Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer (raw, json)
Hash identifier: ctP6S5nC7p/45ZTl685lFE7Du/ItxMVU8obcOYgArp4=
Subject key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196EDA30044DDA2CF5B7FC1D6207A4400CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:20:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.206.114.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:a3:00:44:dd:a2:cf:5b:7f:c1:d6:20:7a:44:00:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:20:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:00:90:3f:cb:c0:16:e0:1b:62:ed:50:e0:
4e:1b:34:2d:6a:5b:ab:f1:ee:5a:d0:e2:ca:63:66:
91:b6:ea:70:44:50:63:69:2a:4f:b6:ca:62:4b:49:
1c:4d:96:69:29:b2:15:d9:b7:04:34:29:95:c7:6a:
fa:dc:be:8b:92:46:27:f3:b5:0b:6d:14:08:36:ea:
c3:b7:6a:86:7d:35:4b:90:09:8f:70:20:d5:cf:8f:
31:86:71:c9:1f:9e:5d:dd:28:73:a7:44:ae:89:18:
bb:62:3c:3d:9f:d6:94:e7:54:9f:17:05:bb:af:f5:
ac:be:c3:a7:d9:46:39:d3:47:7a:38:ae:75:79:71:
b7:60:51:71:2e:21:e9:ad:74:8b:ce:28:65:a2:6d:
c9:e3:98:8e:f6:88:0f:57:60:c9:3a:34:24:40:06:
7d:da:00:c2:e2:10:23:87:00:1c:f4:01:67:c3:12:
f0:61:0d:18:3e:82:0c:28:72:3c:0f:ff:f3:6e:1c:
35:48:94:fe:1c:e9:83:c2:81:f5:cc:bb:60:7e:d1:
81:c9:f5:07:8f:3a:a2:82:e0:ad:b5:10:41:95:b0:
9f:88:47:58:10:4a:1b:49:99:56:5d:e1:df:1f:b2:
fa:4d:9a:6d:73:2b:60:3b:37:be:35:3d:a0:08:11:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.114.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:c6:25:46:d2:77:08:90:82:31:00:14:34:db:74:dd:03:c5:
0d:48:f2:ac:d5:26:19:13:32:d2:fd:5d:e6:b2:f4:fb:de:c4:
17:17:fb:34:90:7d:52:df:ba:16:1e:14:09:83:37:19:c7:c1:
3d:31:15:b6:51:75:22:41:7b:13:0c:5a:96:bd:60:b3:2a:9f:
61:03:5d:29:28:70:d3:03:38:b0:d5:eb:aa:f7:e0:93:c2:49:
2b:84:27:d2:6c:9a:cc:83:dd:3e:ef:85:5e:59:cd:87:a2:10:
bd:be:d5:b9:4e:08:e9:bb:00:cc:27:ab:05:ae:2a:99:8e:89:
44:00:b8:b8:b6:ac:da:7d:4f:74:76:cc:35:02:c3:87:06:b4:
bf:c5:3f:fd:19:75:75:4f:46:78:03:72:14:69:af:76:b6:68:
92:98:46:4e:c2:ce:a3:77:71:c3:49:fa:99:07:c2:25:20:18:
45:f3:2a:4f:de:f7:eb:59:90:66:ee:ef:46:9e:7c:4b:84:18:
5e:4b:72:46:a5:4a:43:e9:19:0e:5b:d0:7c:65:6c:bc:ae:b1:
34:e9:37:9f:d1:0f:b1:50:f3:ad:e7:f2:34:14:15:2b:c6:7e:
a5:ba:b8:46:41:b5:f4:21:ec:27:73:22:b2:06:f5:64:af:c8:
be:df:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:50:49 2025 by rpki-client