Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.cer (raw, json)
Hash identifier: OCn8KsbhtkAThorYNCfovst9jtaqNTvWRP/LRgYqYMU=
Subject key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01963DCDFB64638F9B52DD1CB9BB024D723F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 16 Apr 2025 08:53:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 85.8.154.0/24
IP: 91.217.134.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:cd:fb:64:63:8f:9b:52:dd:1c:b9:bb:02:4d:72:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 16 08:53:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:68:c6:5c:01:5a:cc:b5:c3:14:6c:9b:a4:ea:
4a:73:05:8a:ed:cb:e4:d7:93:b3:f1:f2:63:cc:f6:
97:18:b9:4a:9a:76:6a:2a:63:66:ec:86:3c:d8:4b:
a5:e2:52:11:d2:ad:2b:83:b6:c4:d9:1b:8c:b3:f3:
8a:fe:87:ca:47:26:6d:19:0e:23:6b:06:d0:8c:8f:
38:92:fa:eb:fb:54:89:e5:ec:56:03:9b:3d:19:d3:
64:24:b6:37:71:9a:7b:d3:fc:9d:38:03:ff:42:a6:
6e:da:12:03:f9:94:b7:90:9f:7f:4f:cc:33:9b:a2:
f1:7d:c0:8b:20:95:29:15:45:ee:93:a8:cd:d6:79:
86:0d:a8:a0:0b:9b:c0:da:b0:3d:1a:90:35:89:7d:
cc:35:04:52:a7:1c:c3:da:5e:37:ec:fb:4d:18:8b:
9e:62:45:61:a0:28:f9:79:cd:48:c5:0d:c6:c5:38:
1c:30:2d:14:27:69:e9:fb:bc:2a:8a:50:3d:bb:aa:
fb:79:4e:24:ad:38:d1:96:16:72:82:8f:4d:ed:73:
78:75:5f:02:c9:45:ea:9a:27:23:77:f2:21:ce:40:
06:e3:f6:65:d2:3b:b9:bf:c2:f1:ba:52:c2:c5:f6:
d7:66:b0:7a:3e:ad:a0:09:24:38:2c:74:11:16:fa:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.154.0/24
91.217.134.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:61:72:e8:9c:cb:61:08:d2:03:f4:c3:2f:d0:90:88:b7:23:
50:7f:5f:3d:a5:74:77:67:82:ac:25:5b:d4:16:e1:78:d4:24:
42:ed:03:33:c5:d4:bd:eb:d5:23:a0:80:55:69:cc:a1:b0:60:
59:fb:0e:37:b4:9a:ca:b9:ed:33:d0:0e:d5:d5:01:9a:ea:65:
62:c6:60:be:12:6c:46:2e:96:a2:b9:80:aa:4b:07:c8:67:1d:
53:23:68:1d:71:db:35:ac:e1:81:51:f9:e6:76:b4:87:a1:c3:
f0:ce:34:56:fd:3b:e2:6f:c9:71:41:e7:a5:0d:e4:42:d7:95:
61:7f:fb:fd:5e:27:be:47:99:d0:92:7f:28:41:46:b8:23:27:
18:41:6b:d5:0b:22:33:43:2a:a1:61:55:f6:8e:e2:0d:21:d8:
51:b4:f3:1f:18:e4:17:61:f8:b7:f8:bf:f7:38:4f:7e:9c:e8:
f1:a9:42:70:95:1e:8c:51:90:36:11:90:6c:f9:21:67:d0:89:
30:cd:3e:d1:70:e2:b7:29:a4:b1:3d:a3:fa:d4:e0:bd:39:d8:
ba:a5:b1:08:30:7d:e6:2f:9d:e6:f2:2a:93:2b:4a:bf:99:65:
2c:f9:04:63:27:90:10:ba:0a:f6:b5:83:05:ac:a1:2b:45:e5:
7c:68:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:53:00 2025 by rpki-client