Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.cer (raw, json)
Hash identifier: F2PKIk51bzJJD179PAjdSpzYegkuJvRB2gjIG0tp9/A=
Subject key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C37120222ACDF2B00AC976ED79B71
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.246.109.0/24
IP: 2001:67c:760::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:37:12:02:22:ac:df:2b:00:ac:97:6e:d7:9b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:be:0c:41:ce:90:b1:00:0a:e1:51:d9:d5:
b3:6e:bf:68:68:45:0f:48:8d:b3:9d:98:c6:c9:45:
ef:9b:a7:c6:e2:41:42:8e:bd:93:78:df:ae:e9:a0:
50:0d:38:0d:3a:d1:c6:3a:16:2e:ea:9c:6a:2f:78:
9f:b7:2e:eb:34:9c:46:90:4d:17:1f:de:87:a9:37:
fe:92:02:a3:0b:39:7d:24:44:80:f3:87:f4:1e:93:
74:5c:50:4c:94:09:1e:28:7e:d7:9c:02:6a:ca:75:
a7:a3:88:96:37:96:65:5b:35:79:ed:6a:f7:93:ad:
fe:ff:b0:50:0a:09:d5:0e:ce:13:14:a0:92:89:33:
10:9e:48:82:3f:c2:07:b3:85:2f:f2:16:29:f7:0a:
d9:9d:09:c5:96:06:9a:e6:56:08:f1:30:3a:69:d0:
14:fb:a1:78:85:3b:bb:d3:8d:ce:c7:eb:16:34:1c:
fd:27:14:6c:58:25:46:c0:29:e4:a8:bc:61:30:7b:
12:5d:9e:2a:cb:fd:36:a9:fd:90:f3:40:38:64:19:
8a:9e:58:c4:29:7c:b6:d2:16:7d:c0:81:42:ba:89:
10:6b:b2:0d:73:d7:9f:f9:51:c0:d8:ab:29:d5:ca:
d1:a6:eb:be:bf:32:b3:c8:14:c2:98:25:31:0d:84:
1c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.109.0/24
IPv6:
2001:67c:760::/48
Signature Algorithm: sha256WithRSAEncryption
7b:be:6a:ea:05:27:55:bd:af:40:49:c6:d9:20:2d:45:b1:2a:
02:b3:41:aa:55:b9:f0:41:d6:f2:ef:1c:af:9d:51:c1:4d:6f:
91:63:e8:df:39:0d:63:0a:f5:d4:ef:31:fc:f0:9e:dc:69:83:
6a:8e:48:30:53:13:78:c9:d8:ac:b9:23:79:ad:53:ac:50:bc:
76:c3:39:81:3e:1a:38:15:b8:24:bb:4e:c5:32:d0:ad:25:c6:
c8:c5:cd:9a:83:7f:03:57:41:cc:74:ab:60:07:39:5a:3c:fe:
da:25:dc:50:f8:87:e5:25:6f:d3:89:a4:d2:97:7e:a8:01:a6:
7d:b0:a7:94:11:c2:d9:97:f4:23:54:08:ec:f6:89:e5:79:82:
75:c2:78:d7:d3:06:d4:3f:47:d4:09:cf:31:ee:b4:be:be:3c:
e8:c0:01:3d:cf:63:3a:52:04:b5:bd:69:78:61:c0:ac:b3:3c:
80:0e:31:03:2a:3a:81:e7:22:69:bd:ce:73:86:7b:b5:29:0e:
5d:e1:1c:ed:0f:38:9f:5e:7f:e2:80:f2:0a:21:a5:95:16:25:
c0:15:45:91:fa:aa:78:b5:f5:2b:12:08:48:9f:c5:de:f5:92:
7f:0d:e4:26:25:89:1f:21:55:94:71:f6:f5:03:a9:1d:c8:76:
cc:a6:ec:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:41:13 2025 by rpki-client