Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8MoYFs8nQW5Dk8AAQSATLaXgOQU.cer
File: 8MoYFs8nQW5Dk8AAQSATLaXgOQU.cer (raw, json)
Hash identifier: p0kVeDNXDGvYZHURND7CHNgBem0j5wtpkfNsZKsBQ7E=
Subject key identifier: F0:CA:18:16:CF:27:41:6E:43:93:C0:00:41:20:13:2D:A5:E0:39:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01968BC8878ABBEC024FDE44A4B46EE2842E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/58a55716-5b96-4a04-9b71-2b9ed2ceae9b/0/F0CA1816CF27416E4393C0004120132DA5E03905.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/58a55716-5b96-4a04-9b71-2b9ed2ceae9b/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 01 May 2025 12:18:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215375
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:c8:87:8a:bb:ec:02:4f:de:44:a4:b4:6e:e2:84:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 1 12:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0ca1816cf27416e4393c0004120132da5e03905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:1b:0a:7b:82:22:cb:2d:b9:a8:20:a1:4a:
80:19:9d:53:d2:19:92:ca:0a:a8:79:2c:93:11:96:
2c:08:1a:95:90:1c:f3:bd:d5:52:58:0e:4d:20:09:
ad:7c:52:e8:a6:e3:46:13:12:1e:e8:9c:02:0d:1e:
cb:99:88:bb:54:10:4f:59:a4:31:40:ca:34:5a:10:
99:dd:0a:7c:dc:d4:e1:b1:7f:85:12:3b:d3:f3:2d:
2d:34:5e:12:b2:03:19:b4:8f:03:81:3c:d5:49:9b:
2c:5e:7a:ed:d4:48:f8:0a:90:9f:dc:19:ac:d5:76:
d9:60:76:ec:30:ab:5c:36:e1:be:dc:34:24:4b:9f:
d4:74:4c:64:ce:b6:8f:d1:df:9c:b2:d8:9e:63:a3:
97:56:58:13:4a:5b:a7:2c:ac:2f:06:dd:9b:35:8c:
79:59:9b:f0:29:8b:bd:b1:97:0b:fa:45:39:c8:b6:
94:08:4b:33:e4:45:3a:fc:a4:fd:ce:82:cf:f2:41:
1f:08:ce:78:54:fe:11:02:b9:32:33:97:04:9b:6b:
a9:36:4f:67:6d:38:3f:9c:ce:56:8e:64:04:7c:ba:
61:53:4d:19:ec:2e:1a:2b:07:a9:c5:21:73:de:76:
81:48:b5:cb:bf:23:5d:36:11:77:b3:2c:62:53:b8:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CA:18:16:CF:27:41:6E:43:93:C0:00:41:20:13:2D:A5:E0:39:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/58a55716-5b96-4a04-9b71-2b9ed2ceae9b/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/58a55716-5b96-4a04-9b71-2b9ed2ceae9b/0/F0CA1816CF27416E4393C0004120132DA5E03905.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215375
Signature Algorithm: sha256WithRSAEncryption
9a:e3:0f:a4:78:6c:f4:3a:04:73:f0:7c:50:f3:0e:c8:7b:36:
ce:91:62:f6:eb:29:ca:65:f3:f7:ed:b0:d0:8e:42:6d:00:fe:
3b:04:fd:f5:fc:3d:6e:18:2a:f0:e8:8a:c8:53:c5:c6:93:6d:
3a:f4:b2:0a:b8:0d:82:ce:60:17:99:4f:3e:40:9e:23:81:6b:
68:d0:9a:e8:cb:59:96:5f:33:d9:8e:40:fc:fc:38:d7:61:e6:
bb:ab:53:d7:86:93:ce:00:23:cb:28:ca:c1:0b:54:d2:f2:f6:
1e:c9:5d:e7:85:30:9d:5c:24:63:24:46:69:f6:cd:6b:54:94:
b9:0c:ff:be:cb:54:0e:e7:1c:2d:8f:20:2e:e8:e9:14:91:af:
eb:62:34:7d:6e:f0:4d:c3:25:76:0a:01:3b:13:cc:d4:d0:7e:
13:b6:95:6f:07:7f:6a:c2:28:77:45:59:1c:56:7f:db:7f:db:
86:48:a2:25:47:e4:53:1d:a5:1d:e4:dc:5d:e4:34:69:39:38:
ef:e4:73:61:7e:ff:18:51:57:c6:a8:e2:39:73:db:9d:f1:90:
f3:07:a1:8f:70:71:11:d6:e8:9c:40:2f:77:0a:06:57:31:a1:
cd:f0:0d:6f:b8:ca:9d:da:76:ce:36:d3:bb:fb:7c:dd:81:bf:
77:f9:4f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:52:50 2025 by rpki-client