Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
File: uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer (raw, json)
Hash identifier: ocifaSohtobJC7uyPbGfPmJ/CCHt8CuPjcAj1ZZPyxo=
Subject key identifier: B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196EDA96791708438534C08D23E9FE1B59F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:27:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43862
AS: 57921
IP: 91.234.142.0 -- 91.234.144.255
IP: 194.1.254.0/24
IP: 195.234.16.0/23
IP: 2001:67c:2890::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:a9:67:91:70:84:38:53:4c:08:d2:3e:9f:e1:b5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b945d22d376fca197b2e84e1ee5732034432ffad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:8f:88:df:c2:6c:11:ff:f4:e3:39:ab:d9:
39:f1:b4:6e:14:bc:99:b7:69:06:f0:4b:9c:13:82:
c8:ef:90:24:21:c0:9b:e9:f2:1c:be:c5:0a:9f:de:
02:d8:4b:b4:3c:43:fd:09:f7:24:aa:09:2c:f9:57:
25:4f:dd:6a:66:12:12:34:1c:c3:6e:2d:7c:86:61:
d8:db:94:4e:7b:4d:42:cc:4f:9d:33:55:1b:88:2b:
9a:0d:4d:65:4a:df:82:04:c0:58:b5:8a:8c:2d:41:
20:6c:f4:97:0c:93:3b:63:34:0c:7a:de:04:4f:fd:
76:2f:38:f0:75:7e:a1:14:a2:10:d8:71:8d:ca:13:
78:43:c7:2b:09:e2:eb:48:48:76:b3:82:09:8a:71:
92:03:a2:08:56:cb:b0:cd:28:5d:32:dc:ac:47:7b:
e5:f3:5a:67:fa:fe:cd:3f:2a:19:21:39:7c:13:5f:
37:c0:dc:45:59:d4:08:7e:cd:2f:45:3f:dd:6f:d3:
eb:48:52:0f:ca:1e:dd:99:f7:73:4f:46:91:72:d2:
56:48:e9:fc:9e:37:62:5a:d8:66:40:d1:c3:6b:2e:
fe:63:71:cf:39:3b:cd:78:16:95:c6:11:ca:fd:ce:
5d:31:5d:77:e0:28:85:30:11:24:50:42:2b:e6:10:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.142.0-91.234.144.255
194.1.254.0/24
195.234.16.0/23
IPv6:
2001:67c:2890::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43862
57921
Signature Algorithm: sha256WithRSAEncryption
39:db:4e:72:d0:8c:d8:19:8f:e9:37:d1:d4:c2:10:7e:e8:ea:
ae:e3:d0:33:c8:41:98:59:48:7f:c6:28:19:33:b0:2f:cb:0e:
9b:cb:11:9d:58:a6:9a:3a:c7:7a:44:e6:1d:a9:c2:6d:5d:06:
0b:f6:3b:9c:77:2f:5e:61:b8:5d:81:73:c2:38:ec:1f:0f:ae:
28:b3:9f:c7:0c:c9:e2:d3:a9:33:67:2e:a9:10:84:f4:85:c8:
d2:c1:15:28:cb:77:1c:d5:fb:af:92:2e:fd:67:47:81:9b:1a:
98:5e:32:63:76:f9:57:c1:d6:7a:39:df:77:22:98:72:fb:29:
9e:8d:1f:e6:02:7b:8a:bf:0d:68:af:78:11:61:d2:3b:74:9e:
ab:6c:f8:f9:28:cc:5d:6d:eb:eb:c4:5b:53:89:cc:a0:f5:79:
27:b2:fe:6e:82:b9:c0:a1:e8:2d:7c:49:3d:f2:1e:bf:6a:b0:
ba:f1:af:56:f1:31:44:7d:a5:ac:c3:93:7e:84:9a:7c:06:b2:
70:bc:73:48:e0:56:8e:b7:46:e0:48:ba:4d:51:b6:21:39:c1:
a2:7a:4d:f2:bd:64:d7:e4:d4:9b:de:ac:44:c8:6e:33:a7:be:
b5:e3:83:f5:82:52:c1:0e:0b:48:ad:67:4b:bc:c6:9c:75:02:
a2:87:03:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:16:04 2025 by rpki-client