Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer
File: vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer (raw, json)
Hash identifier: ezwqwFYiQ0fuAF55SqjFbS5U+HzxTx+L+cumjnNNT0A=
Subject key identifier: BE:2B:7D:9A:AE:CC:93:96:CA:A8:AB:DF:FD:AE:0C:78:29:1D:5A:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01973C52B9C008E2426E9A35E33024BCDCB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Jun 2025 19:02:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207536
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3c:52:b9:c0:08:e2:42:6e:9a:35:e3:30:24:bc:dc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 4 19:02:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be2b7d9aaecc9396caa8abdffdae0c78291d5a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c6:9f:a8:89:0f:ca:ba:3b:fe:32:9c:87:36:
67:00:50:40:51:60:be:58:5a:69:16:2f:ba:d9:d5:
45:57:bb:dc:68:f4:0d:09:ec:16:08:1a:3b:35:f1:
d6:8c:d6:8a:d4:c9:0e:c1:47:a5:e8:b2:ce:7e:98:
24:8e:64:16:5f:62:8e:e7:9f:09:83:93:57:93:2d:
37:d1:ac:54:b1:f4:44:ee:fc:45:03:db:31:f4:b0:
42:85:0f:e5:5f:85:c5:b1:c2:88:1c:90:bc:c2:8a:
13:3f:4d:66:f5:a3:57:bf:71:84:8c:03:21:1a:cb:
56:92:bd:bb:02:1d:48:86:c8:5c:8f:af:37:f9:18:
ce:c8:21:05:3d:12:62:0b:f7:9e:d2:ab:e4:25:42:
bb:19:46:5f:fa:89:7d:0e:65:d6:c1:01:cd:1b:0b:
d0:a3:13:44:9a:15:24:b6:46:9d:76:60:f5:18:a4:
be:d9:92:e8:e5:63:ba:96:d6:ad:32:fd:9e:49:ad:
55:fe:be:45:fe:33:36:25:89:84:30:0d:a1:c8:04:
01:0f:13:6c:6c:8d:92:1c:03:40:1d:87:c1:fc:7e:
7f:0a:64:e7:64:54:0c:c9:73:98:d9:37:e7:88:ec:
37:68:eb:9c:e5:c6:05:eb:4b:5b:0a:92:63:cf:a4:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2B:7D:9A:AE:CC:93:96:CA:A8:AB:DF:FD:AE:0C:78:29:1D:5A:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207536
Signature Algorithm: sha256WithRSAEncryption
71:27:3c:b6:cd:6b:c2:37:b3:e7:5e:65:28:04:cf:f2:f7:2e:
17:e9:d5:22:da:b0:1a:72:6f:2d:c7:9c:97:fe:52:52:e2:72:
56:bb:0d:98:53:d7:c0:8f:fc:2e:b3:8d:6d:66:c5:af:7f:6c:
0d:6f:0d:28:e6:84:cc:07:07:5c:ae:2b:ce:98:98:b4:12:19:
71:eb:66:36:2b:14:83:7c:e5:d4:34:52:b1:81:cc:c2:cf:a0:
b3:68:8c:21:bf:07:0f:d8:9e:2b:d3:2f:a3:24:b9:a3:5c:3e:
47:e4:d0:96:5e:7c:b5:07:12:79:b7:f6:76:fb:75:35:67:c8:
e4:15:25:57:4d:27:fa:db:ee:97:e8:86:5b:60:88:86:b2:ee:
20:00:c2:48:e6:85:95:42:04:c3:e1:78:f7:4f:b9:0c:ca:38:
d3:b1:17:fa:10:a5:fe:b3:97:08:e9:a7:13:56:81:03:72:dd:
bf:51:ba:00:8d:c6:8d:a6:5f:b1:b7:8b:49:27:f7:ca:3b:58:
d7:a1:ae:00:0e:80:bd:6a:08:16:21:88:07:6c:54:48:9d:8a:
d8:5c:b6:a9:03:f3:47:90:2d:76:50:8e:e9:57:d1:03:f1:b0:
8b:24:db:2f:e5:4e:b0:5d:20:f2:38:75:aa:2f:ec:e9:a3:3e:
d2:cc:3b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:55:23 2025 by rpki-client