Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
File: 4rVv8vrl9iGUksEtg-EjnWrW4S8.cer (raw, json)
Hash identifier: lU/FawGUYA0i6MhdDzIh64gARNACwVGFwOew76DU2uQ=
Subject key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B64747DC656EF1FC630431B7644A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:1b54::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:64:74:7d:c6:56:ef:1f:c6:30:43:1b:76:44:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:5f:08:55:ea:7c:03:ff:90:02:09:f6:05:
1f:1f:90:bb:d0:6a:0e:be:0f:38:82:21:6a:4a:cb:
90:3a:cb:a6:21:69:48:da:54:a4:a5:fb:ea:a5:c5:
8e:d0:8d:43:aa:c6:eb:fd:81:f0:4d:76:5e:c4:57:
3f:ca:21:88:58:93:5b:b6:3e:77:c4:9a:b8:9c:c9:
d9:c1:52:9c:eb:ed:d7:97:97:20:4f:5e:11:d4:a7:
04:e7:2b:d4:7d:53:71:ca:29:bf:5a:2e:a6:0c:e6:
63:0f:20:96:0e:fc:41:29:01:44:eb:de:53:da:03:
2b:fb:3b:1a:08:36:24:4c:4a:78:9c:46:42:69:46:
d4:78:81:c7:9e:a9:dc:e2:a6:26:a0:36:fd:8d:e4:
94:9c:9d:b1:f6:13:aa:84:73:b3:47:19:64:20:a6:
f9:62:79:6b:28:6b:90:49:cf:1c:43:06:04:42:06:
63:c4:82:fc:99:f0:53:04:3a:9d:77:1c:ed:5a:5a:
b8:98:c4:59:6f:cd:fc:7d:7a:7d:b9:5d:df:ab:f4:
87:89:83:87:13:67:2c:ac:94:11:5c:96:02:11:01:
c4:94:df:59:55:12:fd:81:c1:78:21:1e:7f:2c:a6:
ea:e2:ef:d4:d2:47:29:5b:ae:74:15:e0:17:0b:9c:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1b54::/48
Signature Algorithm: sha256WithRSAEncryption
72:e3:7f:60:90:30:d4:36:88:9e:ce:b2:01:d1:8b:28:4f:a7:
88:bf:6c:95:0f:3b:7c:66:a2:a9:30:df:38:5d:61:6e:41:ce:
83:e6:86:04:93:5e:79:c3:50:98:62:30:0f:ab:ad:54:fb:83:
74:77:f6:25:60:44:b3:e4:d6:85:42:b4:72:98:8c:8f:68:de:
7f:05:56:3d:08:aa:fb:b7:b2:63:c9:d4:c6:05:08:95:4a:04:
de:24:20:2f:1e:83:91:5d:b0:8d:91:a9:e2:f0:ed:c9:f6:d1:
81:dc:c0:62:29:7c:26:2a:ab:87:e8:ad:9d:64:12:36:0c:da:
b0:54:28:28:80:37:d3:65:cc:48:29:b4:2a:f8:f4:15:cf:dd:
be:5e:52:15:0b:44:52:22:8b:3f:b7:a4:91:a1:37:b6:66:ec:
93:6e:e6:8b:bc:18:d9:66:db:77:25:5b:f7:27:6b:e0:9e:79:
6e:e2:a8:29:1e:28:64:29:2b:d1:da:15:98:80:51:b9:fa:ad:
20:e2:97:e6:32:19:5f:ee:b7:36:1e:23:af:b1:e2:bb:c6:43:
92:56:d7:b7:02:46:68:a9:0a:8a:17:35:96:3a:22:b4:6d:db:
30:bb:10:49:ba:a2:e4:97:5c:96:bc:6d:aa:ce:ea:8e:07:5f:
0d:93:4d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:48:50 2025 by rpki-client