Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
File: kY9WbI_5USpXSMwUifCTXCXYxKs.cer (raw, json)
Hash identifier: Y0By1pINQsv5KQWBVPmKLYlzM5+we/bUYrqhhv4BcPI=
Subject key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01973714338BE2AFB7C0E4EA6BD5953FB6F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 03 Jun 2025 18:36:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.239.104.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:14:33:8b:e2:af:b7:c0:e4:ea:6b:d5:95:3f:b6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 18:36:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:05:3e:81:c0:7c:ad:8e:68:6f:04:3d:b0:
21:b7:c7:99:1d:7a:14:a4:7e:a3:ea:30:10:1b:c8:
f7:f4:eb:13:c5:fd:37:9a:34:20:5d:40:85:80:92:
88:91:f4:d6:52:fa:d2:b2:43:ab:4a:ee:7c:ee:79:
cb:c5:3b:c9:b4:ec:10:fb:55:c4:a6:0f:85:09:a8:
b9:9d:ce:f1:f5:8b:b9:30:08:d2:48:eb:1a:cc:eb:
aa:f1:a1:7a:08:9c:ad:b9:1e:6f:c4:a6:ce:50:d4:
0c:01:b0:f4:1f:59:86:29:f1:0d:9a:b2:a4:df:25:
25:5b:a4:ac:57:e3:31:87:d0:6a:e4:66:ad:3f:3f:
bc:35:34:36:1e:a7:61:1b:8d:6e:6c:0f:f2:c6:9d:
0d:cb:63:63:08:b0:67:af:fd:ed:a5:46:36:77:a2:
55:d8:84:2c:32:a8:bf:23:fc:c7:3c:7a:4c:11:92:
4f:50:90:df:a8:80:4d:c0:5d:4b:4b:ad:c3:f0:35:
41:46:6b:36:0a:fc:2c:4a:e7:39:ad:01:0e:81:a2:
ab:bc:48:a7:6b:85:b7:73:8c:4d:c0:9c:65:b1:c4:
e3:ce:c1:90:00:30:27:3f:13:87:a9:50:33:71:43:
01:c5:47:da:88:81:17:24:04:5a:a2:6f:ee:ee:a0:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.104.0/22
Signature Algorithm: sha256WithRSAEncryption
99:98:c1:b6:b1:68:e1:1d:99:52:43:ce:72:3e:95:c4:38:b4:
00:81:05:d9:e9:79:09:0d:e2:41:00:ea:25:d6:e1:3c:3b:1d:
68:f9:f7:f6:8c:42:1e:06:fa:21:6d:f4:fc:34:58:6d:82:b8:
47:c3:99:28:38:ed:26:2f:d7:f6:6f:6c:dd:64:fe:56:16:ce:
b4:2b:3a:91:dd:c0:43:c0:de:36:1a:d1:6b:90:15:6c:04:e6:
11:14:d5:6c:f9:6d:59:ce:92:7e:f7:ab:6d:4c:94:8d:10:7b:
78:48:7c:00:44:4b:12:4e:a8:fe:0b:99:e3:1f:b4:02:dd:fc:
fb:fa:90:50:17:f4:7b:18:af:f7:7c:b8:f4:45:58:f4:e5:0c:
11:e2:00:f5:86:fa:f8:e2:b5:9f:84:ae:d4:b3:c1:93:71:3e:
4e:cf:bf:72:d8:cd:3f:4f:e1:24:5f:77:ca:e7:03:7e:94:95:
e7:e3:00:f5:a0:ac:e7:9b:05:fe:3a:b8:bf:bf:7a:f8:c9:53:
d8:b0:19:f8:c9:42:8a:60:ea:58:96:d8:68:42:d1:6e:57:2c:
55:00:91:fb:7c:53:e1:8c:3d:ef:5f:43:17:14:cc:56:d4:39:
2b:c2:da:d9:00:95:72:9c:f5:c7:68:cc:25:95:db:e9:37:11:
15:05:8a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:05:07 2025 by rpki-client