Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
File: i4GUQccJMDSp1GVqL202qyQDP-Q.cer (raw, json)
Hash identifier: GxDFiI3ByYbQ+t4ycuWoxc/Eth+Jql5EPLs+A82kobI=
Subject key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01976875AF10B7F28D6C1CBE8BD415B6569B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Jun 2025 08:43:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213405
IP: 2001:67c:2920::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:75:af:10:b7:f2:8d:6c:1c:be:8b:d4:15:b6:56:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 13 08:43:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:f1:4d:17:d8:e0:0b:e9:26:34:98:02:40:
2e:c0:fd:c3:85:20:11:fe:2d:87:93:37:6b:ec:00:
e0:8d:60:55:12:ce:c7:49:f7:79:38:d2:57:b6:46:
f8:74:2b:55:af:55:96:bd:85:b9:0a:ca:54:07:12:
13:cb:08:4e:e9:3d:3c:9c:f0:e0:ce:ec:b2:a3:2a:
fa:11:d7:2d:cc:75:a6:af:26:17:8e:c8:48:08:1f:
71:a0:00:42:20:77:f6:9e:18:2c:f9:3a:53:57:77:
59:ef:eb:9c:e9:a1:48:b4:f6:38:73:ab:24:42:e9:
07:e7:30:7b:04:26:79:54:4a:e0:71:6e:23:71:3a:
31:ff:0b:1d:3f:b3:e7:8b:c1:1c:05:a7:2c:3c:37:
65:32:4e:f3:80:6a:38:20:1b:23:4f:fe:c2:b9:8a:
ca:41:69:ff:8c:cb:63:73:0c:07:98:3a:78:b3:92:
06:89:8a:ea:4b:8c:78:ea:17:fc:d1:a0:31:ee:11:
cf:36:69:78:bc:d6:5c:8a:45:b3:5b:8d:3a:16:26:
ba:4d:51:06:d5:9a:11:64:f7:cf:89:33:41:92:f4:
d2:86:0d:9f:35:60:3f:33:f2:bd:8b:3b:52:2b:bf:
27:4b:a0:c6:74:06:e8:26:40:da:13:86:f9:1a:34:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2920::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213405
Signature Algorithm: sha256WithRSAEncryption
16:a1:3b:93:1e:21:e8:70:d2:7f:4f:5e:1a:d2:67:a8:41:8e:
2d:0c:f8:2a:5d:b0:ec:99:bb:28:99:72:25:5a:da:3e:f7:f7:
52:b3:f1:65:ad:c6:44:16:80:98:a3:7b:2a:db:f7:f0:d5:69:
e7:e9:7e:21:fb:72:0c:60:54:ec:da:77:94:a5:b2:9b:63:67:
d5:de:73:3c:16:b1:0d:6c:e5:89:d4:cf:82:bc:f7:4a:4b:ae:
e5:55:57:1a:f4:01:a9:3d:dd:a5:91:f9:33:92:e4:88:6c:b6:
34:a6:d6:59:b9:f4:10:e8:9d:32:e2:78:8e:b6:15:e2:78:22:
1b:c9:60:b4:9d:a9:93:46:cc:67:b3:8c:35:57:28:be:15:04:
10:59:12:1a:75:bd:5e:14:31:eb:69:de:a3:02:43:14:78:23:
02:55:49:45:db:6d:b6:a9:75:2c:ac:8b:1e:b8:42:b2:b1:cc:
e2:80:87:95:85:7a:70:ad:37:92:75:d9:55:d2:8b:87:a2:e3:
01:a5:25:bd:67:73:47:0a:dd:92:7c:84:67:19:5c:7c:64:d3:
68:8b:b3:3c:72:e0:47:c6:e1:17:72:b0:40:ad:c8:6d:f9:ed:
86:7c:f6:37:7b:c8:33:68:43:12:9b:c3:96:1f:2d:af:c3:52:
fa:81:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:51:41 2025 by rpki-client