Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
File: P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer (raw, json)
Hash identifier: X0eJ3zlggKBgoZkcnqEPQySF0z+qh8oXSB9Dg9YjZoI=
Subject key identifier: 3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195F5A54D50F1809F35F32650A45A164F1C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 02 Apr 2025 08:36:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.102.100.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:a5:4d:50:f1:80:9f:35:f3:26:50:a4:5a:16:4f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 2 08:36:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:ce:ec:54:da:59:c3:84:da:5e:70:7a:a5:
f8:13:4e:49:4c:f7:c0:d3:44:5a:6a:91:2c:7a:b3:
8d:4b:05:62:45:75:92:6b:4f:97:24:70:f4:47:74:
cc:6d:15:b0:ec:df:32:f6:16:55:b3:db:e4:0b:fa:
d5:64:b2:74:ad:68:dd:62:4d:38:0f:a8:43:fb:46:
ed:ab:7d:27:65:74:f1:be:ff:70:ec:f1:52:98:cd:
cb:6a:bf:4e:bc:4e:d9:04:be:17:06:24:a8:24:81:
5b:42:5f:3d:8e:d0:00:47:03:3c:de:41:fb:f7:0a:
88:c5:c2:61:89:71:20:ae:8a:cd:e8:28:f5:50:d5:
d7:91:99:a6:e9:25:3d:49:3d:81:b2:a4:e0:18:78:
24:44:76:dd:01:c8:67:c3:62:64:e8:3c:58:dc:79:
71:f3:05:2a:32:ae:fb:3c:41:27:3e:1d:ed:aa:87:
82:2e:64:b9:e5:9a:ef:13:f6:a8:d1:c4:86:4a:fc:
68:94:aa:7c:a3:c6:f8:d7:bc:8d:c3:8e:7b:93:61:
c3:71:63:7b:3c:26:7c:0f:1b:05:60:f9:30:a2:c4:
70:30:a0:df:30:f7:3b:5b:10:12:90:1e:ff:4a:e1:
76:07:63:b5:ac:96:fb:0f:86:37:00:85:fc:e5:e5:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.100.0/24
Signature Algorithm: sha256WithRSAEncryption
27:88:53:02:20:90:4e:44:6d:9c:54:25:19:e9:05:05:45:bc:
f0:4f:b3:47:b7:7d:34:36:1a:b1:6f:58:72:32:dd:01:60:e0:
38:be:d2:ff:5d:2d:db:4d:d9:25:e3:b0:17:b1:71:39:bd:85:
99:27:a5:83:3b:fb:9b:06:d6:3f:e0:9e:49:ee:37:3b:4e:d9:
b0:53:30:d8:d3:15:47:e3:eb:c7:e2:53:b4:14:42:82:dc:15:
59:d0:ed:84:10:1e:51:36:e8:12:77:d6:0a:87:75:f3:bc:47:
bc:1a:08:25:b3:50:20:d4:46:95:e3:4c:e7:a3:27:9d:ee:7b:
2e:bf:79:23:08:b4:aa:46:fb:bc:29:a2:b3:a3:5e:3b:b8:c5:
f8:f6:59:24:2a:40:de:6c:9a:dd:e1:2a:54:dc:ff:f2:a5:b8:
8e:e8:74:17:9f:5e:8c:4b:41:85:bb:29:a2:38:90:5e:e4:b4:
e3:61:64:a2:37:ce:32:aa:f5:87:71:de:1c:c2:10:8a:71:9a:
10:e4:3f:5c:a8:48:8a:dd:f8:03:d0:92:16:c1:45:c4:8e:69:
46:ca:a0:9f:ad:f2:e3:b9:6e:e6:fd:7d:f9:c3:82:f5:2c:9f:
27:e0:d3:7f:67:78:b5:62:2b:5c:4f:a3:f3:f8:8a:05:87:ff:
bc:3c:58:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:29:28 2025 by rpki-client