Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
File: 1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer (raw, json)
Hash identifier: dwj3gbYMy1u8Nzt0QZaaOq81NZWKQ/KzsdS8Cz8Byyw=
Subject key identifier: F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC3170199C85C6CB72C37950022CB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.113.20.0/23
IP: 2001:678:b38::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:31:70:19:9c:85:c6:cb:72:c3:79:50:02:2c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:ed:93:fb:fa:ad:82:e4:61:45:24:c0:f0:
6a:d4:a6:0c:69:19:52:4b:f3:33:d1:8b:80:cb:61:
d2:bf:a8:e0:30:ae:4a:5b:d5:80:3a:1b:7e:be:f5:
46:bc:90:24:3c:d5:81:16:57:c2:1b:c7:ad:9b:35:
04:df:2c:c4:19:96:6c:2f:84:59:bc:c7:e8:3c:7f:
76:0f:3d:3e:47:14:62:73:c6:0c:9e:12:00:55:5b:
a7:33:f2:9f:98:2b:f6:02:26:36:c6:74:51:64:db:
ee:58:5e:c4:68:fd:1c:ac:0d:97:5e:90:2e:58:92:
7f:21:13:88:23:48:94:a2:9f:ff:b4:f7:10:d3:f3:
05:f6:69:7b:39:55:7e:dd:0c:6d:e3:25:3d:86:89:
0d:b1:d5:80:8d:5d:95:6d:28:d6:ab:ff:1c:7d:b5:
70:90:d3:c8:99:9a:ae:04:b8:22:3c:8a:b8:dd:35:
4a:95:38:96:73:b8:92:7f:a6:83:89:73:a5:33:17:
f9:bc:b9:5b:a4:89:6f:61:8b:31:42:cd:66:9b:17:
12:25:c6:53:06:f0:4f:b8:e3:19:b0:98:cb:38:ab:
40:e7:8e:63:31:7a:59:1b:3a:45:56:a7:99:3d:90:
09:78:70:58:7a:ce:7f:64:af:5d:04:dc:3e:1f:1a:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.20.0/23
IPv6:
2001:678:b38::/48
Signature Algorithm: sha256WithRSAEncryption
60:4f:73:52:47:cd:af:55:2e:d5:86:cd:48:d0:f7:bf:79:e6:
40:7c:12:c9:9e:eb:0a:f8:d1:1e:36:23:12:10:e2:9e:e2:5f:
45:08:fd:08:08:1f:b0:db:6f:6f:60:6c:7b:e0:52:e9:77:a6:
49:95:4c:7e:2f:cf:d2:a6:f0:bc:0b:a2:e5:28:ee:4e:d4:f6:
96:5f:d3:4a:d9:ab:d1:a4:ef:d1:66:f3:a8:28:1a:03:7b:12:
29:6f:04:29:03:ea:d0:c7:6b:24:56:02:11:0f:fc:b7:02:98:
11:a9:99:2a:22:38:7a:61:01:ca:1c:9f:69:62:be:f1:af:aa:
7d:85:24:63:8a:fe:49:02:fe:3f:92:cb:2f:ef:2c:28:7e:13:
d7:86:b4:c9:c8:88:d7:66:13:88:eb:87:21:58:3a:21:da:3b:
c2:b2:df:aa:cd:5c:20:e0:46:a8:9b:09:79:22:61:bd:99:06:
f9:9f:44:8f:22:be:4c:34:71:db:bb:d0:1d:ac:c2:0a:2a:06:
13:14:ca:77:ab:db:86:d8:cf:5e:55:64:8d:70:0b:c5:aa:1c:
22:14:2d:bc:54:c9:e4:d8:dd:fe:8d:2d:d6:9b:a1:bf:eb:ee:
d9:33:c8:bb:3b:26:31:8b:18:a5:0a:45:c0:54:66:6a:1b:e0:
be:3e:93:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:28 2025 by rpki-client