Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
File: nwAKfifXFIcphPrjeIda9lvkBWw.cer (raw, json)
Hash identifier: buVYwcm/FpI/lm0IyWQQJ+ZVzljCqJx8L1NXFKquwy0=
Subject key identifier: 9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197A784090B6AA2B4E3E0EA37ED5A59B85D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Jun 2025 14:35:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209552
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a7:84:09:0b:6a:a2:b4:e3:e0:ea:37:ed:5a:59:b8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 25 14:35:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f000a7e27d714872984fae378875af65be4056c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:0d:51:82:89:a2:09:1c:12:fb:ae:ec:3e:
05:3f:a0:fa:06:e0:23:98:82:3f:ec:4e:2c:f2:bd:
63:ff:8b:d3:75:b1:87:2c:9b:b5:a2:12:e2:4e:37:
e5:e5:35:54:09:87:7c:69:8f:dd:a1:51:aa:e5:75:
47:f3:68:a9:3c:91:61:47:7b:ac:59:77:71:d8:3d:
61:aa:c3:43:f6:83:9c:82:e9:13:3a:5b:3e:88:12:
0b:61:16:88:3c:a0:65:61:56:47:1c:a5:39:90:eb:
ba:d3:6f:ee:49:c4:e3:22:5d:0a:8b:c1:af:55:08:
cf:e5:d7:92:f0:c4:f1:ee:d9:99:57:35:7b:86:4e:
10:65:ab:73:39:b6:b9:c1:ee:df:a4:a5:9b:f3:53:
2f:c7:e6:88:64:de:21:ae:97:d4:07:d1:89:b8:e1:
bb:b7:17:45:ee:6c:00:8a:5a:be:31:74:ba:ba:c7:
ac:bd:33:d8:ff:0b:4f:dd:4c:a3:07:69:66:d4:dc:
be:4a:f2:93:b0:42:f8:a7:a5:52:67:7f:af:c9:7c:
9b:95:18:16:8e:51:9c:04:91:f8:e5:69:a9:c6:57:
8d:eb:70:b2:84:8e:dd:ed:39:59:ca:94:b0:4d:80:
bc:dd:3c:dc:23:c9:b2:9e:66:97:f1:b8:c0:84:55:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209552
Signature Algorithm: sha256WithRSAEncryption
74:d8:3d:d1:96:f8:14:92:21:8a:b2:ea:92:e5:ea:97:11:9e:
9f:db:f3:db:08:fc:4e:71:90:06:6c:ca:a5:70:2c:1a:f6:ad:
2b:17:34:10:3f:d8:af:a5:a5:8a:27:a5:66:62:82:90:22:7a:
e4:e3:b5:a9:ea:d3:42:a1:98:e3:38:80:74:f9:43:79:0a:1a:
37:29:7a:00:28:62:f1:ff:7e:97:f8:2b:20:a5:b9:2c:eb:3b:
9e:52:ac:a3:44:a9:6f:de:16:dc:d3:54:67:c8:01:27:3a:7b:
d1:7b:6d:82:12:a4:b5:6f:b3:cc:7b:ac:8e:37:5f:f3:ee:91:
ff:f8:9c:ef:7e:41:7d:37:ec:42:4e:f8:b6:69:1b:50:ae:60:
2d:8e:eb:92:a5:33:fb:5c:fe:d8:32:ff:5a:26:77:41:f7:31:
b1:43:5e:8a:10:7d:01:24:65:f7:b8:54:b8:47:55:8e:78:93:
64:40:7f:56:81:55:26:52:d7:2f:4a:7c:99:ed:72:1e:c6:48:
74:e3:84:27:14:76:cf:3d:36:9c:ba:04:50:e5:6e:4e:8b:06:
2c:87:c4:29:bf:7f:42:a5:e7:96:c8:50:5a:70:a3:06:46:25:
0d:08:0b:91:5c:c9:d1:5b:2f:8e:13:4b:d2:a7:fb:b0:86:1d:
6d:bf:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:35:26 2025 by rpki-client