Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
File: BPRq-IXRzLsMCbBocHhbXmkXh-E.cer (raw, json)
Hash identifier: wsWQPWTxoPsK20tJUOsieyosILSK75UW0gZPmgGI1X8=
Subject key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC3F3012F9EBFA86DEDE9AA7885E01
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.235.60.0/22
IP: 195.238.234.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3f:30:12:f9:eb:fa:86:de:de:9a:a7:88:5e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:12:ef:20:76:a5:04:c4:0c:4e:cc:71:80:
c1:2a:59:6d:cf:97:87:5b:71:3e:50:11:d5:98:9e:
29:92:35:0f:09:e8:2f:c3:d6:ca:cf:09:1f:9e:59:
13:84:fe:32:85:dd:bf:a1:39:1c:b7:ec:e1:fc:97:
e5:5a:ba:d6:3c:e2:e1:df:e6:23:b6:c2:8f:5b:ef:
64:75:76:6c:c1:5c:93:f0:2c:fd:78:4c:bd:12:b2:
42:69:35:b3:f0:21:18:22:89:73:88:34:80:55:73:
f1:18:5f:64:bb:f5:65:e6:27:1e:4a:e6:25:be:56:
24:85:c9:20:65:34:4c:12:67:3a:c9:65:6f:30:0e:
a1:e0:21:a0:60:2b:f2:4b:c7:22:ec:54:99:e9:2a:
91:dc:3e:8a:27:02:af:28:1f:d1:54:7a:c1:54:1d:
ac:26:4e:e9:33:64:f0:f3:25:28:fa:d5:30:be:09:
25:3f:bc:89:c2:4e:19:41:6c:c3:c9:7f:eb:85:da:
94:7d:be:71:31:12:49:b4:e0:9f:d1:d0:00:f1:d7:
e9:3b:91:b1:13:f4:19:32:73:db:0e:54:ba:33:99:
05:db:c3:8c:ff:e4:46:ea:57:68:f6:d5:49:90:a7:
d9:36:a0:81:5d:32:77:40:33:c8:68:73:37:5d:fc:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.60.0/22
195.238.234.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:27:5e:d5:58:bd:7a:a7:da:41:f8:2e:16:9f:1b:50:25:43:
bd:63:34:a2:86:d5:b5:66:57:ad:61:70:ec:e3:09:31:bd:5a:
12:77:14:3e:e1:15:fa:96:59:fc:d5:60:9e:38:07:48:65:c3:
5d:9a:84:e7:59:6f:87:c8:d5:32:b8:3e:43:e9:70:56:62:2b:
7c:a7:5c:6a:e2:9a:a4:5a:cd:4b:b4:62:bd:ed:ce:bf:01:a1:
e6:86:d6:50:29:7a:ea:10:29:54:01:20:23:82:4e:6e:c3:78:
ff:46:22:fa:7a:1b:65:69:be:cd:87:50:e1:9c:80:25:b9:9a:
f8:aa:41:ef:47:ef:cc:7a:b8:f8:81:c6:44:ea:56:07:e3:2d:
26:b3:8d:c7:7c:98:91:d1:96:f7:8e:3e:ae:cc:8d:c7:0a:e1:
51:27:93:38:68:0e:41:5d:b6:8c:d8:d3:ab:61:7f:1b:ca:64:
49:d0:c9:8f:8e:7e:64:a5:d5:84:0d:95:d4:4c:b7:ff:df:59:
ec:fe:7a:fe:3f:f8:8a:2a:61:cc:fe:b5:b0:b8:97:e1:81:a0:
87:a3:13:58:31:2f:65:7d:e1:59:0a:ba:f9:90:9b:c3:80:63:
2a:05:44:ff:bf:2d:3e:ee:0b:e9:9a:06:53:e8:68:16:13:f7:
9e:75:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:53:27 2025 by rpki-client