Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
File: A2x42XMHxhcQhWc4FBzAvTlczJ4.cer (raw, json)
Hash identifier: o7oxk4yFXRsKTrM2bAl5sE2fZYsDoDminlN8hBcO18U=
Subject key identifier: 03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197366FFEA5733D2E7D48C697B4036C54BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 03 Jun 2025 15:36:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207596
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:6f:fe:a5:73:3d:2e:7d:48:c6:97:b4:03:6c:54:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 15:36:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=036c78d97307c61710856738141cc0bd395ccc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:f4:78:cb:cb:be:8a:69:d5:79:0c:df:fd:
11:30:2c:b7:03:2e:63:85:55:f5:3b:a0:19:50:11:
93:23:af:fb:ce:c3:43:6d:d5:aa:fd:8d:7a:4e:80:
ae:50:31:8e:7a:38:c0:a6:07:20:12:b8:13:de:7c:
24:4c:bb:b1:d2:d5:ba:df:bd:1f:13:c1:cd:5f:58:
92:d5:26:14:e8:67:cd:c4:ad:03:2a:e9:5c:d1:7f:
6c:ee:06:2d:ce:31:48:d6:18:ea:8b:19:5a:59:9c:
58:fd:41:40:9b:c5:1e:8b:cd:43:cc:b2:2f:84:22:
03:d5:46:e0:63:6e:50:61:a7:e1:11:51:84:8b:e1:
ea:10:ce:ad:f3:d8:4d:41:37:4c:d7:80:3e:3a:71:
35:60:e6:ef:c7:f4:71:56:32:09:cd:95:54:62:54:
40:6a:e4:34:61:06:5f:96:ef:83:e1:25:77:1d:ff:
fb:7b:59:94:68:be:14:90:dc:bb:25:9a:61:f1:9d:
a0:82:1b:83:69:fb:65:9f:33:8f:4a:0b:af:0b:80:
33:d6:8d:47:e7:a0:aa:4a:de:29:5b:06:fa:ff:e9:
28:58:74:c1:6b:fc:2f:10:68:44:11:87:83:b9:a9:
e2:88:51:5c:2c:24:56:01:39:d4:93:c5:b3:6c:31:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207596
Signature Algorithm: sha256WithRSAEncryption
a6:47:d5:3f:86:ee:50:90:94:41:49:b7:82:42:a3:3c:92:f3:
f6:17:81:42:1e:18:f5:b1:0d:ba:84:7f:47:22:07:e1:85:d5:
b6:e7:8e:f4:19:d0:02:b4:73:bb:76:ff:0b:cb:97:6e:75:59:
39:5b:db:56:a5:49:c2:58:f6:dc:ae:77:31:ef:63:be:67:8d:
0d:62:56:fb:65:30:a9:c6:fa:2f:6e:87:94:aa:7b:8e:0d:fc:
4b:cf:3d:a7:69:10:d1:1c:bb:d3:b8:cd:19:99:7c:be:a8:f1:
12:ff:2c:02:e9:98:31:0d:b4:7c:84:3f:61:97:fa:1a:7b:c2:
54:69:e7:d3:77:53:2d:f4:30:f5:a5:49:af:87:56:a0:a5:05:
3c:0f:a7:ba:07:f0:ba:ed:92:59:bc:3f:4b:ab:75:91:a5:84:
8b:10:11:ce:4a:e2:44:40:ad:6d:ee:6a:1e:95:9c:aa:88:e2:
38:b3:d4:48:3d:b7:78:a9:f5:12:2a:ea:71:1f:46:53:64:6c:
3e:a2:4d:59:78:70:9a:a0:6f:13:63:0d:f3:95:a8:14:0c:30:
d3:82:cf:51:2e:9c:da:69:99:46:c1:d5:a8:2e:13:0c:bf:45:
d4:e3:a7:07:9a:91:47:2f:61:b7:ca:8c:d9:86:07:7a:ee:50:
7d:cf:83:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:48:42 2025 by rpki-client