Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
File: qnv9Qg21yuutoaIFXYe8faKwnAc.cer (raw, json)
Hash identifier: 0oS8eMyzBxMEb1zaZTAzytekFEnB8qyAelxnUP5BBy8=
Subject key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019718B7DA2E9C913F765F820E083B33C07D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 May 2025 21:06:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211377
IP: 2001:67c:26c0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:b7:da:2e:9c:91:3f:76:5f:82:0e:08:3b:33:c0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 28 21:06:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:8c:68:87:a5:98:1e:93:9a:d8:2e:20:24:
19:58:ee:2e:86:4c:9b:ab:8f:43:d4:c0:ea:ad:a2:
d1:b9:ce:46:8d:10:8f:b5:f9:0b:76:de:10:3e:b2:
c6:18:b2:46:a0:dd:39:ad:99:e3:93:48:f2:13:e9:
83:ee:c1:35:c3:6e:42:25:be:9e:64:ce:08:30:3c:
87:45:a4:44:92:c0:1a:3f:73:bf:f2:6d:19:3a:6e:
c5:fe:f8:84:d6:d9:bb:23:6e:06:a5:27:e1:6b:57:
2b:5e:27:d9:1e:0a:21:70:03:54:82:46:48:f8:17:
98:0d:a1:54:68:2e:43:1a:21:30:18:26:54:af:23:
0b:34:90:f1:b8:ad:a9:63:b1:ba:da:24:f5:49:4f:
09:f3:3f:a7:45:94:de:ca:d0:73:80:77:e6:11:3d:
0a:ca:b4:b6:92:2c:58:92:76:e9:dd:8f:8f:22:2c:
89:98:00:ba:9b:84:42:b0:6a:61:11:10:e1:27:d8:
03:10:38:ef:3b:87:41:35:82:41:2c:3c:87:0b:a4:
ca:52:a7:f8:5a:b7:82:3b:8a:53:9c:37:90:5f:d5:
b6:e2:fd:ad:94:19:3a:ab:3e:10:0b:2b:b9:43:a2:
9b:f0:43:27:5b:8d:09:6b:1f:73:e5:4a:fe:28:b4:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:26c0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211377
Signature Algorithm: sha256WithRSAEncryption
5f:4e:64:47:8a:a6:17:7f:5d:1b:7b:f3:b8:6d:1b:e7:ea:72:
4a:7b:38:5b:63:22:c8:8c:7e:df:f0:fe:ac:49:a8:dd:eb:23:
e4:1d:e8:a4:27:2a:d3:12:1a:64:39:e1:34:3b:35:06:a7:2c:
c6:92:23:f9:e4:c3:c1:5f:6b:e0:2d:10:1c:2e:89:e2:ae:ff:
d9:a0:23:eb:bf:3b:2a:39:b6:94:33:76:98:66:07:ae:f4:46:
46:f2:71:e3:16:6c:eb:fc:94:be:9a:0d:01:e5:a5:af:26:a3:
48:03:11:20:2d:14:87:c6:e6:ee:52:8b:a5:4e:0a:05:09:ec:
c6:14:26:52:59:eb:a2:b9:1d:bc:dc:72:4f:bd:16:d2:66:69:
e0:10:1a:ab:3e:75:3e:b3:28:47:69:54:b5:8b:90:b6:72:27:
69:7b:87:43:8e:23:73:66:a2:12:f9:da:32:d3:d8:47:2b:f4:
af:eb:47:21:15:0c:49:02:77:fa:4b:55:a2:1d:80:8e:67:18:
93:0c:7e:de:7d:dc:43:62:be:9a:97:e1:14:b2:ae:2f:7d:ac:
c0:e5:5c:9e:dd:39:53:a4:b6:70:12:e7:cb:7c:4e:37:76:a0:
73:0e:9f:b3:e3:62:15:e4:a5:70:1f:bf:c7:11:19:4e:d9:a1:
5b:1d:b9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:53:52 2025 by rpki-client