Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
File: xn6d6Ogmze4OZfYiWDQ0uBzze60.cer (raw, json)
Hash identifier: nYeZFhn3vGTCQOUfGB25/JHNLwIYr0u0fCgfTaG66iM=
Subject key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BC7B0943C7A5D9B8CFFC0EA74764F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.177.140.0 -- 193.177.147.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c7:b0:94:3c:7a:5d:9b:8c:ff:c0:ea:74:76:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:3e:80:a7:f1:ef:c6:1f:d5:b5:10:91:bf:
95:51:55:7a:ce:c5:d5:b7:9f:aa:e8:b2:56:c2:d0:
12:b2:c9:70:fa:6c:06:38:d9:60:19:17:27:05:ba:
69:23:43:5b:50:81:4e:c1:e3:86:7c:bb:9b:bd:e1:
0e:55:14:d8:01:02:d9:a2:35:43:7b:4c:3a:29:1c:
8c:bb:ab:58:77:3c:9a:f4:9f:9e:6a:b2:f7:99:d3:
1e:8e:49:2e:9b:6f:4d:18:7b:50:1e:02:5d:6e:c3:
7e:3a:15:6a:b5:d9:dd:40:45:de:85:a8:fb:02:05:
b1:b4:a9:5f:a5:23:9b:f3:d0:be:a9:e9:a4:e7:68:
ed:55:9e:f1:c7:f1:7b:bb:9a:17:77:50:43:9b:27:
2e:b0:b1:d5:30:50:21:2b:fb:c5:62:24:86:2b:8a:
0d:1e:d2:88:be:26:50:6f:5a:30:ad:26:c0:e3:ca:
96:34:82:3a:08:3e:f0:e1:a0:f2:8d:29:c8:e1:41:
f4:6e:7f:a4:8c:26:81:28:7e:bb:5d:ba:bf:41:31:
47:e3:33:3f:3c:34:36:e5:1d:f7:55:e5:5a:60:d2:
cd:85:fc:2e:01:d6:b1:a2:77:60:ba:26:6c:df:95:
28:16:13:53:8f:02:ec:d1:54:5c:60:c5:79:59:cc:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.140.0-193.177.147.255
Signature Algorithm: sha256WithRSAEncryption
75:8b:07:5c:5d:f8:9d:cf:f7:84:71:ca:0b:92:56:ce:4f:c9:
be:97:ac:8a:03:b9:1e:9d:34:df:5d:ca:f4:9c:26:13:f8:3b:
02:e7:47:ee:70:d7:55:3c:f0:fd:aa:b3:ee:19:6d:42:fd:36:
35:61:38:f8:ad:e4:c5:51:8d:e5:11:13:c5:c5:cb:4b:4b:22:
67:6c:cb:24:81:c0:10:05:9f:8c:33:f5:55:b7:7b:0e:40:ed:
5e:b3:d4:66:3c:0c:3d:92:77:71:cc:ad:99:e2:f4:81:00:0c:
ce:b2:a6:ca:1b:1d:de:95:57:31:00:39:e6:92:6c:f3:8e:47:
91:db:8c:86:98:3f:e2:bf:a6:30:7f:38:a9:6c:4f:0d:e8:06:
f1:72:95:e4:7c:0d:57:38:2f:0e:30:1f:77:b6:4b:51:37:e3:
70:0c:c7:67:be:6d:cf:2b:c6:e8:41:d3:15:9b:ce:d1:62:08:
8c:86:b2:bf:52:b0:5a:7b:02:f3:00:8a:b0:75:f9:bc:ea:40:
b8:84:4d:23:50:e8:f2:f7:a7:c6:80:52:25:e7:78:5c:b8:61:
b1:14:96:f2:74:51:11:94:b3:59:59:96:80:5f:4b:25:c0:af:
56:82:e5:74:63:4c:3c:6a:75:2f:3a:9d:da:a4:51:60:71:30:
a9:54:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:59:59 2025 by rpki-client