Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
File: CYP5KGpYFwzb724OSNDfcxONx2c.cer (raw, json)
Hash identifier: xn0VbLB0is89M4LGuyGALi1AXhNfOfA5UDF7MwaqGX0=
Subject key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01967FA3A62B5F8F08C9D2225CAC71C53238
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 29 Apr 2025 03:42:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209612
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 13:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:a3:a6:2b:5f:8f:08:c9:d2:22:5c:ac:71:c5:32:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 29 03:42:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:9d:3e:0b:7d:f3:f7:4a:9e:38:0f:bb:2e:
20:ce:aa:3f:42:48:0a:70:34:2f:30:b0:9a:e0:4a:
a8:1a:56:81:57:a1:0a:7b:4e:13:80:91:f4:e2:8f:
15:9b:68:17:68:94:86:c1:02:b4:22:59:cd:4d:a6:
e5:d2:6e:e4:ac:97:e0:80:14:1b:6e:a3:85:33:c8:
67:ac:ac:d7:24:cd:4c:c6:96:f6:8a:c2:19:25:ad:
8a:3e:c6:6b:2d:16:a2:09:74:52:c3:71:41:50:e1:
68:47:fc:20:cb:00:94:ca:c6:db:ef:27:b7:75:f6:
b8:2f:38:32:fd:f3:d0:93:52:76:e0:2c:86:fc:66:
2a:a3:64:bf:f5:20:b4:1c:e8:0b:bd:97:1b:12:c9:
7f:9d:39:4c:a9:c1:0d:0e:52:12:b5:d5:aa:7c:04:
a9:d7:43:14:68:ca:98:30:17:3a:31:66:76:bc:d2:
37:f3:7c:63:3a:1e:89:f9:18:ea:25:46:0e:a3:0a:
73:34:75:47:19:97:4c:81:74:aa:58:1c:22:4e:aa:
c6:f2:6e:af:90:69:e0:f7:18:dd:ad:e5:8e:f9:d7:
d0:7e:9e:d0:de:21:19:35:a7:bd:dd:c0:96:4e:61:
7f:ed:d4:67:3d:9a:48:ad:66:77:71:7b:5e:29:75:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209612
Signature Algorithm: sha256WithRSAEncryption
31:8b:58:98:a1:30:a0:ba:2a:ac:87:8e:b1:53:6e:40:fb:52:
04:09:9d:99:62:c1:b4:74:6f:89:6b:bf:ae:50:1e:11:6c:e1:
2f:8d:79:63:5d:ea:01:83:1d:e8:c1:1a:f9:b2:e1:04:0f:a9:
dc:e0:f9:5f:5a:73:77:99:42:04:75:bf:44:1d:08:a7:eb:49:
b3:f8:9e:d6:01:9e:86:b8:82:dc:2c:a6:fe:ab:43:4a:3e:8b:
13:50:84:49:25:98:6e:c9:ec:7a:c0:bb:79:d4:b8:51:bb:02:
03:18:08:b6:d7:52:54:73:17:46:79:97:e3:73:48:79:bf:be:
3d:be:00:0b:da:85:1e:06:93:f7:b6:1d:71:66:15:0e:b9:9f:
44:cd:75:47:c7:90:8c:6c:6c:f7:99:16:55:4c:af:8a:62:67:
a4:b0:17:0f:1c:ca:c8:15:9a:c9:d0:99:95:0f:13:0e:26:5a:
7e:cb:00:bb:cd:c5:35:05:8f:dc:bf:0a:53:9b:c3:69:62:45:
3e:be:09:6d:68:1b:bc:f2:42:92:b3:2c:a0:51:e4:da:d9:0a:
78:4d:d0:2d:e0:6b:a2:ea:2f:31:01:c4:36:9a:8d:a8:52:d9:
4d:2f:9d:5a:3c:4c:f9:19:21:14:e4:58:b6:65:94:89:67:fe:
e8:f2:99:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:20:06 2025 by rpki-client