Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kdTzrA50tq60hL0U9ocdmjBCK30.cer
File: kdTzrA50tq60hL0U9ocdmjBCK30.cer (raw, json)
Hash identifier: HQ4jNCt3tb0cK2R2tLlfGTLoV+dJNQRZxkDovn+0Ot4=
Subject key identifier: 91:D4:F3:AC:0E:74:B6:AE:B4:84:BD:14:F6:87:1D:9A:30:42:2B:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019763B501D78B230CFF7B30ABD15D7842BA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Jun 2025 10:34:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207091
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:b5:01:d7:8b:23:0c:ff:7b:30:ab:d1:5d:78:42:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 12 10:34:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91d4f3ac0e74b6aeb484bd14f6871d9a30422b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:ce:1a:d4:9c:cf:0d:05:93:8e:5c:3b:40:
4c:71:bb:12:46:ec:16:36:ce:d8:40:35:23:26:7a:
a4:77:8c:f5:25:cf:df:d8:14:63:b8:b7:1f:e4:99:
cd:b5:df:ef:33:1b:c8:80:1e:3c:7c:2e:f9:c9:65:
1c:73:61:a3:91:46:4f:3e:0d:ef:58:e4:ed:8f:21:
eb:57:5b:75:53:f3:f9:14:fb:2f:5f:4c:d9:1d:29:
e0:d3:5f:29:f9:b4:f6:2f:ee:8a:70:d3:10:06:9c:
61:06:96:72:7c:fa:d6:f3:7e:30:f9:54:ec:c4:3c:
3a:e8:e7:1b:5e:02:f1:56:93:2f:95:7b:a3:90:bb:
c0:d2:e1:06:33:2a:c1:1b:10:4a:4e:2a:ad:18:1a:
11:a3:0a:8b:5b:76:62:c6:aa:f4:25:76:8f:41:28:
95:b6:3b:90:76:04:0f:93:01:97:d3:14:7e:51:f2:
73:e9:e3:d9:60:94:c8:4e:ec:34:f4:8f:e2:19:c7:
5a:9f:e1:7e:81:a7:36:f8:82:9e:11:26:a4:65:c2:
64:50:2f:c4:be:d2:6e:f9:b8:8b:ec:a6:3c:6e:63:
e1:6d:4e:f6:f7:a4:6d:87:f6:2e:6b:96:b3:9d:3d:
f0:c4:f8:d4:e3:47:61:c5:d3:4a:87:35:59:5c:23:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D4:F3:AC:0E:74:B6:AE:B4:84:BD:14:F6:87:1D:9A:30:42:2B:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8d0c68-61a5-4ae1-a831-aa104732f573/1/kdTzrA50tq60hL0U9ocdmjBCK30.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207091
Signature Algorithm: sha256WithRSAEncryption
04:90:06:63:f9:7f:25:16:a7:4d:9e:bb:66:bc:8c:65:1b:c5:
74:46:af:2c:72:dd:ae:d9:5c:3d:6f:65:72:80:37:e4:33:35:
ee:38:fb:57:ec:a8:90:7d:10:f1:c7:f3:17:b1:99:3b:a7:58:
e1:b1:d3:4c:af:e1:49:9f:63:67:b6:16:4c:e8:15:d4:fe:2d:
b9:76:48:36:63:24:00:40:26:bd:a5:cd:97:dd:0f:f6:69:70:
4f:55:02:6c:cc:de:e3:b4:17:0c:9b:7b:62:63:9f:5b:23:ff:
2e:4c:a5:da:85:92:41:4e:f8:84:02:bd:7b:55:fa:a7:70:ed:
1a:18:45:b4:cd:09:c8:0f:68:1e:61:bc:48:53:fc:e3:f1:86:
70:24:d5:5d:d2:c8:10:9f:46:30:d8:79:18:e8:22:37:45:83:
e5:14:b2:12:dd:fc:64:29:cd:81:6b:3d:81:f9:0e:af:e0:86:
12:26:d3:f8:36:f6:1f:ed:46:df:4a:d3:6b:69:45:26:8d:9d:
71:17:9c:09:ed:d9:03:a3:89:96:59:f7:bb:c8:36:4a:fd:f6:
a1:d4:8a:f3:47:3a:3e:bb:0a:78:03:67:79:94:0e:bb:dd:5e:
19:f4:5f:1c:d1:c1:d4:b4:d7:e0:2b:af:fb:bd:cc:b3:c1:4e:
6c:55:22:6b
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZdjtQHXiyMM/3swq9FdeEK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNjEyMTAzNDU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWQ0ZjNhYzBlNzRiNmFlYjQ4NGJkMTRmNjg3MWQ5YTMwNDIyYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+TOGtSczw0Fk45cO0BMcbsSRuwW
Ns7YQDUjJnqkd4z1Jc/f2BRjuLcf5JnNtd/vMxvIgB48fC75yWUcc2GjkUZPPg3v
WOTtjyHrV1t1U/P5FPsvX0zZHSng018p+bT2L+6KcNMQBpxhBpZyfPrW834w+VTs
xDw66OcbXgLxVpMvlXujkLvA0uEGMyrBGxBKTiqtGBoRowqLW3Zixqr0JXaPQSiV
tjuQdgQPkwGX0xR+UfJz6ePZYJTITuw09I/iGcdan+F+gac2+IKeESakZcJkUC/E
vtJu+biL7KY8bmPhbU7296Rth/Yua5aznT3wxPjU40dhxdNKhzVZXCOIEwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFJHU86wOdLautIS9FPaHHZowQit9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzhkMGM2
OC02MWE1LTRhZTEtYTgzMS1hYTEwNDczMmY1NzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvOGQwYzY4
LTYxYTUtNGFlMS1hODMxLWFhMTA0NzMyZjU3My8xL2tkVHpyQTUwdHE2MGhMMFU5
b2NkbWpCQ0szMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMo8zANBgkqhkiG9w0BAQsFAAOCAQEABJAGY/l/JRan
TZ67ZryMZRvFdEavLHLdrtlcPW9lcoA35DM17jj7V+yokH0Q8cfzF7GZO6dY4bHT
TK/hSZ9jZ7YWTOgV1P4tuXZINmMkAEAmvaXNl90P9mlwT1UCbMze47QXDJt7YmOf
WyP/Lkyl2oWSQU74hAK9e1X6p3DtGhhFtM0JyA9oHmG8SFP84/GGcCTVXdLIEJ9G
MNh5GOgiN0WD5RSyEt38ZCnNgWs9gfkOr+CGEibT+Db2H+1G30rTa2lFJo2dcRec
Ce3ZA6OJlln3u8g2Sv32odSK80c6PrsKeANneZQOu91eGfRfHNHB1LTX4Cuv+73M
s8FObFUiaw==
-----END CERTIFICATE-----
Generated at Thu Jun 19 05:05:11 2025 by rpki-client