Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
File: UHx3C7awjctNbqmwyWJyrzpvnHE.cer (raw, json)
Hash identifier: wHh0+ecjMs8MTlE++tll/lApz3pobRrPYGBlm2pOkIo=
Subject key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196BA4673747D49DEC4746B5CE4454BB33C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 10 May 2025 12:58:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213031
AS: 215957
IP: 152.114.248.0/21
IP: 2a14:c680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:46:73:74:7d:49:de:c4:74:6b:5c:e4:45:4b:b3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 10 12:58:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:cc:31:e2:06:88:cb:81:38:e1:aa:21:76:
4a:32:f5:57:34:c2:98:f8:eb:7d:fd:b1:93:79:8e:
ae:2c:c5:70:28:cf:e1:10:88:c4:3f:6a:9e:ab:6a:
fb:74:78:98:77:b7:09:cc:09:64:fd:af:d6:6c:ae:
96:b7:9d:a8:99:b5:61:1c:e1:61:64:2d:f1:d5:c1:
02:38:2b:1b:30:1e:60:c0:2e:04:02:a7:53:95:a1:
e1:fa:88:fb:7b:d0:c0:0d:0d:b6:33:a3:b2:29:60:
15:93:62:b0:bd:8f:fd:b5:e9:8a:dc:ae:88:f2:60:
b4:3e:a2:de:47:93:28:73:71:74:28:1b:df:07:93:
71:2c:23:e4:97:9a:dc:ee:b6:87:a8:4e:d9:a4:2b:
5c:76:36:dd:11:b0:26:82:96:03:76:c8:d9:72:6e:
06:cd:05:42:98:9c:61:44:b6:18:1c:f8:aa:92:71:
23:33:ea:7e:24:fc:3d:4a:46:6c:7f:8d:ae:67:af:
1e:48:59:9e:d5:db:19:b6:7b:bb:5c:6b:2d:b6:fb:
58:9b:7d:75:ea:25:90:50:4b:51:00:e5:b2:47:5f:
64:0c:7b:8a:76:cd:e9:9a:c5:ff:37:e4:9a:e2:b5:
6a:d0:ce:7a:6c:8f:c6:07:57:fa:78:7e:dd:6b:65:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.114.248.0/21
IPv6:
2a14:c680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213031
215957
Signature Algorithm: sha256WithRSAEncryption
3c:97:84:28:fe:06:26:c6:d9:48:c1:89:47:ab:30:9a:27:2e:
14:f9:04:09:04:45:36:25:f2:34:18:e9:9a:db:47:29:72:e0:
58:8d:ec:d9:10:92:83:db:5a:4f:fc:37:02:3d:fb:b1:b5:49:
2e:57:98:cd:da:99:62:df:11:12:18:cd:d8:d4:d9:bb:29:89:
85:48:e1:b8:6a:23:c4:7a:f9:64:30:cb:3f:ce:8d:b6:73:3e:
9b:62:c2:05:1b:33:2e:3d:80:15:1f:f7:85:6a:9d:8d:70:53:
51:9f:40:a7:68:20:2c:a3:13:5f:aa:2d:4c:b4:bc:a3:4d:12:
04:94:5c:15:d3:55:e3:c0:c9:13:a2:07:02:7d:1d:f6:22:57:
1a:b6:50:b3:25:d8:41:3d:09:9c:b9:c6:e2:0e:1e:73:49:ab:
cd:a1:7f:08:18:21:b3:d5:04:af:90:e9:ff:eb:92:25:65:a3:
e2:26:10:e6:3d:6a:43:5c:cf:68:18:07:0e:af:96:16:83:e9:
8e:a5:48:73:87:e7:8e:e5:55:c4:49:a9:91:81:d4:75:ed:f5:
15:1a:76:d0:82:64:95:17:e0:c4:a2:ec:3c:33:be:62:25:38:
1c:f7:c0:92:9a:34:d9:77:04:bc:27:02:7a:bf:b4:dd:96:7e:
f1:7a:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 15:31:11 2025 by rpki-client