Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer
File: w27RUSe_ywvNemOGi0mck8szURM.cer (raw, json)
Hash identifier: zJY38x3fc/f7wGEal7IXnMQpVWqsuUtReOEO7yvNIMM=
Subject key identifier: C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196EDB029C9D22EBA049F8E2C5EEA2E335C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:34:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2115
IP: 91.223.68.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:b0:29:c9:d2:2e:ba:04:9f:8e:2c:5e:ea:2e:33:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:34:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c36ed15127bfcb0bcd7a63868b499c93cb335113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ed:c9:d1:f6:f6:f9:0d:c8:cd:07:77:0a:de:
d7:80:b2:37:09:8f:47:c3:99:32:3c:ea:90:c5:dc:
cb:d9:c5:c2:0a:f7:35:ca:37:50:9d:8a:d8:3d:4a:
4a:0c:99:7a:83:d6:bc:1e:60:5a:34:8a:41:36:5c:
bc:50:07:82:ed:57:fa:cb:01:d1:a3:cf:a9:2b:65:
21:d1:ba:a6:d1:f1:5a:19:ef:b8:69:a9:e7:1b:77:
33:60:40:16:52:07:57:65:c0:c4:71:a7:95:13:20:
9b:f3:bc:80:9b:b2:f6:b0:5d:ec:58:65:c7:0c:eb:
4a:60:df:17:ac:2c:99:2c:f3:44:35:fe:e3:5a:0a:
a3:8b:86:27:e4:ec:42:58:f1:c4:1a:8c:04:31:eb:
4a:b4:f6:20:0e:26:e8:53:59:5c:59:9a:08:41:d6:
28:c8:50:48:8f:ab:8c:e8:e9:7f:0c:1e:34:b3:7f:
1f:9d:c4:01:49:e6:ce:d6:10:64:a7:60:3f:c0:8e:
ae:56:09:f0:73:4b:70:d1:2c:67:95:20:ee:3f:c6:
9c:5d:25:1e:57:35:10:3e:65:22:d5:ea:67:36:3d:
08:50:70:53:e9:84:73:20:b1:bf:3c:ce:de:d5:b9:
6d:2f:01:18:a9:be:6d:d3:05:af:db:d9:53:0b:82:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.68.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2115
Signature Algorithm: sha256WithRSAEncryption
66:3e:8d:60:f4:f5:22:60:1d:99:b8:1f:b1:15:fb:3f:1f:d1:
36:e1:a9:50:91:b0:6b:3a:d7:b4:54:5b:e8:1d:6d:69:58:81:
be:cf:92:00:0c:fe:cd:db:70:f9:27:18:a1:06:34:70:a9:18:
50:7e:48:b6:7a:55:76:a3:ca:db:e0:1f:8c:fa:37:0f:0a:39:
d0:d1:c3:58:a9:31:a8:4a:88:33:9a:5f:4d:ba:2c:47:66:41:
e1:e4:b4:ac:18:ca:87:f1:d3:33:a6:55:0c:d0:1b:94:92:a3:
0f:aa:1f:e0:78:73:39:62:e7:64:8a:12:65:d8:72:60:5d:06:
65:b6:f6:6d:1d:25:27:cd:7e:8e:31:c5:7f:4a:d1:4a:fe:c2:
f3:63:40:46:8a:90:b5:0c:23:75:b8:2b:90:55:b3:88:c1:38:
75:af:d5:e2:b9:f5:e1:45:14:28:73:83:9c:ba:4f:04:ff:b3:
da:33:45:00:c5:1f:6e:83:d9:e3:22:90:75:c8:29:d0:a8:47:
dc:99:30:0c:6a:8e:aa:1b:56:90:b8:4b:e0:fa:1e:6e:a3:ea:
ba:d0:2c:a4:5b:5b:e8:10:75:8b:a3:35:38:c1:12:9a:23:e8:
01:1c:e3:ba:db:09:c9:f8:f2:c7:a7:5b:fe:a3:1c:9c:81:92:
a7:2b:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:57:37 2025 by rpki-client