Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
File: 48xYm5m6SULK3twXiTiWQpY8SK4.cer (raw, json)
Hash identifier: L4y+86vkqgXQWp/2DuMe99yXmoeUFVXDD++L3HjEcAQ=
Subject key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427485D69762526C8B0A0C383316810CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 178.250.16.0/21
IP: 185.24.240.0/22
IP: 2a00:fc80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5d:69:76:25:26:c8:b0:a0:c3:83:31:68:10:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:63:44:46:9c:fc:86:76:e9:3e:91:72:ca:
35:6e:ed:f8:11:8a:2c:51:d0:11:aa:c9:e2:b5:e7:
11:92:75:63:21:b5:96:e6:77:38:55:33:44:cc:9a:
73:11:9d:cd:a2:0f:53:8e:bb:cf:13:16:a7:90:44:
22:df:c7:d7:f2:3b:e4:87:62:e4:be:97:67:97:15:
b6:f2:39:a6:32:5d:b4:15:23:ff:b4:07:33:b8:d0:
e1:30:2d:b7:05:e5:9d:dd:79:a5:06:81:5e:78:70:
ca:79:11:90:fd:70:8a:15:f9:ca:5b:00:49:c3:83:
cd:a5:4b:58:8c:8a:a1:f9:7e:17:7e:70:25:b9:24:
ed:15:db:1a:a3:e7:e3:6a:42:92:6d:f3:fb:c9:c9:
05:05:3a:32:c4:0d:60:32:1b:7b:27:6d:3d:2a:db:
57:49:e4:50:04:2d:8f:a6:a0:56:72:5b:b4:09:69:
f1:e3:c9:18:81:84:cd:1c:80:8d:f8:97:1f:df:dd:
d8:72:b3:04:e8:ae:73:da:93:53:ef:9e:b8:dd:35:
26:e0:60:ed:c1:21:f2:a7:fa:e6:d9:ac:17:3c:81:
55:93:d0:27:8a:4c:aa:e0:73:cf:84:ff:3e:f7:5d:
b7:2c:53:1f:06:c6:75:d5:ef:64:0e:5e:8f:7e:f1:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.16.0/21
185.24.240.0/22
IPv6:
2a00:fc80::/29
Signature Algorithm: sha256WithRSAEncryption
76:61:ff:49:15:3a:59:53:de:bf:53:fd:ad:6e:45:27:27:7e:
62:26:8b:2c:5d:ed:f3:00:74:e3:de:a2:7e:db:4a:52:53:05:
41:e3:ac:21:c4:96:17:85:5b:e4:b7:94:0f:51:3d:dc:26:57:
e0:58:a9:bb:f4:55:0b:28:3a:2b:1b:68:59:c5:6d:5f:d2:3c:
bc:ad:8f:27:7f:be:2f:cf:a3:f3:39:c8:88:f0:bd:48:a9:78:
9f:5a:f6:5d:38:6e:43:bc:f8:99:cc:d8:dc:a5:70:8b:70:08:
0a:d8:1a:e2:24:88:8d:d5:3d:56:f5:a6:ab:9b:11:c3:36:e0:
85:19:ca:fa:c3:b9:dc:4b:f3:38:ed:d9:02:a9:2b:bd:b1:3f:
12:30:6a:52:90:c1:a2:cb:7b:0f:b3:89:6b:46:89:80:13:4e:
9a:7b:c3:9b:04:06:88:bb:fb:0e:08:f0:ec:3f:ba:ad:21:ce:
47:2d:41:76:f2:89:d2:2f:2b:37:0d:ef:dd:7b:c7:ca:da:6e:
3b:67:03:51:cf:41:68:47:a7:b4:5b:df:33:13:45:64:f8:4b:
59:04:45:32:6b:f8:3e:9f:15:27:d6:51:53:40:68:a8:9c:56:
c2:ec:40:5c:66:4f:3e:e2:d9:78:b5:9f:86:48:af:7e:46:1b:
80:07:1a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:46:58 2025 by rpki-client