Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
File: 0sHV_U4greXxG2avsQpUyP_ksEA.cer (raw, json)
Hash identifier: l2sW88RVzEHiETOJ2nfoAaLYqxrbNodhpm3X/FG5FNI=
Subject key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195182D420BAA85AC28BD3F285DB433FB1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Feb 2025 08:29:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.118.68.0/22
IP: 192.118.80.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:2d:42:0b:aa:85:ac:28:bd:3f:28:5d:b4:33:fb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 18 08:29:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:cd:47:c2:e5:1a:47:0d:1e:fe:4d:30:82:
02:d6:85:35:93:09:46:69:38:51:36:36:ad:fc:c2:
c5:cf:1b:f0:47:22:79:26:02:0c:89:f5:48:7b:b1:
48:78:0a:52:4d:a9:3b:18:b4:3d:54:70:08:58:eb:
f0:27:df:21:df:29:00:e1:09:34:85:20:6e:72:5a:
02:5e:8a:be:ec:b5:5e:8c:ac:05:e3:e1:04:b3:08:
8b:f1:b6:61:77:a3:28:7b:8f:ac:99:b3:ef:3a:e1:
f5:10:80:58:17:22:d1:df:0c:61:0d:7f:c9:b5:d8:
bf:48:27:5f:af:ac:f0:bc:6a:e9:5f:58:3d:07:61:
df:16:19:c1:9e:a5:63:26:92:2e:ab:81:9d:a0:22:
43:ca:72:ff:97:66:98:72:7c:da:9a:4c:3a:ec:9d:
6e:cf:1f:81:fe:b7:84:cd:c9:bf:0e:1c:b9:f0:50:
98:52:40:5c:c3:a1:4b:9f:86:cc:12:f6:2b:12:66:
70:24:f0:29:16:f4:e6:e9:89:1d:55:64:c1:0f:17:
34:ef:ce:01:ef:d0:92:89:65:72:35:70:1a:86:61:
0b:2b:a0:cc:c0:8c:05:c1:60:eb:7f:08:09:89:ad:
3c:e7:7f:1e:c7:cc:8a:f5:d6:e5:cc:df:77:da:45:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.118.68.0/22
192.118.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:fb:ec:88:c0:d4:c1:7a:b0:49:44:1c:a2:ca:a4:31:b2:7a:
02:c3:95:80:a2:d7:e4:cb:64:73:0e:d5:a7:22:a3:db:0b:33:
13:f8:89:67:17:16:72:fe:7f:83:14:67:ba:a9:93:2f:82:c1:
aa:c6:aa:ec:f6:b0:44:7c:40:f8:6c:8e:79:64:6e:ae:e5:f9:
ad:dd:10:2c:e5:d0:71:44:52:a2:99:e0:9f:50:a5:fc:e2:b9:
17:67:0b:76:8b:fd:48:3c:4e:70:e9:ae:1a:3e:67:0c:1b:d6:
89:58:b0:81:72:5e:73:dd:86:59:e9:2a:60:8e:a4:be:fa:54:
e3:ff:1c:13:05:f7:4f:34:eb:d0:e5:23:6d:4d:8c:db:f4:18:
48:25:56:56:08:a3:4e:83:54:97:2b:eb:1f:0e:ec:26:f6:17:
ac:80:fb:4a:79:fd:2e:58:1e:00:d7:ea:8f:31:1e:1c:41:93:
74:c6:42:90:7f:b4:5b:03:cf:53:01:5e:87:d5:eb:bf:3d:0f:
1f:5d:24:74:52:73:99:2c:5a:59:af:48:f3:51:e6:4b:7d:4d:
72:10:c9:ef:54:07:17:b2:04:9b:1f:c4:61:db:3d:93:d0:95:
de:8a:79:cb:76:10:f4:f4:2a:5b:84:1e:8e:d6:21:06:44:7c:
68:b4:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:48 2025 by rpki-client