Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
File: 1-F0E5sULqQb5rBHC51vz9dEEKmI.cer (raw, json)
Hash identifier: Q4l1pfbNQXwVXdyausyhLkDOKXkcbGd5FyifC4YPqPM=
Subject key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C2BCC1CF2BD6B02E0CB47DBEBBA9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43164
IP: 91.198.0.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2b:cc:1c:f2:bd:6b:02:e0:cb:47:db:eb:ba:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:e3:a4:8b:2f:b1:ed:f6:00:32:12:e0:03:
1c:58:e8:ec:1d:f3:8c:8f:a3:ba:70:32:f0:5e:8f:
db:1c:74:a6:05:cd:90:b1:a6:e2:51:b4:53:43:0d:
8c:2d:83:9a:66:4f:5c:e3:8a:13:bb:0c:02:c9:07:
28:12:52:bb:29:49:f5:2f:ea:ef:1f:b7:98:cf:05:
6a:f9:70:69:49:9d:a1:b6:a3:2c:d5:c0:4b:02:62:
6e:a5:82:61:81:42:02:cf:47:26:f0:ee:77:14:60:
54:8a:4a:4a:ca:60:41:d3:90:2c:7f:53:b3:e2:12:
0b:53:6a:97:68:31:ae:a5:55:5a:9d:6c:42:8f:a8:
0e:6d:7e:8b:85:8f:ce:1a:05:d4:bf:b8:82:c9:4b:
86:de:65:9b:5e:00:ec:3f:55:f6:7a:24:25:6e:1a:
50:e1:0c:36:fb:06:94:5b:9a:62:98:27:64:46:c5:
36:57:9e:25:e7:b7:a9:da:54:e8:d6:49:30:3d:8a:
af:e3:ca:f2:15:e8:0a:34:16:62:03:5e:00:57:31:
c7:0d:90:52:b2:1d:d0:3f:27:ff:1a:12:6a:e3:ef:
f2:9b:d2:27:01:35:97:09:3a:a1:ef:df:3b:b8:1d:
3d:06:4c:cc:67:fe:5e:11:b5:05:ce:1f:e3:9a:0f:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.0.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43164
Signature Algorithm: sha256WithRSAEncryption
0a:66:58:bf:20:fa:18:16:78:91:54:a1:0f:ce:b4:02:f3:f3:
0c:88:e7:dd:e9:72:cb:1c:f4:72:3f:34:c5:62:f9:b4:50:7b:
07:b5:55:5c:9f:0a:35:05:d5:f0:5e:91:21:f1:79:9e:9a:29:
f9:6e:0f:44:fe:d9:ed:79:48:6e:b2:1b:56:9b:ef:7b:93:6b:
18:83:08:33:15:d7:10:02:51:35:aa:48:d5:4d:2f:ca:16:a0:
92:2b:16:0c:76:0e:be:99:e7:eb:57:f4:d6:d7:97:22:5d:89:
3a:eb:c6:09:a3:63:cc:69:64:94:1a:13:36:c4:b6:a0:83:f9:
fe:43:f0:28:4f:86:75:5f:4f:a2:0d:38:f3:4a:e1:69:47:2c:
bd:fe:8b:c4:77:1a:d9:4b:94:77:d2:2a:8c:f8:85:33:1f:69:
d4:6c:dc:b0:c7:8f:72:25:9d:de:d8:46:a2:6c:7f:46:6d:27:
1b:b7:a8:d5:9c:57:e9:77:d0:ec:eb:f6:91:f1:55:ea:a5:29:
05:1e:70:c7:1f:2e:79:ab:62:66:0c:40:92:9f:0b:1a:11:83:
7d:a9:f1:61:b1:da:67:d0:b2:29:80:82:be:b5:c7:b0:1e:1a:
72:58:82:2f:cd:57:23:cd:99:88:49:db:21:9d:9b:24:e7:dd:
9e:6f:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:02:31 2025 by rpki-client