Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
File: 76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer (raw, json)
Hash identifier: K3USxj3VN2/SS4ptYuaOg4jWXjlzAOiaQwxrpYPBhzg=
Subject key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425220D605DAC0AC45A9DD8E460DD44A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.30.233.0 -- 185.30.235.255
IP: 185.142.236.0/22
IP: 185.165.188.0/22
IP: 195.144.21.0/24
IP: 2a07:85c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0d:60:5d:ac:0a:c4:5a:9d:d8:e4:60:dd:44:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efa842e67147252505f41551f0f735b7f72e3e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:da:c2:0f:86:d0:41:10:92:d9:7b:8a:34:
a6:ea:44:6b:ae:98:ef:c7:1e:4a:80:15:b6:2e:49:
8c:17:17:14:1c:9c:1a:26:10:9c:6e:64:27:05:70:
87:18:b9:ae:92:e3:2d:29:49:ff:a9:41:e9:dd:29:
f6:6d:1c:7a:93:d3:6c:1c:2c:5c:f0:d6:56:5a:b7:
e6:ec:51:f5:2e:f6:f6:fe:2f:0a:55:c3:91:7b:29:
8d:12:d2:71:8e:de:0d:ff:92:f4:e4:de:6b:8d:56:
e2:23:a2:6c:aa:65:2b:67:55:d1:79:9f:c2:60:7b:
01:d9:be:0e:17:06:aa:58:c7:9a:3f:64:f6:0b:09:
da:83:12:69:07:7c:41:65:e5:f4:4c:02:bd:f3:02:
54:e9:eb:2c:d8:2f:a1:a9:b5:77:71:b5:3f:c5:aa:
0d:f5:8d:22:8d:b7:10:dc:91:ac:cf:4f:4f:e1:30:
20:2a:04:a2:01:a5:a8:68:fc:76:62:2b:3a:f6:d1:
02:42:a1:0b:54:0a:05:b2:4e:64:51:de:57:c4:5e:
f6:f9:dc:48:01:0a:2b:d8:e5:e8:ad:18:fd:c2:54:
d9:a1:47:00:e1:d7:32:d8:25:3a:e7:06:50:eb:5f:
47:4c:f7:aa:7d:a4:10:12:b1:a1:a9:86:46:bb:54:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.233.0-185.30.235.255
185.142.236.0/22
185.165.188.0/22
195.144.21.0/24
IPv6:
2a07:85c0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:9e:fb:8d:77:a2:88:bb:c7:d2:bf:e5:4f:e8:b5:03:48:c6:
c3:bf:06:6b:25:89:ab:27:7e:f2:73:32:ca:a1:36:5b:a8:2a:
4e:30:6b:61:ea:f2:4a:f7:ab:dc:9d:7f:6d:7e:4e:bb:99:92:
0c:d5:4d:3e:8e:4e:60:5d:41:ac:a6:1a:5d:5d:a7:53:07:9b:
c9:07:2e:cd:7a:8d:71:3b:f8:14:32:d9:a1:eb:5e:d3:34:30:
48:15:3b:26:ec:36:1e:ac:da:38:a1:02:82:f5:0c:3b:14:65:
bd:02:fd:f7:ca:10:b0:1e:3b:fb:c1:33:f8:2d:c1:cd:f3:89:
e8:c2:04:16:b1:86:15:eb:0c:d3:16:2b:22:d1:73:fa:32:fb:
3e:58:d5:2c:49:cd:42:e5:56:d3:2b:88:48:2d:ed:5c:43:1a:
b2:2a:0a:ca:ad:37:f8:e2:4e:12:dc:49:5b:17:55:57:25:71:
76:3c:f6:02:c6:4a:f0:97:af:b5:fd:8b:70:18:a6:55:ed:93:
17:a0:4c:ec:08:6e:6e:83:75:f5:47:af:10:53:fd:d6:16:b8:
ed:51:0e:46:66:4e:b9:87:ac:85:c1:89:a4:bf:73:20:67:36:
21:7a:22:37:20:0b:1e:e9:f7:3a:cc:b7:95:12:42:0d:4a:d4:
97:bd:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:37:55 2025 by rpki-client