Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
File: 9jiUfduJL186SKaa-XqPtSEDoNY.cer (raw, json)
Hash identifier: 441p7Y4vrf5/jcFNReLtFF6zHZEwLDupD375e/DYrtg=
Subject key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D77E238FBF377BA367DBF9A21940DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.35.157.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7e:23:8f:bf:37:7b:a3:67:db:f9:a2:19:40:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:d3:c6:6b:32:63:13:a9:ff:40:9c:60:88:
4f:72:6d:32:55:ab:b9:65:b9:13:0a:11:05:75:db:
7c:97:c6:84:74:f3:7b:1f:56:e9:83:31:04:cf:cf:
2f:8f:68:47:0d:2e:17:2d:c4:83:9a:f7:85:92:71:
1f:9b:1f:d9:26:9b:5a:4b:5b:92:f6:a2:4c:2f:7a:
96:b9:92:6b:ac:e2:f6:e6:b9:14:94:a1:c7:6f:f1:
a2:68:d1:4a:dc:de:d9:3b:95:45:fb:fd:b9:d0:e9:
e1:af:bb:80:82:0e:4b:b9:ec:c0:50:7d:83:ba:19:
0b:46:4b:6a:85:8b:70:d8:22:b9:52:d3:b9:0b:73:
86:9d:30:67:0b:f3:22:a8:9f:df:18:22:f3:e1:e8:
04:f4:3f:56:eb:48:de:5f:d7:f4:03:e9:a3:4f:a6:
19:90:a2:76:9d:64:ba:46:27:6f:ad:59:1e:d9:0b:
1b:e5:da:ce:48:5f:71:e7:56:44:b2:1c:f1:28:ac:
a1:ab:87:a2:52:2c:07:cf:28:23:0b:29:9d:dd:5a:
39:60:5c:c2:f7:b1:44:ef:77:bf:22:83:43:1f:0c:
00:97:fb:2d:db:40:7c:21:4c:af:74:e0:8c:47:a0:
3f:01:f7:8d:97:4b:11:d0:dd:8d:73:b7:89:32:37:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.157.0/24
Signature Algorithm: sha256WithRSAEncryption
56:23:3c:47:f9:32:06:2f:37:bf:06:a3:14:70:6a:e6:d8:6f:
cb:2f:1d:e3:2d:49:39:36:21:1e:d8:43:2e:3a:57:aa:2a:a7:
d0:19:39:14:61:a3:d8:bc:61:ba:9e:08:b3:c5:5c:de:b4:ee:
ac:fd:8d:cf:a9:38:c1:a6:57:eb:57:c4:60:27:57:18:42:6c:
35:8e:04:20:cb:d6:ba:57:99:00:2e:2c:52:f7:c2:02:d2:ea:
9d:87:1f:05:80:c7:17:65:9e:68:ba:d5:3a:cb:33:69:de:e6:
e7:b6:fb:73:2b:88:d4:93:74:bd:bc:b2:b3:4e:21:40:2c:13:
af:cd:ba:9b:72:c6:ba:5c:c4:20:a4:90:07:00:75:58:bc:f9:
0a:cb:17:93:31:1d:0a:ae:ac:99:da:5b:05:ee:a2:53:3e:68:
92:e2:e7:41:e0:fc:47:dd:85:c3:69:22:66:21:46:7e:8e:14:
a6:4f:ab:42:f4:e2:19:d0:9e:e7:d3:6c:2e:95:a7:21:24:e7:
1d:a4:0e:6d:31:a9:ca:33:c8:53:7b:a2:04:dc:8b:5c:41:af:
02:fb:9b:cf:4b:9c:a6:e5:79:c0:92:5f:c5:83:1a:2c:bc:42:
8c:f4:75:5d:b7:62:cf:4b:60:79:ac:c8:f6:9a:48:01:ef:bd:
e1:df:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:21 2025 by rpki-client