Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
File: GRqWooxl1YTI3SNNPbREz0sze6I.cer (raw, json)
Hash identifier: DeUhZA60MWM1GKDE37dVNo3sf0zywKfxSO/fH8YRSbs=
Subject key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444AF35441B3D4CF3F9DF5331B25D43
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 46.31.232.0/21
IP: 185.165.52.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:af:35:44:1b:3d:4c:f3:f9:df:53:31:b2:5d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:31:0a:13:d8:52:e2:72:c7:13:c7:e3:b8:
64:c3:92:65:8d:6e:21:23:9a:c4:10:9c:27:c8:f6:
94:40:30:71:e4:95:4e:cf:48:90:c3:e1:a4:0d:65:
8b:8f:ab:e8:f3:c2:5f:db:6a:de:b6:d5:7a:2d:af:
6b:82:5e:92:17:6e:c5:1e:30:ca:28:e1:57:08:94:
e7:e0:c7:8b:fe:17:10:77:fc:99:ac:32:61:b4:d0:
0e:30:43:93:fd:10:7a:1c:ad:75:af:4a:bf:b2:64:
74:9d:a0:72:c6:33:34:b4:5c:0f:e7:1b:85:97:f7:
80:4c:5b:85:cd:75:70:51:9c:e1:88:15:a4:97:2f:
af:84:89:86:cb:56:2b:cd:75:ab:53:09:b0:03:f4:
fd:7e:8b:50:de:e5:29:80:52:f0:1d:f9:7d:53:73:
80:d3:95:69:a4:ff:eb:a7:ce:58:fa:35:36:98:ba:
7b:a8:a7:92:34:d0:6f:f1:d7:fa:61:b8:d5:3a:6c:
a5:ac:29:c7:09:a9:63:0c:52:92:6b:62:6c:1f:17:
cb:97:45:12:76:9f:5d:70:24:1a:07:82:18:35:0a:
f0:c1:6e:ea:96:4c:45:03:2e:c9:d6:ad:35:1a:2b:
1e:57:68:42:a5:1e:27:f3:65:f3:74:4f:e6:1f:1f:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.232.0/21
185.165.52.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:75:c0:3e:21:d6:e3:fc:a1:48:08:e7:c4:16:f0:6c:ee:9c:
21:84:8f:19:25:1b:77:39:ca:98:44:66:3c:c7:9b:e0:ac:67:
a5:6b:64:c4:bf:24:db:e2:41:3e:57:31:86:22:f8:a6:bb:76:
a7:d4:c0:94:a5:0b:cb:a8:29:62:e6:20:22:a3:78:ae:0c:b8:
61:65:2b:70:aa:b9:74:da:2f:87:ee:0d:8f:02:a6:60:80:95:
7e:59:3c:f1:12:54:09:9c:7c:1c:6e:19:09:20:2e:8d:15:a5:
24:d5:40:df:ed:f2:7d:e7:16:72:c3:fc:9b:f8:a3:62:ed:7e:
94:16:70:48:a8:dd:18:b4:d8:e2:f7:01:be:d8:ab:d5:fc:cb:
b2:3c:ea:a8:84:d4:f8:e8:1d:1d:8e:75:42:ff:47:27:71:35:
a1:89:7f:8b:9a:7c:32:d2:90:87:ee:de:4f:48:0a:99:f0:81:
a0:f8:83:18:ef:84:57:f9:32:65:c4:b1:7a:4b:44:71:fa:fd:
0b:8a:ec:0f:26:05:34:98:66:89:31:b9:e6:60:e6:84:5a:53:
11:1a:64:5f:c5:29:2e:ad:82:f4:fc:a1:eb:15:28:4b:12:94:
68:05:d0:c9:e9:e1:32:3e:98:ce:40:f3:47:32:ea:04:11:bc:
22:ab:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:41:03 2025 by rpki-client