Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
File: muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer (raw, json)
Hash identifier: aUNRv7GAXcMmZswhPeU+v7NXDTrnN/ISkNkeTB5igjU=
Subject key identifier: 9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196EDAFC1D0F2AFEFE26B064A395AE15E97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:34:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201904
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:af:c1:d0:f2:af:ef:e2:6b:06:4a:39:5a:e1:5e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:34:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:38:02:0c:a6:e1:b3:e3:7e:94:61:39:43:
67:9a:5c:b0:b3:6c:3a:75:08:f0:22:25:be:d5:53:
2a:7b:81:bf:29:06:93:40:60:e5:56:11:ee:1c:f4:
72:07:ea:f0:e2:73:c6:3f:31:7e:69:83:5f:b0:69:
18:e6:b7:29:f4:5a:3d:77:aa:b0:42:4b:34:67:b4:
b6:84:bc:dd:34:f1:e5:d3:cd:19:88:6a:9d:ae:4a:
c0:c6:51:f0:9f:fa:03:c5:a8:e2:bb:88:e5:39:64:
29:7d:ef:73:a9:0e:34:1d:00:af:1f:f6:04:16:67:
d6:de:e2:95:46:40:f1:62:32:e8:4b:e4:bd:91:97:
64:62:f8:80:60:9c:8e:c9:c7:fb:e9:95:2a:56:85:
5d:03:a2:d5:5c:7c:dd:e7:1e:f2:5d:09:ed:c7:f6:
be:23:b0:31:c3:37:be:9e:e4:b6:9b:63:f2:c2:72:
8f:72:b8:7a:47:a3:86:84:f3:c5:34:ab:d3:96:07:
04:3c:a2:59:c0:8f:fd:a7:53:b9:a2:e2:f9:ca:82:
32:7e:1c:6c:80:d5:cb:ef:f6:4c:fa:ed:7b:9a:f0:
45:03:cc:3a:c2:61:5e:86:24:2b:a8:c3:ce:50:1b:
24:61:9f:35:96:60:b5:55:db:51:9b:a9:63:70:46:
9f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201904
Signature Algorithm: sha256WithRSAEncryption
38:fe:65:ba:32:e6:cd:45:08:59:ed:cb:e7:4f:99:9f:e0:2a:
ce:cc:1a:88:0d:4b:e2:d6:31:df:18:0b:bd:5b:33:8a:f9:d7:
8a:8e:57:be:f0:e2:77:22:bb:50:9c:ab:57:a8:18:a4:47:4e:
97:9d:a7:43:1a:b0:e1:dd:25:7c:d1:fe:8c:42:30:b3:52:e4:
82:f8:c0:72:69:b2:6a:f8:48:4f:32:56:5b:fd:a2:53:43:ac:
27:dc:91:36:62:2d:a2:d4:10:69:68:0c:a7:01:e7:17:e1:18:
50:6f:b1:80:eb:7c:75:94:69:07:a0:b5:70:2a:80:67:30:14:
e1:98:0d:e7:e4:a2:3d:e0:de:8b:14:ad:e8:cb:5d:65:a9:bf:
fd:ac:a7:db:2c:41:53:f7:c0:d5:7e:a4:b2:ec:2b:e2:1c:23:
cb:1d:54:81:3f:f4:c8:47:0d:91:46:f2:53:eb:a9:4f:2f:9e:
d6:1c:00:39:5d:8c:c4:17:e4:91:ad:6a:3e:b1:43:06:00:ab:
2f:3e:00:53:f6:c0:5e:59:26:f9:f1:05:78:9b:a1:36:f1:56:
13:b4:af:77:5f:66:27:66:35:59:f3:cf:f2:1f:cc:f3:79:8b:
73:ac:5a:0e:2b:ef:a9:a7:f9:d3:71:e7:ac:e1:f3:b3:15:b3:
73:f7:65:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:43:17 2025 by rpki-client