2e:bd:49:
d2:f7:ca:e1:ce:54:17:18:0b:26:70:ed:00:bd:9d:f1:7a:96:
eb:6d:c6:7a:6c:97:d4:60:5f:bb:0a:f3:22:f9:d4:ef:28:fc:
51:aa:3b:fe:c6:c4:46:8e:59:cf:f4:85:ac:ec:99:5c:68:27:
ce:31:2c:32:11:bd:24:a3:1c:79:43:9f:9f:29:94:49:77:07:
dc:18:2b:67:51:53:27:ba:a3:a3:00:f4:74:08:f6:8c:79:68:
90:f9:b2:b2:fa:07:70:57:30:a3:61:2c:81:e8:15:5c:79:fd:
f5:4f:6b:9f:c1:73:72:3b:d7:3d:69:22:74:52:fc:44:1f:9a:
d4:03:08:2b:6e:ba:c5:7e:e7:bc:e7:56:09:67:bc:bc:c3:9b:
2d:94:15:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:10 2025 by rpki-client