Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
File: qT4365yxmDJdZWZzKJJY0o6587g.cer (raw, json)
Hash identifier: VngHU7YurpG5ExUhNiSCfQX7DipAypFvq4xGfVFckHs=
Subject key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067F5203951E711A44B97E03EC9D5E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.247.66.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f5:20:39:51:e7:11:a4:4b:97:e0:3e:c9:d5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:40:26:77:53:e6:89:8c:97:6e:ef:d5:e9:
7a:b2:70:7a:b4:72:22:92:0b:da:4e:65:8f:e5:4a:
68:9d:d6:bc:94:52:37:49:51:5f:eb:3d:3e:50:df:
a3:6b:68:2c:89:e0:5d:c2:3b:b3:96:10:45:67:5d:
4b:a9:e4:61:08:cd:c3:0a:42:b6:b7:fc:17:f1:c2:
4c:f9:dc:94:02:0b:80:19:a9:4b:e5:47:d7:6d:fc:
9b:4c:58:aa:af:d2:82:b7:54:3b:99:ca:00:19:82:
2f:5e:b9:95:98:b1:fa:97:54:c8:a4:04:85:d8:ee:
99:33:d8:c2:83:99:87:65:8c:ab:fe:a2:0e:14:e4:
c5:17:c7:85:ac:c6:25:97:bc:00:17:7d:f7:0d:b0:
7e:60:e9:bb:49:bc:5b:ee:fa:d5:f1:0b:33:7f:c6:
be:6d:24:da:d4:0d:74:2c:68:0d:fd:57:2c:8c:37:
32:cb:c0:fa:6a:5e:bc:1e:a7:24:5d:f7:e3:23:ff:
77:35:2e:c0:e6:42:a7:a6:41:01:82:6f:aa:3a:76:
c1:7d:69:4a:94:b9:c9:3d:31:57:23:8c:8e:1d:bc:
37:a6:15:65:26:58:1a:3a:9a:1b:c0:fe:fd:28:46:
83:12:ab:94:be:89:f4:ad:b6:f8:6f:90:2b:ba:19:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.66.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:87:dd:cb:58:a3:0c:47:ec:8b:b2:0e:08:f7:a4:67:1a:22:
7f:40:a8:43:09:39:d9:83:fe:81:44:8b:46:d6:2c:e0:95:98:
24:2a:e0:ed:72:2c:a8:4b:b2:60:08:fa:00:bc:e1:b7:25:7f:
28:46:1d:64:d1:1b:44:e0:75:2f:65:fd:cb:e3:78:e8:02:3e:
98:74:80:aa:f1:89:c1:d8:ba:a3:cf:63:a5:4e:b9:9a:e1:00:
1a:d8:74:1b:fe:8b:08:9f:a4:07:9e:b9:79:08:49:66:9a:b4:
61:58:e5:a7:4f:1d:33:aa:49:f5:40:b0:89:f2:dd:54:ee:91:
9a:0b:71:20:0e:e0:0a:20:3c:ed:52:b0:4e:f9:cb:34:e7:cb:
7b:d2:20:d0:93:32:07:09:b2:43:2a:70:0c:39:de:9d:b9:55:
d6:92:3f:fd:ca:e4:0a:c7:81:e4:64:6c:ac:6d:ee:dc:21:0c:
96:10:ef:19:ca:9a:f9:f5:ca:81:e0:b7:a1:01:a4:3a:08:27:
3b:0b:d9:32:49:5c:75:5b:53:9a:24:b9:b1:46:7a:0f:0a:ad:
e8:e7:5c:e4:a0:f5:29:88:56:2a:11:35:0a:f5:e2:b1:99:34:
e2:0a:0b:b5:20:41:e2:ad:26:28:55:20:21:10:b9:41:20:74:
24:0e:04:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:00:21 2025 by rpki-client