Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
File: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer (raw, json)
Hash identifier: cHIdIZqIFiO1EdVS51JlHX8nshNMTWlFL5eAUXO2nzE=
Subject key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424456470849D0AF47C0EABF67AAE802B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201414
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:64:70:84:9d:0a:f4:7c:0e:ab:f6:7a:ae:80:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c37cd79543f1a77299d069aa36151854530dd862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:f4:3d:a1:ce:d7:df:78:7f:28:d9:90:b0:
9e:40:91:fa:40:71:89:69:5a:b7:93:d7:b8:45:67:
b7:ad:d5:0e:a0:dd:36:0c:88:2f:c0:ae:0c:ea:f4:
b1:b0:a9:2e:44:c3:1e:f2:7a:c7:5e:7a:01:9e:ea:
7c:e5:71:a1:5a:f3:d8:2e:00:3a:65:5d:5d:72:8a:
7b:47:3f:fb:e8:78:d2:bc:9a:00:c7:19:0f:7c:b9:
1d:20:63:af:97:06:27:fa:da:45:ea:3b:d0:37:19:
17:3b:cb:b6:74:61:87:8d:7e:4f:43:f9:d4:78:5e:
f5:0f:b6:a9:75:17:47:6c:75:0a:3c:11:c5:ab:b9:
93:de:cd:3a:f4:fe:15:e7:06:ac:79:da:45:6a:3c:
c6:91:df:7e:19:07:25:9c:c6:b5:51:d4:29:7e:4c:
63:78:2d:b1:15:46:cc:f9:ed:1a:7f:2f:7d:a0:37:
69:37:b9:32:48:77:c2:4c:a7:6e:e1:32:95:70:d6:
8d:88:9e:db:da:9a:30:d9:df:67:c5:2d:d0:e7:c0:
3e:99:b3:bc:44:05:03:b9:52:1e:9a:ed:57:3a:d4:
6f:6d:d7:e3:85:bd:b2:12:17:d8:22:e8:a2:86:ee:
f0:a5:7a:e6:62:00:34:10:a5:28:5c:6c:63:da:ca:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201414
Signature Algorithm: sha256WithRSAEncryption
17:37:c0:b0:ce:c7:ce:af:4c:6a:37:72:9e:07:04:df:30:45:
db:22:8b:10:74:c0:94:e4:e4:5f:00:66:23:2a:8c:52:2c:aa:
99:fa:a0:0a:4c:32:d8:ce:99:47:31:55:65:f6:6e:73:d0:98:
c5:27:21:6c:81:f6:f0:63:d2:f2:3f:74:78:41:e3:a5:7b:98:
0b:32:3b:af:1d:a2:6f:66:e4:c1:8d:70:8f:1c:50:f6:09:de:
b7:92:af:82:7f:0d:82:ab:8b:5f:6a:49:d2:c9:ec:33:db:6e:
bc:ee:b4:66:ee:b1:97:23:ec:75:fb:d5:34:d2:a6:d7:ef:7a:
30:5f:81:c3:b0:86:f7:f3:18:b2:9f:4a:20:5f:b6:ca:38:da:
93:5d:9c:d4:63:8c:df:21:ed:af:8c:bf:5c:a2:a3:9c:18:cd:
86:f7:2c:f7:a2:28:c7:db:09:6c:a9:16:11:b2:e9:ee:2e:bf:
ec:60:29:c9:6c:0f:38:30:f7:25:54:cc:9a:2c:f0:f9:73:68:
5e:90:b7:eb:1a:86:ce:95:97:31:d1:ff:28:1f:2f:42:fd:9a:
67:17:52:42:66:0e:8b:ba:0d:1f:0b:c4:74:93:e7:af:13:e8:
cc:db:5a:c4:a5:4e:80:ab:98:9b:b0:53:b6:d1:94:bf:17:68:
f3:3d:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 22:13:42 2025 by rpki-client