Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer
File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer (raw, json)
Hash identifier: mSwhCPe1P00rixHsjMQtA66vpyasC8alB/SVOIRTc0w=
Subject key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01956739981E09FE102A1D711406F5E0F79E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Mar 2025 16:53:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:678:1040::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:39:98:1e:09:fe:10:2a:1d:71:14:06:f5:e0:f7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 5 16:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:ea:97:f2:9d:94:72:53:c4:56:7f:41:b9:
82:86:9d:8a:30:bf:e6:b2:d2:16:00:80:d7:f6:0b:
9b:d9:e7:79:dd:90:f2:19:4a:4e:ee:ee:e9:a5:c2:
3a:f7:5b:6c:a7:7b:63:8f:95:b6:6f:b3:5a:3d:48:
4b:e8:67:56:ce:0d:3c:69:ec:d5:7a:0b:47:24:8f:
58:5d:6a:f4:5c:18:58:55:7f:c9:f4:b4:fe:98:87:
70:42:74:33:94:ce:d2:2b:3a:a7:00:51:e7:0a:c7:
41:ba:e6:66:8d:2a:5a:4b:6a:03:8e:35:f6:2a:4a:
9f:c6:b9:42:f5:a0:fb:0f:2d:08:59:1b:e7:94:d8:
13:db:f0:37:90:99:ff:dd:dc:84:b8:af:df:b0:cf:
bd:ad:a7:0d:70:0b:cd:36:de:a0:23:3c:10:f7:ce:
2a:50:7d:5c:e3:28:f7:63:55:0e:90:f2:bf:2f:7a:
3c:66:7a:f0:32:98:33:87:03:25:71:af:3c:37:b7:
3f:1f:ec:a3:3a:08:a4:84:33:20:7e:ac:7c:49:39:
00:cc:f1:93:d3:90:f1:01:5a:a9:7b:62:cc:63:ce:
99:b1:6e:26:3f:ed:2c:98:ac:fe:c7:7b:cc:0d:52:
7d:da:21:12:3f:ec:27:24:dc:10:9f:fc:35:d7:5d:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1040::/48
Signature Algorithm: sha256WithRSAEncryption
a2:8e:4a:d3:99:78:59:de:6d:ca:36:11:f9:57:87:13:ca:84:
3d:c8:48:a0:ed:ec:9b:44:95:8b:41:d9:97:e3:1e:28:4a:08:
a5:a5:74:9c:14:22:1f:f7:3a:e4:16:12:10:1d:74:ac:cf:e7:
5a:46:85:1c:bb:7d:18:cc:6a:66:1a:e1:37:bc:3f:40:da:44:
e3:8c:89:c9:9c:d8:5a:a4:c4:d8:7e:be:62:5c:b3:38:7e:64:
09:33:4d:4f:96:0b:1f:a2:4d:ac:81:85:0a:f9:d1:c5:4f:46:
24:6e:d2:d6:e0:dd:52:d9:78:29:23:31:be:f3:45:8d:20:7d:
98:13:19:2d:d2:de:77:02:31:23:61:f0:14:36:0f:18:85:0e:
73:36:30:ff:fc:9e:ca:b7:2e:40:25:57:83:51:2d:cb:44:80:
c8:34:9d:9b:80:be:00:ef:2b:2f:4a:58:26:39:6f:55:d9:74:
b2:ac:53:96:6a:9d:0f:31:09:3e:0b:63:17:36:f7:cb:8d:42:
4a:46:7e:c7:c1:b7:21:e8:91:83:b1:df:1d:13:4e:86:28:3d:
96:59:44:b1:7d:83:8f:41:8e:a4:51:18:76:e1:ce:3a:98:20:
65:7e:c3:a6:8b:32:bf:5e:39:25:e1:f0:d6:2c:6d:92:4e:c2:
59:b3:bd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:35:10 2025 by rpki-client