Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
File: do_utqkKhqzxGHHk5Xii6n7Cgdk.cer (raw, json)
Hash identifier: WEIiclK8ooecjvuvXZ+Aux/BYS9PnHHgNPHtbTqhk/s=
Subject key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019648422960FE2ADA447A3156D1B73E8C1F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 18 Apr 2025 09:36:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20692
IP: 185.195.112.0/22
IP: 217.72.128.0/20
IP: 2a02:d6a0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:42:29:60:fe:2a:da:44:7a:31:56:d1:b7:3e:8c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 18 09:36:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a2:49:fe:76:cb:4a:5c:4f:94:54:19:66:b0:
82:80:92:07:1b:49:b3:6e:b9:e7:ec:4b:6a:7f:e9:
17:9b:a4:17:94:14:6c:1c:d5:11:93:97:61:8f:b4:
0c:3b:3e:27:86:24:a6:c9:21:5e:1b:f0:c1:a3:a9:
3c:87:02:b3:9b:fb:14:71:bb:3e:38:48:03:35:83:
10:48:a6:2c:2f:70:ff:6d:b9:27:22:58:b7:4b:49:
4b:b9:cd:fe:62:b8:ac:44:8f:1a:cc:b7:ad:ba:41:
cf:28:05:73:96:8a:f2:e1:d9:bd:c4:36:cc:5b:f1:
b1:9a:8f:88:da:ef:55:e7:9c:d8:ee:4e:ce:7a:9f:
0c:10:c5:c1:ba:4a:ef:43:1b:7e:37:aa:59:60:07:
97:dc:1f:8a:38:3d:55:28:fb:df:7e:d5:d6:d1:68:
56:1e:95:f5:f0:48:2b:45:d5:d9:4d:e3:0b:16:4b:
da:4f:00:88:a0:db:cf:25:76:04:ad:29:b4:24:eb:
bf:93:6c:4c:18:dc:e2:6b:7f:e3:cb:ad:f6:79:c7:
9a:a6:04:0d:6d:04:a7:77:48:76:a9:69:9e:42:f8:
ea:92:84:cb:0b:ad:3c:c3:df:83:65:cd:b5:71:65:
72:9e:a2:a3:d4:f1:64:18:2f:b9:4d:45:ca:00:f6:
aa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.112.0/22
217.72.128.0/20
IPv6:
2a02:d6a0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20692
Signature Algorithm: sha256WithRSAEncryption
82:41:e8:c2:4a:43:a0:61:b7:04:03:b6:cb:e4:3c:80:95:5f:
f5:8d:7b:c3:96:3a:f2:85:66:0e:c9:1b:9f:a6:95:9d:dd:df:
a3:0a:1f:15:42:13:5a:8d:a1:11:1b:31:52:26:18:09:eb:d0:
54:cc:7a:1c:01:cf:70:47:b7:7e:1a:cf:ee:d1:fa:92:96:7d:
fb:8e:2b:ee:4a:0d:fe:e4:28:04:ef:ba:87:ac:ab:55:59:f4:
5f:02:62:2c:18:a1:0f:78:11:0c:43:c4:42:e4:c7:a1:c4:55:
21:f0:77:d2:f9:4d:02:c6:e6:ee:55:fe:07:dd:bc:35:c9:48:
89:15:ab:42:e6:07:40:26:ca:cf:c3:a1:b8:a5:2d:05:3f:71:
16:a9:3f:64:3c:66:87:79:65:c9:35:4f:d8:8b:81:d6:4c:5c:
c9:5d:c9:82:83:3e:33:2a:2a:a2:3f:27:44:22:fb:8f:8a:82:
16:43:39:34:33:ec:40:cf:99:07:5e:0b:d9:f9:b7:34:c7:96:
22:c1:e0:f5:53:65:23:33:ae:76:88:c4:97:aa:23:43:8c:70:
78:25:16:8b:fc:3d:aa:a3:e9:d4:30:7f:ce:7c:0c:f1:9d:34:
8a:4a:24:93:7a:77:b4:33:b1:b6:17:25:2b:d7:9b:ab:4c:5c:
b5:2f:f6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:19:29 2025 by rpki-client