Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer (raw, json)
Hash identifier: G3fTihEtYeUWyW0aCgCrvLfm4LnXYYLiMyEuSVMgFkk=
Subject key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019653079248A2ED0FAE26EF67586B0EA73B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 20 Apr 2025 11:48:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 217.18.94.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:07:92:48:a2:ed:0f:ae:26:ef:67:58:6b:0e:a7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 20 11:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc157d396ed992843daeef7b9cca73b043966c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:f3:d1:e5:ef:8c:b1:fd:7e:10:d2:36:c6:
04:0b:10:b3:6c:57:dc:98:8c:45:1a:23:05:28:fe:
4d:2d:50:28:ba:79:9c:01:1b:ab:08:55:c3:49:f2:
3e:2d:d0:24:d8:52:0c:60:4f:9f:b3:98:21:43:e3:
ff:92:8e:40:41:dd:2b:4e:86:b3:a0:78:01:eb:bc:
ab:79:9f:8e:3a:45:c6:53:de:a2:3e:1e:14:a5:12:
02:66:51:05:d8:cb:95:a5:76:14:d5:9e:0e:30:26:
92:4d:59:20:6d:6c:98:63:0b:16:8e:49:d1:bb:b7:
56:6b:cf:02:f7:6f:7b:3e:45:33:46:70:06:18:f0:
94:21:77:a2:1b:a9:34:f1:df:23:f7:24:bf:e6:e5:
ca:51:d3:2a:ba:11:ea:bd:8f:ea:c1:84:5c:63:7e:
01:3f:41:cb:5b:fb:75:fd:8a:29:2b:8d:c7:dc:80:
9b:7b:37:76:86:4c:98:b7:fb:51:7e:04:d0:ff:4a:
6f:e8:2e:76:83:68:00:39:64:08:cd:00:a2:2a:cb:
c6:46:dd:8c:63:70:8c:a1:46:a2:a2:f0:0f:cd:4a:
c2:4f:4f:ba:55:5a:4e:65:7f:27:62:96:f4:20:9b:
90:c5:0d:6f:92:0e:c0:fe:6a:db:0c:ab:5b:3a:cb:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.94.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3b:1c:93:cb:b8:a3:84:fb:7e:38:a0:ec:c6:fa:53:66:1a:
03:87:7c:84:a4:68:9c:6f:dc:52:13:3d:d9:ec:5c:08:da:db:
fc:a1:ac:0e:30:f0:e7:6e:95:5d:85:d7:6f:10:12:cb:6d:f6:
5d:85:d3:69:f3:01:bc:39:a9:e8:b3:43:0e:b9:51:28:73:75:
19:9e:c7:e4:17:d5:d3:0b:5d:45:0e:5c:22:1e:ab:0b:2e:73:
aa:38:b1:c4:08:0d:6e:68:16:5b:f8:3d:39:86:f9:5e:21:31:
24:5e:d9:7d:bd:bc:c3:e5:9f:f2:b2:b9:b9:bc:33:09:36:7e:
1e:99:49:51:5c:79:fa:a2:02:9f:e4:89:c3:3c:1e:4e:4a:67:
4f:37:cd:45:bd:6d:f3:02:c0:17:e7:38:5d:74:cb:ca:8a:dc:
6d:4e:2e:99:20:3f:04:c1:2c:ab:ab:50:79:af:53:a7:9e:8b:
27:18:a0:bf:59:ec:f7:8d:1e:78:a3:70:63:86:10:05:7c:01:
5d:5c:60:8b:f6:95:5a:0a:b8:7a:ef:d8:b9:3e:61:e0:27:13:
d0:bb:b6:8c:65:2c:63:1f:b7:b9:a6:4f:50:e4:27:66:15:d5:
d5:66:b9:f8:11:29:93:b2:2b:13:6e:71:af:4c:dd:04:d0:b7:
d4:9b:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:57:45 2025 by rpki-client