Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer
File: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer (raw, json)
Hash identifier: wpZrCNBNS1k2A3nTPqQ888fCLdRpHUyeuyXLehNS2Pk=
Subject key identifier: 54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197708683EB475371CFA8E876A94598DAD6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 14 Jun 2025 22:19:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215812
IP: 2a01:fec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:86:83:eb:47:53:71:cf:a8:e8:76:a9:45:98:da:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 14 22:19:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d3:20:bf:70:8b:62:fd:a4:17:59:1c:08:65:
3d:41:47:cf:53:f0:59:49:32:80:58:12:1e:2b:fe:
18:94:f2:00:10:44:dc:e2:98:55:bb:13:a7:8d:0a:
cf:4a:2a:f6:1c:f8:cc:32:a2:39:5c:6f:01:a5:93:
6d:94:df:0d:64:a3:4a:5a:2a:0b:55:8c:34:7b:50:
6e:53:ae:9a:4c:dc:77:c7:1d:40:66:fa:cb:86:cd:
4b:97:f3:9e:87:28:f5:7c:80:14:c8:97:7a:eb:6b:
d5:d1:c1:f5:c3:f2:c6:43:49:43:12:d7:6e:cc:d1:
25:34:5a:e6:86:e2:fd:f9:40:81:c1:9c:3b:25:67:
15:62:68:75:84:29:2b:a0:91:c9:23:96:07:34:54:
0a:5f:04:08:7a:b7:2c:09:67:8d:aa:51:a8:23:2d:
9c:7b:94:56:a3:a2:51:83:9a:72:af:be:c8:f8:0d:
79:1f:c0:f4:d7:16:78:70:03:59:dd:50:cd:04:20:
47:ef:b0:46:93:dc:26:06:e1:8e:f1:90:f3:95:30:
5d:34:9d:0f:25:f8:1b:8a:5d:e7:23:12:e5:f8:8f:
29:16:7f:4d:94:bd:cf:b2:b4:8a:4f:dc:95:cc:e4:
0d:75:25:c2:d0:ee:35:25:94:b3:ea:d1:4b:0f:5f:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:fec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215812
Signature Algorithm: sha256WithRSAEncryption
03:40:2b:03:df:12:41:00:2b:69:c4:44:f1:f6:42:57:b6:57:
70:54:8f:d8:6b:f2:7e:a2:d9:a5:2e:1f:b9:75:8b:86:68:f6:
d4:c4:c4:9e:25:fa:b2:27:68:cf:ed:d7:48:75:bd:c8:a5:fe:
3d:0f:52:65:1a:ee:31:ea:6a:4a:e0:ce:55:33:9c:1f:5e:5a:
39:36:f9:af:84:6f:f9:1b:40:1b:f2:8f:39:52:57:49:1c:d0:
19:97:f4:a2:cb:8f:85:85:5a:de:a1:6a:a0:a8:68:c5:24:2f:
08:a6:6a:97:f4:92:b5:e8:72:b2:28:f4:53:5c:c0:14:d5:15:
25:08:ce:f1:d1:b3:28:18:10:6d:e6:b4:63:5a:eb:71:6c:8c:
2c:04:b8:91:68:cf:31:07:09:df:fd:04:9c:1f:30:03:55:c7:
7d:da:a2:4f:65:5f:0a:74:e0:6a:44:ec:fa:05:ba:50:51:08:
b9:85:39:93:66:0a:f8:94:39:9e:e3:07:ca:66:99:b4:48:a4:
a4:46:5d:64:3e:35:9b:ac:45:36:2d:30:f6:e5:be:09:9d:ca:
b3:8f:5f:4e:a4:51:11:c9:50:92:6a:78:44:cc:4e:5b:f0:3d:
8a:aa:5c:83:02:cf:6c:fe:d4:76:f7:86:06:3f:bf:dd:d9:d2:
fb:d0:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 14:54:18 2025 by rpki-client