Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
File: JRIoadDqT5h6tR-5eRgA2EBamjw.cer (raw, json)
Hash identifier: 1/dqsk5QkUdpOfn98bB0E73lCKrNGokhahNmFT0Zsvc=
Subject key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197508DB03622AC9D29C3CA940F49BA014A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 08 Jun 2025 17:19:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207155
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:8d:b0:36:22:ac:9d:29:c3:ca:94:0f:49:ba:01:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 8 17:19:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:ca:94:4e:2e:85:d2:fe:14:de:4e:e6:fd:
3a:a0:5a:f3:99:cc:9b:74:09:64:02:74:47:2e:7b:
dd:23:90:5e:b2:79:54:27:df:39:d9:db:92:8e:2e:
49:10:f4:a6:33:b2:76:41:a2:8a:d5:95:3e:41:3b:
1a:c6:b7:f5:11:42:6d:38:66:1a:37:c9:a8:63:b5:
40:59:14:22:61:f9:d4:37:7b:ac:e5:27:56:02:5b:
53:2c:42:e6:a2:1d:e0:53:7a:e9:a5:a3:3e:d2:b7:
2c:07:6f:69:c1:59:c3:20:7d:bc:46:f9:fd:ef:2d:
10:eb:aa:db:21:26:28:a1:14:99:64:8e:aa:4a:b9:
7d:5d:c9:8c:c9:a6:dd:31:37:a9:e3:33:ef:c1:5e:
c8:6e:90:34:5a:b8:d7:a6:9c:24:51:e4:31:6a:25:
d1:9e:a6:e2:90:1e:a7:3b:a0:9f:80:37:ac:84:b0:
10:99:6d:34:76:9c:6b:c0:62:f1:f0:8c:c2:5c:f7:
1e:d0:43:61:74:14:68:28:c0:db:34:0a:8f:bd:86:
55:2a:7a:f7:40:50:0e:5f:54:89:e1:b2:28:2c:d1:
12:e7:df:0e:a3:9b:c7:c1:9a:6f:5a:1b:28:31:a6:
ce:98:37:60:d7:22:75:11:e2:af:22:02:a3:08:96:
5d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207155
Signature Algorithm: sha256WithRSAEncryption
28:e9:e5:d5:11:23:80:c0:f5:d1:f6:92:c0:38:da:d7:e9:72:
38:5f:66:a0:2d:80:e8:b6:ba:69:92:11:63:a1:c3:e4:3f:b9:
38:c1:81:96:dc:02:79:c5:86:c9:14:f6:51:f6:46:f3:c1:f7:
9d:33:46:09:18:e2:6d:28:95:54:3d:c2:30:bf:66:a4:e2:90:
77:17:55:d4:74:4b:66:8e:75:f7:c3:16:b8:37:ef:ec:b7:de:
e1:f9:70:05:fc:ba:42:d7:5f:b1:79:59:9d:c5:80:38:18:bf:
53:5c:33:7d:49:02:82:4e:b2:f4:94:a3:bb:22:c5:90:26:4b:
61:13:5d:46:fe:e1:b3:0a:eb:2f:ea:79:44:b3:ac:ce:b6:a2:
6e:4f:62:69:28:e6:6c:c6:b8:85:2a:98:b8:d4:92:44:30:fa:
08:cb:b9:04:3a:e4:e5:b2:82:95:8a:1e:6c:a7:08:6b:b4:18:
3a:99:13:9d:aa:58:88:1e:92:7b:f2:dc:4d:ca:5e:46:16:72:
8e:e0:f1:ec:bb:fc:73:67:6c:26:17:3e:21:a1:3e:81:ee:95:
12:52:a3:52:42:3a:01:5a:6f:98:4b:82:a9:22:74:52:6a:31:
67:07:6d:2c:f0:9a:07:07:b7:11:ec:9b:07:fa:40:a4:29:e7:
40:0b:58:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:27:38 2025 by rpki-client