Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer (raw, json)
Hash identifier: 3o+a3CA8Cc7g/k6bUeSbDmxTHbKnSp4Zz4j+qU4d6uU=
Subject key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144269A6A14822067E8DF292FEF4560
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.66.107.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:26:9a:6a:14:82:20:67:e8:df:29:2f:ef:45:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:4f:05:53:89:5b:f9:1d:5b:cf:0d:33:0a:
c6:db:0c:17:b2:2d:93:88:f7:b4:7a:22:42:6e:b8:
7c:04:55:67:eb:71:65:75:55:95:b5:88:de:bf:45:
58:0e:1a:47:e2:30:67:99:e4:de:b0:61:a5:2d:f5:
03:98:cc:84:1c:6e:73:4c:8c:38:d4:21:3b:89:95:
aa:9b:60:aa:d4:f8:63:86:19:e6:4c:1c:14:e5:99:
0f:78:a6:40:27:5d:52:cd:94:c1:59:53:17:c7:84:
2c:79:a3:ea:3b:37:71:23:eb:8c:36:59:d1:21:e9:
87:99:26:23:72:9f:56:ec:2e:e6:4b:fd:b3:73:6a:
0e:6a:31:05:2f:f0:40:0f:83:59:d9:d8:e1:84:80:
aa:2d:7f:78:13:f5:61:df:67:b9:96:12:40:14:ad:
f0:9f:5b:18:74:30:8c:8e:d5:00:03:2b:0d:00:d9:
bf:44:89:a8:b0:e0:82:10:43:0c:fa:69:d5:38:6f:
57:c3:64:56:de:32:f0:c7:6a:a1:63:bd:e1:b6:47:
66:36:4e:59:df:10:a1:63:db:fb:46:99:a3:27:41:
9f:18:d2:ea:bc:12:4a:e1:75:a1:73:0d:f6:f8:a4:
d7:bc:e1:cd:83:3c:4a:32:48:c3:58:ae:e2:73:75:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.107.0/24
Signature Algorithm: sha256WithRSAEncryption
91:b4:ec:28:1a:b4:63:3e:7b:87:38:66:0e:34:4b:49:27:5e:
b5:57:27:01:51:d7:4b:e6:53:f2:1e:f0:03:89:43:dd:4c:af:
07:19:74:5a:ef:9a:fc:89:be:e9:8d:a7:e5:53:ec:6c:67:87:
d6:fe:cb:7e:52:25:c3:68:c9:9f:91:c6:fc:34:c9:72:98:0e:
53:65:aa:71:26:d0:71:be:81:5f:ec:ab:77:33:93:38:c3:66:
fc:5b:60:29:4b:52:db:d4:69:12:12:86:d3:a2:09:d1:56:b9:
2b:49:a4:0a:0b:6d:82:4d:4e:a2:a2:3f:98:53:17:52:1e:4f:
c9:95:85:5a:04:54:66:61:e4:d3:72:d8:b2:ea:fc:6b:3c:6f:
1d:0b:38:71:b9:b7:de:51:b1:bb:56:f0:0b:9e:c4:69:99:1f:
53:ef:0b:25:99:d3:b3:fe:3d:75:b1:94:1b:aa:41:eb:c2:b6:
37:0b:75:99:8a:6f:a9:c8:01:9a:ea:e2:b5:f3:44:81:c6:e4:
17:ce:fc:6c:a7:e9:36:78:24:d8:14:cc:84:64:e7:b5:02:86:
77:d4:23:5e:a0:96:45:35:d0:d2:1e:73:f7:3c:f0:3c:9a:53:
fa:bb:3e:62:9d:6b:bf:00:61:8e:58:6c:9e:ef:7d:c3:8f:64:
64:e0:62:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:57 2025 by rpki-client