Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
File: PBnm8n2SgJXlYN52ePKONFnVWUc.cer (raw, json)
Hash identifier: ql+vROf92JkImcxRh8VNhQGUpuqN4h0jrVfNmUdyciA=
Subject key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019638A148F3E9D1C90B98DE6C0DF83AA8A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Apr 2025 08:46:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.36.186.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:a1:48:f3:e9:d1:c9:0b:98:de:6c:0d:f8:3a:a8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 15 08:46:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c19e6f27d928095e560de7678f28e3459d55947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:27:83:c0:a2:e7:0f:1d:08:2c:8f:b8:8e:c8:
64:ab:c8:c5:02:ca:6b:6d:bc:db:e3:d6:c5:cd:e9:
78:c6:90:07:0a:ba:ff:57:ff:a6:80:0f:7b:39:90:
39:db:50:9e:28:99:81:a2:cf:98:97:18:18:39:58:
96:aa:e1:a5:30:32:55:51:fd:32:18:b0:f5:7f:53:
36:5b:76:12:b3:83:56:64:43:38:95:a6:25:83:3e:
10:e0:ba:65:52:03:c9:5d:e5:5c:d4:d7:5c:e4:51:
95:7e:d7:01:41:30:15:12:89:3b:af:ec:f7:26:54:
a2:29:dd:bc:71:80:d6:83:d0:09:51:fe:95:b2:05:
18:4a:21:46:1e:cc:fc:10:d7:9f:ee:fc:be:db:07:
10:84:32:81:2d:92:11:c9:7c:cf:17:d5:6b:d7:2f:
2b:08:79:04:23:f5:b3:cb:ea:83:a2:b5:58:2b:0b:
59:73:11:bf:fd:f6:e0:4c:ea:e1:03:c2:eb:bf:69:
f4:af:13:81:3a:ef:1c:1c:ff:6b:32:9c:46:79:86:
65:50:5f:21:af:8f:51:17:3d:73:a1:d8:db:ba:29:
63:49:aa:7c:df:76:f0:84:93:90:83:6d:e0:28:95:
13:74:0a:8c:38:e3:33:0f:49:a6:0f:26:48:8b:24:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.186.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f0:9d:f9:7c:53:57:c9:ca:b4:9b:2d:08:bf:0d:7b:5d:16:
46:89:94:5a:7b:67:1e:e1:e1:c3:5a:02:30:96:cf:d4:09:9c:
ea:34:c4:28:6f:b7:a3:3a:07:d7:8f:cd:9d:8b:90:c2:8b:e1:
9b:40:77:32:0f:fe:3c:d2:71:96:bf:66:87:55:06:a4:16:83:
be:ff:b5:1b:21:d4:c0:99:81:24:ca:bd:ff:28:a8:88:ef:6c:
63:7d:f2:5f:20:cf:34:10:00:5f:f4:4a:e9:8c:f1:41:28:74:
25:bb:42:25:f4:f8:eb:a0:72:3f:8a:03:5d:f6:de:1a:5c:62:
75:1d:20:05:20:80:27:90:59:e4:93:3d:af:92:75:03:bb:bc:
60:b7:ae:ad:d2:4f:47:c4:eb:2e:26:ba:ff:07:70:08:b4:b5:
f6:55:ae:12:22:fd:a1:f9:f6:93:14:b7:f9:02:0c:11:80:da:
be:e3:fb:68:4a:8e:c5:8b:23:8f:69:da:aa:0f:b5:84:38:90:
16:92:67:9c:93:e1:b4:6a:ae:30:fd:b3:37:19:25:81:98:d0:
56:0d:ac:2e:7e:72:c3:b8:91:6a:c0:23:b0:31:d6:2b:89:05:
c2:d8:f5:2b:9b:46:e3:f3:8c:9d:15:42:8b:98:55:d9:5c:15:
db:16:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:57 2025 by rpki-client