Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
File: 5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer (raw, json)
Hash identifier: i8Jgg4SmJhA82qas+Gre82dUrd8Pqj8Y+LApcMxdxvs=
Subject key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942445970B33758213318139A2BD4A0963
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 31.193.191.0/24
IP: 146.19.92.0/24
IP: 185.218.142.0/24
IP: 2a0e:b040::/29
IP: 2a12:7100::/29
IP: 2a13:c580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:97:0b:33:75:82:13:31:81:39:a2:bd:4a:09:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e618eff923e35bf83792353c4633ca2300f75b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:15:08:d4:d4:c8:f2:27:35:ec:dc:d7:24:58:
09:2f:a6:49:50:70:8b:7d:67:80:fa:e5:6e:94:e3:
8a:69:d8:db:d9:a9:58:7c:54:ff:34:f2:c6:ab:f8:
00:94:01:41:24:f7:33:3a:d6:45:d4:40:74:20:16:
f2:09:63:21:f0:92:9d:6d:7e:3a:f2:7f:d2:3f:45:
70:42:9b:12:ee:37:da:db:ff:04:b2:bd:be:92:ff:
db:3c:c2:27:c6:51:e3:64:7d:b2:60:d4:14:b9:c1:
69:5b:d2:35:fe:99:04:1f:9d:e7:12:dc:8c:0f:9a:
27:30:f2:07:0b:1e:29:c6:e4:58:84:a8:fe:e9:9b:
17:2a:de:08:76:6b:14:30:39:29:d3:42:39:e2:41:
7f:49:b4:9d:59:5a:a8:df:c8:f9:b6:9b:2d:15:11:
b9:93:3b:4a:b6:7b:d4:5c:d9:ae:fc:20:55:4b:75:
ae:dd:c7:03:11:b2:ba:dc:88:06:2a:a9:49:48:f1:
e6:33:34:9b:61:b8:fe:e3:24:9e:90:a0:3a:db:73:
9d:a1:3f:f3:59:c0:8d:1c:40:f5:a0:e4:42:28:33:
0b:7c:66:7f:92:20:51:c4:1f:f8:80:a2:72:b2:71:
82:10:83:60:40:41:2c:84:65:42:f6:6e:4e:9d:04:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.191.0/24
146.19.92.0/24
185.218.142.0/24
IPv6:
2a0e:b040::/29
2a12:7100::/29
2a13:c580::/29
Signature Algorithm: sha256WithRSAEncryption
86:6a:ae:42:46:5c:8a:67:a2:94:90:e6:a6:b3:fa:ac:b6:6b:
38:f6:8a:84:4d:e1:27:b0:a2:7a:cc:98:e8:f2:7c:b5:55:5d:
cd:24:57:c6:53:fe:e0:0e:a8:61:b8:83:70:57:1e:66:e8:89:
c4:b3:64:f2:88:b2:26:ea:f4:52:38:9b:9c:50:89:5f:cc:c9:
13:c1:6e:c0:2f:b6:e8:7d:d5:f6:08:59:68:b2:f5:58:d4:b7:
c1:e6:75:a4:48:80:09:1a:90:b7:92:a9:cf:14:3f:68:f1:5f:
ae:76:12:00:35:96:a0:d3:e1:b1:21:30:19:a2:09:f7:c0:1b:
39:0c:3d:0d:55:d9:2a:e1:67:02:4d:77:c0:c4:a5:92:c5:5e:
65:cf:6d:c1:02:40:dd:c2:ac:16:a5:31:c7:58:52:2e:71:19:
5a:77:bb:db:35:84:b6:71:dc:4f:af:69:56:3c:ae:ac:97:bc:
cb:84:84:5c:e7:38:15:dc:80:3a:c7:b3:c5:5d:de:33:a5:5a:
cf:72:16:98:38:fe:98:2c:14:ef:85:6c:dc:c2:64:95:7a:94:
04:2c:d3:54:29:37:7a:22:fe:01:d2:c9:de:19:c6:db:4d:72:
d1:2a:dc:10:78:3e:08:39:23:41:bb:17:4d:dc:7d:f5:fd:f8:
36:73:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:48:20 2025 by rpki-client