Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
File: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer (raw, json)
Hash identifier: tYRplMiRBJ1beNzglHYwlaiTl3j5Zz5ADfCKU5CmjWg=
Subject key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F6BA76566E91D0AB30B3B921A15D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 46.243.254.0/24
IP: 91.216.49.0/24
IP: 91.223.137.0/24
IP: 178.170.217.0/24
IP: 2a03:5a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6b:a7:65:66:e9:1d:0a:b3:0b:3b:92:1a:15:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:6c:70:76:24:a1:ce:13:66:59:ee:75:a5:
b0:6a:3c:d0:48:a4:34:74:6d:93:0f:87:be:9a:46:
93:be:b5:f4:1a:c7:03:be:e3:c4:22:be:3d:e3:24:
4a:98:09:fa:a8:ba:87:3d:1c:b8:1b:58:56:bb:ed:
7b:98:38:9a:b4:6a:ea:f0:f4:b1:a0:31:da:5c:5c:
10:e8:74:b3:7e:ca:9c:ff:a0:52:52:b9:dc:65:f2:
00:29:46:88:f9:7b:f5:c9:67:f6:74:71:d4:07:a5:
ad:25:61:78:38:c9:2f:f7:cf:60:8d:59:88:91:46:
f6:17:fa:7b:50:c5:e6:55:5e:27:8c:83:d9:45:e2:
dc:df:5c:26:49:09:be:d8:00:ab:9f:ac:92:ff:de:
6c:61:17:52:8c:ad:31:b3:57:01:d0:0a:2b:32:e1:
61:b5:f4:6d:1e:d2:df:98:c8:6a:b4:22:0b:88:09:
34:13:d5:8d:bd:c0:51:bf:fc:b7:34:a2:90:73:8d:
23:df:bb:d0:cd:9b:60:25:43:95:05:e8:f5:f1:8f:
7a:06:bd:13:bc:76:b9:19:19:3c:e5:02:29:ae:68:
ad:f7:08:6b:92:7f:d9:8b:5a:aa:39:66:51:dd:b2:
fa:43:75:ad:35:03:da:02:73:5f:1e:4d:7b:56:19:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.254.0/24
91.216.49.0/24
91.223.137.0/24
178.170.217.0/24
IPv6:
2a03:5a00::/29
Signature Algorithm: sha256WithRSAEncryption
82:3f:cd:cd:d6:66:1f:6c:20:14:62:16:92:40:27:1e:42:a7:
7c:55:1a:5b:21:c5:67:17:da:11:bb:2f:f8:33:aa:6d:74:e4:
e9:cd:19:50:44:a4:b4:ef:56:c2:e5:45:03:94:27:27:db:51:
65:28:7b:17:06:86:66:fa:14:d3:19:fc:96:0d:cf:ac:af:64:
90:69:16:2f:52:9f:da:9d:14:01:b6:04:a4:3d:e7:01:8b:79:
13:31:2d:56:44:a1:30:cf:d8:14:db:da:3c:28:c7:45:16:1b:
cf:39:30:64:b7:d1:cb:f6:eb:d9:ab:93:42:9b:fa:e6:3b:58:
a2:4d:f3:d7:9f:7b:20:2c:80:7e:f4:63:a9:93:9d:cc:b7:69:
9c:fd:f0:d5:10:5d:59:95:c0:9b:b2:dd:06:f5:22:5a:32:55:
38:c5:30:9b:39:a2:17:d3:e6:81:24:38:70:99:fb:68:e6:4a:
4f:37:e3:21:f4:b3:14:fb:e6:54:29:af:bd:ec:5b:4d:09:0a:
13:79:60:57:1e:38:27:f0:c6:83:4c:45:3d:16:71:2c:e4:14:
79:18:4a:8f:04:b3:d5:8b:2b:66:dd:53:32:a7:29:3e:ad:c7:
4c:6d:7f:0f:48:cf:f6:b4:32:5f:be:ff:6d:fd:fe:04:49:6b:
a1:2d:b1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:45:03 2025 by rpki-client