Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
File: 2enzHGJtN3F1eG4UnTJmx1PQBk4.cer (raw, json)
Hash identifier: F/90qefzqp/EOm4OWs/PFQV3mPhR/T6zbvTUjcOIGNY=
Subject key identifier: D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01976AA8EBCBAA02703410863847197DFBC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Jun 2025 18:59:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213941
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:a8:eb:cb:aa:02:70:34:10:86:38:47:19:7d:fb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 13 18:59:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9e9f31c626d377175786e149d3266c753d0064e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:f5:bd:9a:16:58:1a:71:5b:4c:b5:64:73:
4a:b7:2e:e1:26:e1:a4:89:14:b1:2b:fa:48:44:1e:
15:ca:70:9a:b0:a7:c1:1d:23:90:db:18:28:a7:11:
73:05:b1:88:69:35:bd:6c:00:09:c9:39:a8:01:47:
4a:1d:7d:d9:c9:6f:f2:30:ec:ec:2c:67:0e:9b:c6:
9a:a3:89:c4:30:71:cb:bf:2f:4c:bd:bb:b0:e3:1f:
c6:fb:2e:62:f6:0b:6e:51:94:0e:6a:2c:a5:92:4c:
b1:c3:42:43:9e:a0:c8:ed:d1:f9:75:a5:86:d8:66:
43:15:48:01:a7:3e:ec:df:a5:5e:27:9e:f4:f7:0f:
72:41:4e:b5:3d:e1:b7:b7:91:3e:8d:34:8f:25:23:
b4:5b:58:59:a1:86:bb:74:e5:35:43:ba:f9:ff:15:
8e:4a:ff:4e:b2:0d:96:d5:13:04:37:19:a4:b1:9a:
b4:56:c8:31:e2:90:aa:ec:19:3b:30:91:7a:4e:4c:
cd:98:5e:d6:a8:73:d0:dc:cc:83:7f:a8:0b:15:ca:
a1:5a:15:2d:cc:6b:ff:c2:80:f3:eb:35:92:a7:3a:
79:97:f3:0e:42:fa:6b:92:cc:b6:83:c9:3a:23:0b:
71:6e:97:94:c6:e1:fd:7a:d4:af:2b:f2:03:0a:72:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213941
Signature Algorithm: sha256WithRSAEncryption
a6:76:8d:f8:5b:43:df:dc:da:58:56:d4:49:70:2a:80:0a:64:
bf:34:5e:cd:2a:af:51:52:41:e6:41:28:cd:74:d8:f5:ec:41:
09:a3:17:08:ec:0c:17:b2:db:c0:cf:23:e0:f5:9a:4c:27:c5:
e4:63:cf:96:6b:ab:9f:ab:b9:bb:14:89:e5:38:0f:53:bf:c3:
99:a3:60:2e:e1:39:2a:79:4d:db:41:9b:30:6d:41:0d:f7:c2:
6e:14:bb:db:13:22:17:b4:df:98:7a:69:07:99:a3:76:a1:c6:
e8:b5:78:de:b8:71:67:14:83:b8:0f:b0:8c:de:d8:5e:7f:fa:
d8:be:5f:54:d3:10:c2:cd:57:e5:b0:3e:31:11:b4:5d:13:26:
94:6b:a2:e5:11:94:60:4a:75:89:0e:22:36:93:e8:70:73:6b:
f5:fd:09:a7:20:d8:c6:c5:56:01:9d:43:32:ff:34:bd:dd:79:
c0:0a:e7:f9:2f:0e:f2:22:2a:80:ae:be:3a:c6:b8:e2:63:66:
b5:09:29:66:07:24:21:e6:a0:71:32:a0:7b:82:36:99:50:01:
95:43:fa:6a:50:80:aa:26:a1:80:da:54:46:aa:84:76:9c:2a:
53:50:16:91:57:34:50:f8:8f:29:20:e0:ed:06:78:29:5b:d1:
8c:19:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 15:15:47 2025 by rpki-client