Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer
File: IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer (raw, json)
Hash identifier: Vlyti9WhVrSG9WcUb+ZzudIvGKA4jp/vxCaWp/VmJco=
Subject key identifier: 23:07:65:21:44:C9:12:7D:D6:26:79:60:56:C9:EC:29:32:A4:F2:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01969ABBEE1C2AB7A06FD42A2439F02C9013
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 04 May 2025 09:58:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211372
IP: 193.107.14.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:bb:ee:1c:2a:b7:a0:6f:d4:2a:24:39:f0:2c:90:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 4 09:58:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2307652144c9127dd626796056c9ec2932a4f205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:29:65:3b:cc:e5:71:98:ce:15:e0:16:c2:
ec:43:78:93:be:24:08:a5:d3:76:32:46:0c:1f:07:
b9:46:58:c2:48:29:2f:c8:ac:06:e3:cd:58:43:ba:
e7:c8:45:38:84:75:f0:fb:a1:0d:62:ec:c6:a5:d8:
76:4a:f3:c5:22:62:8f:97:39:47:b9:0a:98:a3:f1:
29:ab:c9:65:2a:ad:26:c6:f1:ca:36:4f:c0:15:de:
12:da:b7:3f:ec:7e:e3:7e:a0:bc:2b:68:2d:e5:ee:
19:a2:90:8c:05:bf:cf:2f:d2:e7:7a:49:22:c0:74:
84:5c:a0:9e:88:18:99:ee:fd:b3:31:e4:d0:75:00:
0f:66:f2:ce:f4:c3:9d:a5:72:50:ba:6e:72:e1:75:
c2:5e:63:a8:d9:27:49:69:61:8b:e2:40:e6:90:25:
21:0a:d7:17:60:6b:3e:49:06:ae:02:17:8f:a9:fb:
47:8d:87:8e:06:97:1d:00:bf:db:e5:cf:07:be:68:
ef:c9:ec:0f:97:4d:3d:e1:20:39:5a:8c:34:4c:f5:
c1:ec:d7:f9:6f:92:44:a8:fa:ec:ec:77:5b:1e:1c:
32:c8:36:7e:b3:90:81:a5:5d:fa:bb:c5:8d:32:97:
35:5c:5d:07:8b:47:d7:24:c9:68:bb:4c:00:71:11:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:07:65:21:44:C9:12:7D:D6:26:79:60:56:C9:EC:29:32:A4:F2:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.14.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211372
Signature Algorithm: sha256WithRSAEncryption
79:42:a8:ee:1c:5e:b4:6d:c4:08:22:70:23:a9:8f:c9:a0:7b:
00:1d:a8:ca:0f:2c:3a:28:b2:c5:ab:7f:bc:17:45:a8:3c:86:
c9:93:e4:eb:4e:d4:01:3e:8a:0f:e6:bf:eb:fa:41:32:06:e7:
ca:01:51:06:b5:cb:d3:a1:49:40:4b:b5:31:5b:b3:7a:cf:23:
cc:94:fc:ea:f0:b1:c3:a9:71:35:8d:bc:fe:86:0b:52:4c:72:
d8:18:42:81:c7:46:05:26:13:73:9a:16:ab:85:52:22:a3:5d:
5f:e4:eb:36:0c:b7:db:4f:01:ee:40:59:c1:11:62:b7:fc:25:
cf:a1:92:bf:6e:a1:ec:2b:92:44:dc:b5:10:04:d2:b4:94:70:
cd:63:23:73:d4:f8:ca:77:26:a0:ed:45:eb:ca:89:90:09:5a:
9d:1e:3b:d2:e6:47:71:a9:3e:8a:f3:8a:f8:a6:8d:7a:da:77:
d2:28:eb:c6:b0:16:47:88:c2:e4:7f:3a:49:37:fc:4c:8f:8b:
61:94:95:14:89:a3:b2:43:c0:b0:65:e9:ce:85:e0:e2:56:1e:
c7:5a:c1:64:15:24:35:76:36:9a:80:c7:5f:5d:e2:6f:a3:5b:
b9:16:a6:0b:ef:0e:de:fa:10:71:10:5a:ac:90:9a:e6:53:f9:
42:1c:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:26:28 2025 by rpki-client