Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
File: 80Cbg9EUyAkhERbKLI2zjc4WgPk.cer (raw, json)
Hash identifier: KjCTl7R03O9PaxZdtyVQrcGcZkt2TVZIZX14l/SwEX0=
Subject key identifier: F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5FB3E2EA944D51339163DF4088EAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.110.30.0/23
IP: 195.246.232.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fb:3e:2e:a9:44:d5:13:39:16:3d:f4:08:8e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3409b83d114c809211116ca2c8db38dce1680f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:c6:56:09:d4:7f:37:06:83:81:d0:6c:8c:
66:5e:b4:1e:ac:11:76:91:0c:8d:7c:dc:e4:3c:9d:
16:db:5d:a6:55:0d:64:da:a4:dc:57:a0:4e:d3:8f:
a4:80:9a:4d:ed:6d:1e:e0:ed:85:04:aa:89:cc:f3:
89:4a:2d:7e:fb:39:3e:2c:4f:f4:2b:41:2b:9c:5f:
72:47:d1:8b:0d:50:2b:e8:b7:00:5f:a7:f7:a4:81:
8f:e5:04:c6:ff:f0:7a:5a:0d:2b:b0:8e:81:0c:e3:
28:6b:c7:1c:38:95:52:a2:bb:82:e4:81:76:b4:ed:
43:00:28:04:c8:5f:bb:fc:85:27:bf:12:4d:7f:1f:
26:eb:ba:05:35:07:7b:64:0d:5f:aa:40:19:c0:5a:
ab:24:db:75:82:e7:e5:04:37:a7:2d:8a:25:de:01:
74:44:34:0b:92:cd:89:df:9b:c6:d9:84:61:ba:9d:
ea:95:66:ef:9b:c6:9c:3d:4d:e3:2d:de:a0:00:81:
bb:73:35:e6:fd:be:65:2f:2e:fa:16:ef:23:c9:33:
3b:bf:05:e8:61:3b:e5:b3:a6:de:fe:b2:78:0d:bc:
2c:b7:6b:fc:9a:a2:cb:25:63:5e:e9:21:e6:42:a6:
2d:6b:b1:ae:3d:1d:66:22:79:fd:17:06:f8:be:5d:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.30.0/23
195.246.232.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:d6:ea:93:c8:b8:73:86:0f:04:7c:1d:c5:2c:d5:ba:25:02:
0b:92:85:58:6d:de:72:eb:19:d5:87:a2:9a:d3:38:85:aa:2a:
b2:b0:dd:53:0f:ee:ee:b1:da:81:97:27:89:fa:02:7a:52:58:
5b:6c:0f:9a:0d:c2:63:4b:68:a5:b8:cc:da:55:6e:12:83:c2:
48:c1:de:96:bc:56:14:8c:4a:76:83:3e:a4:66:c0:24:f4:1b:
9a:15:cd:e7:69:2e:5a:93:c2:7d:70:0a:90:ef:9d:87:eb:80:
a7:7f:1e:b4:33:a8:36:cc:37:95:e8:68:09:36:e3:93:92:47:
3e:7e:d3:fd:7d:f6:c9:8e:b7:b6:fb:ba:4b:7c:36:ff:63:08:
23:b4:33:08:bc:c8:ee:c6:3e:ae:62:f7:76:b0:47:97:ad:e9:
1a:d6:49:f0:8f:68:f9:b8:2d:a2:78:2b:13:65:51:1a:51:31:
0e:a2:b4:fc:33:4a:31:55:10:5a:5d:d8:65:9c:94:9d:26:ea:
d3:05:d4:f6:e0:9d:23:dd:7e:f2:c1:13:71:84:5d:10:b5:a4:
4f:99:57:26:0d:13:35:6c:5d:57:8e:36:10:63:f5:b2:c8:6d:
f3:fd:7a:fe:e2:f3:42:f9:7c:ea:18:5c:c1:28:cf:7f:7a:24:
c3:94:8c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:30:55 2025 by rpki-client