Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer (raw, json)
Hash identifier: amCrwqChNzLhrqwVIfKxSMFYE2/Gkfsm3CnjI+WVMxw=
Subject key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214452086C488699215FEB5D972ECC20
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.30.111.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:52:08:6c:48:86:99:21:5f:eb:5d:97:2e:cc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=699710a1693710ac835f0b6745f90d2d680a1200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:f5:5f:05:8b:b6:be:57:7a:c1:5d:45:6e:
be:45:12:22:ab:eb:30:ab:6a:ab:55:8f:6f:9a:c2:
18:da:ef:d5:5e:a1:37:4c:3f:8f:85:5c:cd:88:b2:
88:79:80:41:b8:a8:7e:cd:52:c7:3d:a5:21:d3:9c:
53:da:a0:45:02:b9:24:21:3e:57:03:15:35:af:48:
5e:33:6a:d1:28:37:47:74:2e:fc:76:a1:3f:47:46:
4b:d0:cb:69:02:68:9a:3d:f3:3c:2b:1c:fe:9d:6c:
29:a6:05:d3:df:1e:16:f5:4e:67:34:44:4f:cb:8d:
0e:58:be:d0:4a:99:83:5f:da:b2:b6:af:81:5e:9a:
6d:c7:41:9b:ce:83:0e:ac:9b:f8:b4:31:05:ee:b2:
d3:76:86:cf:cd:c1:b8:8e:a8:2b:1a:bd:fe:8b:5b:
77:03:80:21:27:c1:4f:6e:4b:16:a1:65:9f:7a:f4:
18:1d:e6:a2:1f:1b:ff:12:27:8f:e7:d4:38:2f:ec:
7d:99:10:ac:c6:16:7d:f5:a3:91:63:1d:df:c3:3c:
4a:d3:15:ea:29:a7:ac:9e:94:38:92:c3:aa:d7:b5:
6a:7d:fa:dd:25:67:d8:07:37:f0:fd:3d:ef:16:46:
65:0e:60:c9:e0:32:28:fc:b9:5f:ac:2a:63:0c:2d:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.111.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a8:40:34:4e:82:38:21:17:b0:ab:44:37:e1:54:e3:30:46:
c1:cb:7c:88:b7:dd:ce:be:85:0e:cf:b7:ce:4d:38:22:3e:87:
09:9b:63:21:f9:e7:1f:dc:69:bc:d8:37:08:73:a9:7e:8f:97:
3b:00:7d:e1:22:64:4b:2d:6e:2c:19:ed:68:97:a2:fe:c8:0e:
9d:a1:cf:29:9b:f0:3e:b0:48:ed:a0:93:65:1a:6e:12:28:8a:
da:bf:2c:8a:00:4f:25:d7:1f:2a:75:5c:bf:01:50:88:7c:ac:
da:04:69:58:54:dd:e3:ae:d4:f1:a7:d2:1e:2f:90:3c:96:57:
24:39:7f:cf:0a:b8:8e:7f:33:07:b5:30:0b:01:73:ca:11:db:
9b:95:9d:ce:1f:f4:80:8e:c3:c2:2a:cd:17:77:85:9f:f5:e0:
3d:4d:d4:3c:96:f6:fc:62:79:03:f1:84:96:7a:0a:56:e1:03:
72:71:3c:97:6b:ab:18:0a:ef:6b:e4:89:7d:6a:45:c6:36:b1:
a2:4b:11:f8:7c:09:43:fc:5a:83:91:01:da:c3:ec:ca:0c:a2:
77:3d:f0:17:8f:f6:06:c3:69:73:d7:bd:49:81:23:b4:d7:36:
a7:49:72:20:ea:72:72:5e:a5:52:1a:cc:49:62:c6:5b:da:a8:
9e:1b:1e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:44:45 2025 by rpki-client