
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
File: au27xW2vhfo_OHxgUtxy1dchO_c.cer (raw, json)
Hash identifier: WhSJVQZoQIUaShYhE8QzeweDFeUKw3MyJ3C+QP77qAY=
Subject key identifier: 6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01975F579A5B5237E2644EA2299135524232
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Jun 2025 14:14:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.236.55.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:57:9a:5b:52:37:e2:64:4e:a2:29:91:35:52:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 11 14:14:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:02:0a:7f:37:c1:5f:ce:3e:b0:d9:e4:4d:16:
52:62:f6:67:13:46:b8:ce:66:1c:8b:71:aa:4f:ac:
97:b2:ab:00:4b:55:21:c3:9e:e2:f9:50:34:98:1b:
5d:87:9e:bf:2b:66:3f:d1:6d:10:49:97:92:5c:e4:
16:f2:ae:19:ef:7d:5c:d9:a7:d4:4b:cf:6a:99:d9:
df:50:cd:dc:0c:c2:73:73:75:27:ba:c8:e2:67:2c:
1e:09:a3:fb:b1:05:c9:9d:f0:ac:fb:8c:ca:10:48:
1a:03:22:55:15:4d:ef:3b:c7:5f:27:00:c0:53:12:
98:7e:0a:66:74:21:a8:df:2b:4d:3c:2c:f8:a1:05:
2e:ff:78:2b:c0:c1:0c:05:6c:fe:1f:24:3e:d7:c6:
4b:91:79:c2:29:46:43:68:8f:bf:3f:0a:94:7a:a8:
20:b0:21:08:21:c5:3b:20:d5:c4:53:3e:d1:a1:9b:
93:97:88:3f:79:c4:d6:63:20:16:97:e5:d6:25:50:
63:ec:ce:0f:92:aa:06:e4:9a:6c:a5:d7:60:a3:6e:
a5:22:62:8f:ea:08:08:ef:f9:50:1c:ab:fd:9d:10:
06:ee:a9:df:fc:9a:8b:b5:11:5f:3a:19:70:32:cc:
30:63:40:db:c5:d9:2a:c9:55:0b:d4:7b:c9:84:55:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.55.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d2:e8:d4:b5:78:82:ec:c9:4e:8e:4c:92:1b:21:1c:28:4a:
1c:9f:a8:16:64:15:d4:ec:3f:2f:b1:12:dd:54:eb:9d:d4:f4:
c8:72:f3:fd:90:13:fc:1a:61:b0:d1:86:d4:6f:bf:ac:4e:89:
4f:91:c9:87:09:39:89:b1:c4:6c:e4:05:de:1a:a0:e4:3d:8f:
f5:4a:35:ad:04:be:48:b3:f6:d9:a2:f5:48:5c:43:f8:5e:d1:
df:17:3a:03:5c:a0:1d:32:3c:8e:79:8e:69:3f:ab:01:5d:58:
d4:93:53:7b:9f:a7:5d:71:4e:58:cc:c6:74:ce:54:32:3c:92:
09:c6:91:4b:ba:4a:06:f1:1f:21:55:af:3a:91:d5:29:be:d0:
4f:64:08:48:9f:0c:e4:7d:02:1f:76:fb:9b:d7:b4:9f:61:20:
0c:22:b1:6b:34:82:aa:66:3d:a3:77:e3:bc:33:56:0c:5d:05:
d2:56:09:6b:f4:df:9f:d3:0f:db:fc:3d:cc:3e:38:ad:99:e2:
cc:c4:f5:6b:e3:90:0f:73:de:62:11:66:2e:97:25:93:37:1e:
0b:b5:8e:65:a2:cd:6f:0b:12:bd:6f:d4:0f:03:58:e4:a7:63:
9b:52:c9:98:61:44:c4:42:cf:ab:fe:bc:14:5c:cf:d5:14:fd:
6d:71:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:49:35 2025 by rpki-client