Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
File: ugpNIpkX1GVzikghtu7FvrJObuQ.cer (raw, json)
Hash identifier: BhN6UkmAh1Chh1u/yHQ9uWx7UjyEA5ckwh/eZcAfav4=
Subject key identifier: BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196ED92F1CF61C37F889391EA37D43CE200
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:02:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213521
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:92:f1:cf:61:c3:7f:88:93:91:ea:37:d4:3c:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:02:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:37:42:45:56:eb:9d:f7:4e:58:72:13:6b:
7b:86:2b:cd:52:36:ee:c9:5f:36:0e:6f:68:75:0b:
ed:b7:d4:3e:99:a5:b6:15:b9:02:6a:6e:2c:62:57:
be:f4:a8:a7:c5:1b:d9:c6:b7:84:07:7f:cf:e8:65:
eb:23:f8:29:71:4f:c6:c0:24:73:39:99:f9:30:da:
8b:e6:fc:ce:e7:da:84:30:fd:e8:b1:7f:48:0d:05:
6e:53:64:e7:25:06:51:bf:c7:b8:71:e6:48:56:e9:
29:88:f6:82:7b:dd:f3:9b:78:c5:03:7c:8d:ec:88:
19:ec:9b:61:8e:c6:9a:d9:39:a9:a1:3f:ac:d0:6f:
44:7e:95:92:02:6e:c5:f9:92:4c:86:5f:9a:bc:46:
d7:26:a4:31:a9:81:8e:88:c5:04:f9:28:66:45:e2:
4f:7f:c1:0c:16:43:a7:9e:8d:83:66:52:52:2f:7c:
3e:d4:30:ce:05:97:65:d0:d2:98:65:ef:19:c5:78:
89:76:73:3b:d4:4c:9f:55:c7:35:66:40:72:41:b6:
5f:ca:0f:de:fc:28:84:b7:20:2b:3d:4c:5b:f9:d2:
32:1d:ee:4f:a5:e6:0d:28:a3:c4:c4:23:36:9b:80:
70:7d:b4:7d:7e:df:42:49:42:b9:cc:fe:67:16:a3:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213521
Signature Algorithm: sha256WithRSAEncryption
90:b7:4d:52:9b:41:96:ff:a9:dc:2a:ec:73:0f:06:4f:95:d2:
da:e2:a7:46:03:5c:5e:42:01:67:c1:fb:75:62:7a:d8:9e:8d:
2d:86:f6:fa:e5:2b:76:5c:d9:51:65:b2:1c:03:78:92:04:10:
fe:e5:72:b6:c3:9c:a5:48:4e:7a:c0:28:94:a7:d2:33:dc:ec:
52:90:97:20:5f:27:3b:fc:72:18:ff:c0:9a:52:01:e0:47:e4:
68:c1:e9:11:f0:01:de:8d:66:f4:d0:6d:1c:72:5f:0e:b9:15:
f2:70:bb:4c:36:85:8d:fd:5f:22:04:76:bf:a9:a3:8c:ae:33:
10:1f:74:0f:8f:3d:9a:61:28:de:17:00:14:ff:5c:9e:2d:c0:
07:9f:86:5f:15:07:23:15:8c:50:58:c3:99:33:36:10:e6:6b:
2d:4f:fb:14:d4:25:4c:7e:19:5d:0f:ab:8f:5f:c0:92:84:22:
81:28:91:ee:cb:70:91:2c:b4:fe:17:c1:c2:26:59:13:ab:55:
15:fb:e0:3b:77:23:73:26:62:aa:76:b3:88:9c:5f:df:85:1a:
98:46:b0:2c:42:e3:72:ec:df:87:a9:14:58:ac:97:0b:fa:df:
21:68:26:ae:b4:e3:26:97:78:3d:db:c3:e0:66:ec:4b:1c:bc:
d8:f7:6a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:46:14 2025 by rpki-client