Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xLCiTzhOiW3lHlg149KEYHtJxZE.cer
File: xLCiTzhOiW3lHlg149KEYHtJxZE.cer (raw, json)
Hash identifier: Rnen/MMsnn86wRyiJexvlf6QJ0OwhIK6lQQFGhSg+08=
Subject key identifier: C4:B0:A2:4F:38:4E:89:6D:E5:1E:58:35:E3:D2:84:60:7B:49:C5:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196B016F6F5FA4749BB36182AC2C1534F9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 May 2025 13:30:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209280
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:16:f6:f5:fa:47:49:bb:36:18:2a:c2:c1:53:4f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 8 13:30:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4b0a24f384e896de51e5835e3d284607b49c591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:0e:90:41:ec:86:e4:58:6f:88:8c:93:37:
1e:08:a9:3e:64:cb:0a:74:ad:32:ba:4f:5e:04:99:
12:1a:d1:72:d3:9d:33:f6:3d:a2:82:e1:d4:00:a7:
0b:30:0d:f4:42:e9:25:3b:49:9d:9c:96:c4:98:4e:
c0:2e:0c:42:26:b4:9a:84:db:f5:16:e4:d6:88:af:
5b:ad:a9:99:7f:38:fd:95:cf:04:4d:eb:97:3e:e2:
c3:3b:ae:8c:27:70:f0:d3:aa:f5:b1:63:b8:92:80:
6f:c1:9f:4e:f2:12:15:9b:5d:c9:84:eb:e1:e3:9a:
36:d1:db:f5:c1:de:1f:3c:ed:59:3c:40:14:6f:0b:
67:f0:db:0b:64:e1:98:6d:69:62:85:a8:fc:a1:32:
56:27:d3:47:21:22:80:88:39:e2:62:7e:14:4a:22:
9d:41:d5:a1:94:6b:1c:a3:82:42:29:dd:d4:0c:bc:
3e:ab:88:40:44:40:93:bf:61:82:d2:66:f9:d4:21:
8b:ac:98:ff:a6:1f:0f:7a:0c:c8:b8:5c:a2:79:6e:
f4:25:b9:89:c8:b7:31:12:8c:d4:45:44:61:7d:d6:
c3:1b:28:96:ce:6c:26:2c:ad:ff:ef:22:62:27:78:
2d:41:dc:6d:35:88:e6:33:27:fc:ef:e2:ba:3d:93:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B0:A2:4F:38:4E:89:6D:E5:1E:58:35:E3:D2:84:60:7B:49:C5:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209280
Signature Algorithm: sha256WithRSAEncryption
15:80:07:6d:ef:13:d9:67:02:80:2f:05:97:aa:8a:3e:f9:60:
d9:d3:24:9e:1b:13:bf:f8:83:32:9d:61:60:42:7a:83:07:e2:
af:17:83:12:92:b4:23:a8:d6:c1:21:f5:29:24:d3:9a:77:0f:
1a:d2:25:17:d0:26:f8:f5:01:f4:0f:4e:12:14:2f:26:4f:91:
32:43:f9:be:49:53:91:36:68:a9:6e:d0:95:5d:e9:8e:7d:8c:
b3:73:68:f1:01:36:1c:98:0a:4e:1a:5f:c8:ce:d0:b0:b1:a4:
35:15:3a:00:2e:d3:5d:86:71:c9:cf:21:ad:10:b8:e4:b9:86:
a1:46:38:ba:02:b5:bf:95:51:c1:9b:0b:3a:ec:5f:49:4d:33:
58:b7:00:ba:ff:54:c0:4a:a9:f7:cf:2e:82:46:c8:ac:d5:ba:
4c:f2:30:f6:26:52:28:b3:da:16:52:37:82:37:5b:42:41:fe:
98:60:83:bb:9a:2b:e8:db:31:37:36:ac:52:fe:de:64:21:46:
fb:26:23:f4:02:b6:78:d7:09:75:d8:24:64:2b:1c:74:1b:c2:
cb:39:05:0c:c8:93:ce:cd:71:bf:2d:4a:91:55:b3:1b:8d:1e:
12:f8:8e:64:6b:02:c2:b7:8c:92:12:d6:bc:90:5a:fe:f0:45:
49:aa:99:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:00:12 2025 by rpki-client