Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer (raw, json)
Hash identifier: aLzb+AuYV6sk/U2S4DF1Yy8im6EmH52TZT1bQviZXps=
Subject key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195844ACEC47D5391E7EB87D9F50AA07D6C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Mar 2025 08:20:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.187.104.0/22
IP: 2a0b:8080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:4a:ce:c4:7d:53:91:e7:eb:87:d9:f5:0a:a0:7d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 11 08:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0438e64299e545d3637074cb946b400f7990ecf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:b5:a2:93:c5:e1:b3:dd:f4:82:dd:19:e2:
8c:0c:4a:f0:a2:02:0c:b6:98:7b:4f:12:5a:88:62:
92:09:67:47:07:73:0b:18:2b:9f:62:da:32:1b:95:
15:7a:19:04:f5:5a:37:4c:2e:62:ed:ea:36:3c:26:
67:9e:65:9c:54:c7:87:86:3b:a0:2d:55:b4:85:2a:
ea:19:6d:7c:13:2d:9c:f5:71:eb:c7:4b:ac:b4:0f:
e7:ef:48:13:fe:09:74:ba:ab:c1:d4:cd:d4:de:49:
bb:f8:18:5f:e3:88:7e:ee:27:ef:22:8e:fb:5d:c1:
e0:04:e9:0c:c1:61:fb:b5:f5:b8:d3:b5:7e:b7:ff:
e9:d7:fc:7c:80:91:1b:9f:6e:51:bc:dc:0e:32:50:
93:18:3e:8e:f6:b9:52:66:85:e1:02:38:50:31:69:
f0:9f:67:ea:8b:f7:3a:da:85:f5:ad:16:ad:4f:e3:
d6:fb:2f:0f:3a:1a:87:3c:e0:d9:9a:0b:fa:b5:93:
fc:bf:95:bd:02:50:56:7d:02:e7:c6:98:c1:30:fb:
b4:21:7d:03:25:7c:e5:57:a7:81:a6:e1:62:60:9d:
4d:9a:07:bb:ba:47:a4:77:5b:44:62:5e:80:a6:f2:
02:a6:ff:91:93:85:7c:00:65:97:bf:93:c5:12:48:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.104.0/22
IPv6:
2a0b:8080::/29
Signature Algorithm: sha256WithRSAEncryption
12:8d:88:97:11:94:6d:29:03:fd:13:00:08:c3:16:3c:07:27:
34:02:c4:a3:68:fa:59:69:e5:ca:51:b6:fd:33:a9:f3:95:50:
f3:f3:8e:fd:5b:14:cd:ed:4f:53:28:84:05:fd:bf:2d:ad:5e:
aa:93:29:e1:53:2d:60:3d:21:d8:2f:c3:b4:06:1d:c5:13:d3:
74:76:64:54:b2:ea:bc:fe:d3:0a:5b:4c:46:86:6f:23:6f:65:
5c:ff:76:32:45:8a:f4:77:24:b5:40:ce:dd:87:b5:4f:ff:96:
61:46:19:aa:f2:5f:bf:fb:b7:50:5f:8a:36:f1:fd:73:36:aa:
87:ad:49:ed:8a:cd:76:c6:bb:82:f6:71:8d:9c:c2:13:96:2f:
22:5f:f2:20:1c:28:16:e8:bd:5b:d1:29:13:60:9b:4f:c5:0a:
50:5b:f7:61:77:29:c2:f7:f5:22:d3:4d:6b:4b:4f:b1:47:c7:
90:46:c0:7a:9b:98:aa:b3:9c:95:37:75:7b:1e:59:7a:82:8a:
56:9d:c6:42:8d:47:3f:a6:4b:70:0e:0f:7f:01:ad:cc:e9:08:
3a:7d:0c:63:b4:9d:fa:68:58:f1:9a:58:56:26:78:f7:a5:2e:
fc:2f:9a:a7:16:8b:48:52:c7:f5:b3:b4:4c:43:93:51:7e:6c:
19:ed:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:37:22 2025 by rpki-client