Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer
File: 2sKEXGHawupQysuD_QkxGjDjqQ4.cer (raw, json)
Hash identifier: awvn9GJvl80qt97lPAgyEPgqYYfWXeWJDVXK9+g0keE=
Subject key identifier: DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01975EF694770EFD0FDB56E674B464A6E863
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Jun 2025 12:28:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197764
IP: 193.8.61.0/24
IP: 193.8.182.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:f6:94:77:0e:fd:0f:db:56:e6:74:b4:64:a6:e8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 11 12:28:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:41:f5:d2:e1:27:c5:1e:23:0d:bf:86:17:
7e:d8:d3:e8:75:74:c6:fc:11:08:97:0b:1c:f8:f9:
ea:0b:55:eb:39:ca:63:15:99:51:0a:7b:ae:11:c5:
da:61:05:92:2d:45:d5:32:3f:e5:29:83:fe:64:55:
b8:9d:47:86:fd:42:20:75:19:67:65:a6:68:a7:c7:
e5:ec:87:34:f4:c6:c0:91:04:7d:26:99:c5:cd:d0:
ea:1f:eb:7e:14:76:79:7e:cf:95:ab:fd:ea:7e:9e:
87:1d:58:ad:66:3d:a6:52:9c:b3:6b:ac:24:ef:95:
6a:4f:e9:e5:ef:14:34:8a:50:98:ca:7b:0b:73:2c:
69:d9:c0:10:b6:4b:3d:a4:36:ed:c4:70:d9:e4:ff:
70:52:e1:4e:34:89:2c:3c:21:08:11:e2:ef:ab:33:
7a:bb:f6:a6:e9:d7:5d:87:51:c8:c5:24:a1:51:98:
dd:fe:86:f4:7e:51:79:62:79:59:c8:31:92:86:20:
af:59:b9:64:a9:e8:87:39:81:61:89:17:a8:4d:72:
8d:cf:b6:7f:3a:96:7b:1f:35:51:22:9b:2d:44:e9:
e9:0c:e8:c9:4a:18:4e:ab:a3:e3:e9:94:ff:32:26:
a7:25:c3:74:10:d6:5d:6f:11:4d:15:f5:97:5a:e8:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.61.0/24
193.8.182.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197764
Signature Algorithm: sha256WithRSAEncryption
b1:e9:33:a0:1f:68:19:39:36:4a:06:ce:71:ff:84:dd:15:ec:
86:55:ec:47:7f:6b:49:f7:e3:34:13:b7:31:fa:dc:80:49:0f:
5e:b8:36:6d:d8:9e:2d:19:2d:db:58:26:50:03:fa:64:6b:df:
80:a0:71:54:19:2d:cb:eb:b4:a4:ce:03:5a:85:3f:65:a8:7b:
c5:27:c2:70:ce:48:23:04:ac:88:ac:4a:48:c8:9b:5e:a8:d1:
33:67:51:dd:bd:d1:cf:e3:68:2e:c7:eb:c7:ce:72:c5:e0:8c:
9e:19:2a:ba:a6:36:dd:b5:18:b4:52:0e:09:b0:cf:e2:89:69:
fc:1a:45:aa:ec:4a:e0:2b:94:90:80:f7:83:03:eb:f5:a1:fd:
df:2a:d5:0b:69:96:02:c3:b3:56:62:06:e3:79:97:dc:0b:f5:
a2:61:e5:47:77:74:26:e5:9e:77:31:07:56:94:c5:a3:3f:fc:
f1:86:2f:73:1f:f0:9b:00:1a:d6:b7:a2:83:a1:40:ea:1d:45:
7d:12:fa:bb:47:24:ed:57:9d:84:50:a4:8c:6b:42:8c:c6:6f:
49:00:dc:db:44:8f:a0:02:fb:1c:62:b9:3b:c3:c2:2e:fb:43:
3c:69:d0:2c:5f:22:b3:d8:3d:27:8c:34:85:46:bd:f2:7a:5e:
70:f2:32:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 28 14:42:33 2025 by rpki-client