Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
File: XO56utwc1TZH4rILdg1aXHqxp8w.cer (raw, json)
Hash identifier: tT7twJSJQOzL5cFWVCOuQCDZ08YtcM+r0nwz6TKzBKk=
Subject key identifier: 5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019680921304AA5F1497DED5C488697A32FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 29 Apr 2025 08:02:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213785
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:92:13:04:aa:5f:14:97:de:d5:c4:88:69:7a:32:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 29 08:02:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:08:48:e0:82:7c:46:e0:fd:05:11:b5:23:
3a:b9:c4:9c:67:80:9e:55:cf:a0:46:8a:c6:e2:c6:
a6:5d:a7:1f:ed:42:2f:73:06:90:f8:ba:2d:59:df:
fc:66:4b:5f:a8:0f:2d:b6:09:1a:e0:54:b3:7c:10:
75:3f:a2:2a:f9:7f:0e:9c:61:b5:75:0d:bf:6d:92:
cb:2a:95:7a:d3:99:0b:36:88:4a:f8:23:66:c3:93:
4d:9a:1a:77:78:1f:60:49:bc:13:89:76:ba:84:5a:
46:0c:e6:bc:c5:e8:20:d9:9c:51:ec:ab:b5:1a:d5:
26:a7:cd:a2:28:0f:9d:bb:51:cb:91:17:fd:82:09:
2d:4d:ac:13:05:58:38:01:68:93:93:08:8d:43:6b:
9a:4e:0c:fe:2a:c9:a7:31:e4:75:91:36:d8:15:7f:
12:ae:93:79:45:44:3a:ca:ed:46:aa:e7:05:d9:7b:
c1:53:06:52:05:4f:8b:d9:a9:13:14:6c:51:a4:12:
11:9e:f1:f7:e8:0c:cf:bb:58:a9:6f:d7:3c:13:18:
07:c9:b4:b5:a8:84:cf:b3:59:8c:47:ee:6f:b2:56:
07:8c:28:7d:b9:24:a3:df:a4:a4:ca:1f:b7:ba:f6:
b8:0a:8e:a6:ca:12:85:ef:2b:1a:22:75:77:c3:98:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213785
Signature Algorithm: sha256WithRSAEncryption
96:b1:c7:f7:e7:8d:71:5a:27:00:5a:3f:87:54:f1:fb:a8:0f:
e6:ee:73:70:1e:93:fa:a6:fc:b9:ce:65:a0:8c:ad:78:07:72:
2f:10:de:a5:22:5c:40:38:95:99:24:84:6d:86:76:77:3e:0d:
4a:ee:d8:a5:78:0d:d7:cc:5b:f6:db:b2:ef:ce:71:69:78:ec:
9a:35:7b:5b:e8:b5:97:f4:29:ce:72:e5:c6:95:9d:3b:84:a7:
df:41:e0:97:b0:ee:46:12:7a:8b:4a:e8:5d:2c:bf:f4:08:15:
54:0f:85:d2:9f:04:7a:90:5f:af:11:c2:ca:f4:03:c0:06:24:
e3:4f:d3:1e:34:0f:c7:3d:a7:f3:cb:b6:84:f3:82:08:d0:e8:
75:31:0a:3c:fb:00:04:4f:c4:f2:41:e8:61:dd:f2:01:db:e5:
44:5a:64:a8:b3:17:ce:16:b8:07:27:08:f1:cf:ce:6f:bd:72:
26:98:95:72:a9:5f:98:66:11:37:18:bf:9c:b4:55:be:23:6e:
78:b4:a3:1e:e5:bf:5d:d1:bf:c0:fb:01:20:22:59:b4:23:f3:
60:47:4a:0d:b5:54:37:0b:dd:e8:de:62:6b:da:61:84:72:84:
c3:b6:b1:1a:7a:4e:b7:09:e8:cf:4e:f7:da:34:4f:69:75:f4:
d1:08:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:33:32 2025 by rpki-client