Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
File: KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer (raw, json)
Hash identifier: 9PV1v2duOLuMO8x1I9Nfe58iQCzfayXQcbK2hpaIvEY=
Subject key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421443104DED72FF8EA6BDBA607B2BF9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 37.17.184.0/21
IP: 82.115.252.0/24
IP: 185.152.48.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:31:04:de:d7:2f:f8:ea:6b:db:a6:07:b2:bf:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:28:0f:b1:e0:d2:cf:51:7b:66:98:8f:ef:ee:
bd:8c:2f:8c:d3:ec:2d:45:af:44:f9:59:4e:98:96:
12:bb:6b:d4:d0:da:8b:bf:58:11:b2:21:ed:51:9e:
fa:fb:74:d9:6e:7e:7a:b5:75:60:25:52:9b:2a:de:
62:af:69:05:6a:01:e0:e8:0b:a5:42:c6:3b:c0:dd:
22:8d:7b:16:68:74:72:b5:3f:50:f9:3c:bb:cf:93:
24:34:0a:90:a3:c5:92:36:69:5a:7b:af:cc:c2:b3:
08:15:00:16:86:e9:6a:12:f0:3a:0d:ae:28:95:53:
18:20:a3:dd:d8:2d:2c:0b:33:75:f2:a2:ba:12:e9:
23:f0:7d:f4:9b:10:a5:4c:d0:ba:e1:8e:eb:3c:28:
d4:f4:dc:b1:65:28:43:ef:37:03:7c:15:ca:a9:4e:
bd:2a:07:18:cb:5d:f6:60:24:ed:21:5c:34:5e:86:
52:2e:35:7d:27:9e:30:21:ff:7c:7a:cb:77:f8:63:
71:21:04:46:67:54:90:f5:80:d0:65:61:31:b7:3b:
c3:4b:0e:67:3b:ee:e2:da:88:0d:c0:31:39:60:24:
8a:07:a1:6f:88:1b:89:b9:8f:3e:ba:02:a1:4f:fe:
90:82:0c:d2:e2:9a:33:cd:1d:1c:f4:b9:52:c2:95:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.184.0/21
82.115.252.0/24
185.152.48.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:52:75:7a:2e:97:cc:c7:a0:3f:01:6f:89:59:a7:3d:35:8c:
34:f9:b2:07:bb:51:5d:74:70:93:bd:5d:8a:1d:23:85:26:43:
68:6a:42:55:cf:ba:63:51:06:34:59:87:a0:38:e8:9f:03:ca:
6d:4a:48:13:f9:7c:67:bb:dd:09:4a:c7:f2:b1:e1:9d:20:95:
0b:90:14:32:1d:77:de:09:b9:92:1a:ab:f3:10:be:5f:11:f9:
a9:fc:e8:40:30:8e:4b:c2:e0:75:0b:59:c4:c4:4c:89:4d:4b:
82:ba:c3:6b:1f:c5:43:57:90:fc:96:c0:30:de:7e:e4:41:f5:
0c:51:76:e1:4d:a1:0b:4f:f8:7b:3f:06:82:28:e3:90:7f:bb:
91:e1:2e:67:00:e1:ba:42:f4:f3:f2:ea:2c:b9:29:c5:b3:c5:
3a:96:91:fd:50:71:eb:51:bb:1f:62:01:72:2c:cf:53:fb:31:
e9:26:68:72:d3:b4:da:90:82:17:dd:4d:6f:1f:de:5f:e9:e7:
f0:36:0f:d5:4d:a8:6e:10:26:82:1e:c8:e6:2f:1d:9d:48:ff:
92:ab:0b:82:5a:63:b0:51:55:36:0c:dc:d0:4f:06:d9:0b:3e:
ac:25:80:1d:45:f0:ca:39:81:f8:d4:23:44:b7:2c:1e:eb:2d:
dd:1f:36:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:02:29 2025 by rpki-client