Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.cer (raw, json)
Hash identifier: 8GF1aTIYNlKY/0s1pXdvKfaRKLfwQVPMiDtq6u80E+4=
Subject key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F0D0A2D96BD5C7153A78FCFEEDD8E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 134.59.0.0/16
IP: 157.169.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0d:0a:2d:96:bd:5c:71:53:a7:8f:cf:ee:dd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:fd:8e:67:eb:4c:55:0d:81:a5:ae:48:1d:
88:0b:c2:be:ae:e9:ef:c9:43:d1:a8:33:46:99:a4:
0b:69:3b:3c:ba:d3:0a:7e:20:fd:f5:87:0d:76:08:
b9:31:9a:84:55:d1:d1:4d:c6:ec:fa:80:02:e5:c5:
f9:ec:bd:dd:5f:d3:78:f6:96:c0:fc:3f:ec:cc:27:
a1:d8:82:c9:05:bc:e0:7d:16:71:c4:ca:1f:ad:51:
24:61:36:34:46:94:18:39:0f:bf:04:c8:e5:97:b2:
b0:51:d7:99:58:c9:16:88:52:c6:9c:c7:d5:4a:c6:
3d:7c:87:5c:19:5e:6e:a8:47:5c:46:c5:25:ad:08:
df:b9:da:04:91:d4:55:3b:36:72:b0:9d:43:10:8d:
64:2d:4e:ff:20:86:fe:d3:a0:59:63:70:a0:a3:d6:
fa:79:a6:8a:28:74:a7:ce:c2:9e:4e:be:0f:3f:5d:
7d:11:27:ad:3a:95:c0:e4:7c:30:70:a8:4c:7f:c8:
f1:a3:c4:9a:fa:f3:5a:2a:d1:ee:dd:5a:e2:1a:ab:
f9:1b:0d:78:30:6d:61:cd:75:72:42:26:73:28:63:
47:40:74:c7:2c:f0:02:a8:b7:0f:85:cf:9d:2e:b1:
c7:be:61:81:39:db:72:2c:bc:e8:1e:a8:ed:37:0f:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.59.0.0/16
157.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:83:13:7f:66:ec:b3:7a:1b:27:44:c4:87:91:8a:cc:33:c3:
c2:29:f1:ff:3e:84:90:35:27:35:b6:61:f4:a6:37:89:4b:6a:
f2:13:db:e8:68:9e:b6:f8:95:09:01:54:3d:b9:47:6c:ff:08:
a0:61:76:f0:4a:70:92:31:c2:24:53:d1:82:da:5b:c1:6c:be:
dd:1b:d6:2d:f4:ef:05:7a:7c:6d:7a:28:e6:89:7a:a8:ef:ce:
41:51:b4:a7:01:f5:9c:8d:d6:03:40:d4:5d:d6:65:c9:2e:bd:
14:c9:b1:c0:01:37:eb:00:c2:23:07:75:61:fa:aa:8c:bc:cf:
76:94:9c:83:7d:91:b2:96:a6:6b:2e:86:5d:59:54:17:54:bb:
9f:ce:f0:0b:77:af:b7:e7:93:44:3f:2e:e0:a6:d0:f5:48:6a:
ec:62:4b:9d:98:9c:8e:a4:da:4a:36:39:10:9a:72:1a:60:12:
77:ec:44:02:4c:15:b5:67:3a:d4:a7:6f:5b:52:e9:13:0e:ca:
13:6f:f7:00:f3:2b:96:f5:8f:a2:08:5c:79:76:16:8c:74:85:
91:ff:29:5b:44:35:fe:02:65:4a:a3:5b:7a:31:df:ae:d8:1d:
dc:c4:9e:26:7c:f7:94:56:1b:ae:9f:a7:4e:b8:e8:50:2f:f4:
5c:bb:ee:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:10:58 2025 by rpki-client