Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
File: 76vFwTMKPwsDGbsWxENIzRuBnkQ.cer (raw, json)
Hash identifier: VciosBRInIYH977o+Mhy+rOCopu3sqQEc6LWKhFFuEE=
Subject key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1C342E61B872E8C28F782A375B6F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.0.212.0/24
IP: 2001:678:8ec::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c3:42:e6:1b:87:2e:8c:28:f7:82:a3:75:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:90:bc:3f:af:2f:75:06:4b:b6:c7:56:9d:
0b:95:16:4c:65:0b:1b:00:53:99:7d:ae:dd:3f:6b:
a2:a0:db:f9:b7:bf:b3:cf:5c:97:f2:57:3f:e0:cd:
a1:65:ff:41:d5:e4:ca:e5:cf:cf:82:4b:b0:02:79:
f6:63:16:b2:a8:9a:68:6b:a1:4e:65:ec:82:3a:4a:
ed:e2:85:fa:15:75:da:d1:57:95:73:70:c9:45:22:
c2:d0:30:48:60:9f:1e:f9:97:6d:8d:57:bf:8c:6f:
59:3e:d8:a1:f1:de:7d:f6:2f:0b:eb:41:eb:38:c2:
76:d0:b3:0e:8a:65:3b:e4:0a:fa:07:4f:0d:fa:89:
ef:40:d6:d9:ee:d9:40:00:ec:1c:49:4b:00:09:e7:
a9:73:5a:32:89:7b:f6:3d:e8:c1:ff:2a:81:66:dd:
f4:19:c1:81:91:52:3a:8c:8d:ad:b2:7c:89:56:74:
22:5d:86:a5:ec:3a:31:5a:2f:b3:53:22:cb:a6:23:
7e:fc:50:2d:91:c3:38:eb:08:89:82:06:04:51:b1:
7a:08:77:3d:ab:95:e1:4d:df:eb:b3:fa:24:1f:bf:
0e:16:a4:62:ef:ae:e8:ff:67:19:78:60:81:d4:31:
be:52:21:ec:eb:73:aa:0c:d5:98:f4:8d:84:f7:87:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.212.0/24
IPv6:
2001:678:8ec::/48
Signature Algorithm: sha256WithRSAEncryption
09:5b:7c:11:37:52:61:a3:58:47:c0:33:93:5d:b9:73:75:80:
a7:5a:db:df:aa:1a:bc:d7:cf:ab:73:c6:39:a1:2e:5b:00:0b:
bf:d0:58:b0:59:fd:2d:fe:3e:8e:bd:3a:ed:91:38:9e:e4:a7:
7c:9c:a0:c3:87:a7:46:b0:e3:df:9f:e5:ed:ad:6a:a8:7d:66:
32:47:e9:82:9d:7a:fe:67:a0:a0:91:a0:2a:18:e0:91:47:3d:
3e:3a:a3:e0:17:f8:cf:e8:bb:6e:07:43:f3:d2:93:48:08:33:
73:5c:c2:d0:63:34:76:7c:06:4a:5f:b2:9f:aa:41:8f:9c:57:
6f:57:9b:5b:b0:16:bd:e1:1f:d6:20:18:80:cf:2b:35:80:77:
52:c2:6b:1d:0e:1b:0a:88:7e:75:0a:2d:01:8a:b2:d2:80:23:
a2:67:60:73:50:8a:74:5d:6c:42:f6:19:9e:c2:38:72:c4:8d:
71:fb:eb:cb:44:a6:08:31:93:78:35:61:f2:d0:52:c8:cc:97:
e1:4c:a7:15:32:d5:ff:fa:d9:07:8a:38:b3:71:a7:85:21:f5:
70:f3:e9:13:a6:72:7f:cf:80:cf:ac:cd:54:f6:d5:1d:70:5b:
9c:46:e6:a9:2e:1a:7f:a2:18:50:59:5d:af:8e:82:77:9e:b6:
65:a9:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:27:10 2025 by rpki-client