Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
File: tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer (raw, json)
Hash identifier: Q0qoFtL7nfJKawFrNln+ZhkKUw1voaPfU6disg9dfAI=
Subject key identifier: B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196ED9FAA48A3E3B6AEB44B5D7C9BED6249
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:16:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209388
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:9f:aa:48:a3:e3:b6:ae:b4:4b:5d:7c:9b:ed:62:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:16:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:8d:5f:06:d6:53:c3:0f:7f:db:02:81:8f:
91:a1:4f:5a:6c:88:eb:67:66:eb:44:57:e7:27:ad:
f7:b6:fb:a2:78:1a:76:f1:eb:6a:ed:41:75:49:0a:
c9:d4:a7:90:9b:a6:fe:64:3d:76:2e:18:7b:e3:19:
94:0b:e3:df:38:d1:c2:51:65:f8:9a:6e:2c:51:1f:
23:03:43:b8:7d:ae:93:02:ed:6b:ad:c0:e4:86:6c:
63:22:94:89:d0:6d:69:c3:5c:8a:ba:8a:07:1a:3d:
6d:a8:45:3e:44:95:c7:2f:5f:88:99:4b:ee:8d:53:
5d:cd:22:68:06:a5:95:b3:cd:9d:53:3d:de:e4:86:
95:21:49:44:57:92:99:d9:6b:86:b9:ac:2f:9a:65:
f8:94:70:58:8f:1b:59:f7:dc:0b:40:96:45:e3:b9:
2e:7a:ac:8b:3a:b9:20:90:cd:98:b9:ba:3a:f9:2f:
08:06:5c:d4:f7:31:28:f8:db:ba:c0:da:49:43:e0:
ab:f7:0e:57:92:9d:2f:17:b0:db:d2:ff:e2:3e:51:
97:b1:73:2b:2c:f0:4c:ab:5f:ec:49:8c:50:b4:60:
97:d2:a6:97:de:a5:d3:1e:3f:ca:d4:f4:c2:c1:2f:
40:13:e4:e3:26:61:f7:53:bd:f8:03:ed:3e:6c:ea:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209388
Signature Algorithm: sha256WithRSAEncryption
04:35:c3:40:aa:e0:ac:23:1f:ce:0b:2f:6b:7b:e0:79:58:96:
fe:18:06:92:0b:2a:e7:60:0c:2a:ea:47:be:bf:39:7d:45:55:
41:e9:0b:0c:79:5f:ee:ef:93:d2:13:db:a3:cb:97:9f:e5:61:
28:5d:5f:de:77:65:7a:56:61:53:74:63:1b:a4:7d:a2:c4:0b:
84:57:57:e8:f7:45:41:df:9b:d8:82:60:8c:6a:2d:f9:62:c3:
43:21:5b:c0:8e:28:26:b1:35:df:fd:c0:41:1c:cf:44:58:a4:
8a:e5:ee:76:eb:43:47:78:e5:18:0f:f5:75:ac:f1:72:a9:5c:
74:42:ae:8f:0f:8a:42:85:92:e9:1a:4b:66:72:69:b6:a0:4c:
9c:79:0e:a3:07:9d:96:e9:0f:75:ac:0b:90:a6:97:af:f1:4f:
5e:ad:68:e1:57:e5:f0:0d:6a:a7:a4:ec:e3:d5:63:f1:4b:3d:
0d:ff:be:24:86:7e:0b:41:e9:1d:c5:5a:4a:87:e5:7a:71:f5:
ea:b7:e1:3a:37:c2:aa:60:63:ac:03:0f:6d:53:99:3b:47:b0:
e9:e7:bb:62:34:eb:8c:54:6c:bc:ec:ca:cc:92:b1:24:43:b8:
e4:ea:25:4d:cb:45:95:d1:4c:b6:34:ef:17:d9:50:0c:16:33:
48:4d:f1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:55:05 2025 by rpki-client