Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
File: BbMBfBaTuUW17aCR7JP4XBvh3zY.cer (raw, json)
Hash identifier: leSYksd+tm4rGa3LFh9uas/+Vk8pR/oSlmKyKN2UT/s=
Subject key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E285A726874EBE06CFDFE4702E8B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.163.112.0/22
IP: 195.60.208.0/22
IP: 2a04:8280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:28:5a:72:68:74:eb:e0:6c:fd:fe:47:02:e8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:fe:1f:60:69:cc:af:af:b9:fd:32:e2:43:
2b:b6:7d:7c:34:c8:89:26:70:19:e2:6f:94:b3:56:
cf:a6:33:3b:5c:69:d5:47:0c:95:db:d7:21:fc:7c:
50:94:38:19:6b:e7:25:a2:cf:db:72:a8:24:7a:a1:
d6:1c:cc:31:19:21:d6:1b:d1:17:c0:dc:89:87:3d:
57:df:56:e6:49:3f:ff:21:95:02:38:0a:3d:a7:0c:
df:65:19:61:5f:58:f1:b8:ed:32:ce:f9:25:59:3e:
ca:38:03:9f:17:47:9a:07:31:80:01:30:cf:76:97:
ee:f4:36:fc:a8:b5:08:db:cf:00:69:f9:71:dd:eb:
cc:e9:20:95:e3:29:93:fd:43:54:36:6e:40:44:52:
26:9c:f6:83:11:07:5f:88:3e:53:43:44:8b:13:8b:
e5:14:2f:b4:95:db:19:f5:27:d7:76:73:d2:b8:74:
54:43:1c:c3:c1:1f:84:24:2c:e1:28:49:4e:09:72:
e5:ed:d2:4a:c4:e7:4d:ef:78:ab:f7:be:ad:57:f1:
1e:6e:b7:76:e5:bd:84:f8:3e:e6:23:50:11:19:9a:
26:ff:bb:25:78:77:ba:6c:fe:f9:e1:17:30:88:d4:
39:fe:0f:4d:b1:70:2e:e0:d0:ff:ae:c9:5f:69:7e:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.112.0/22
195.60.208.0/22
IPv6:
2a04:8280::/29
Signature Algorithm: sha256WithRSAEncryption
1d:21:08:d7:1c:ab:7a:c5:05:ea:73:14:84:65:39:4e:b0:bf:
43:d8:1e:e0:96:ca:a1:ac:05:58:60:67:ec:3e:02:50:2d:e4:
2b:33:d9:cd:67:27:b6:39:10:00:35:8c:f6:14:19:c7:1d:20:
f8:34:07:a3:ee:ef:4d:da:4d:d1:ee:9b:69:af:e4:a6:c5:56:
90:3f:1f:8a:cf:d0:d2:34:c4:66:bf:1d:7e:f4:88:8e:97:ef:
32:40:96:5f:d6:42:9a:7e:17:1d:3c:65:20:4d:a5:3e:1f:0d:
28:94:37:93:17:0e:70:bb:02:67:89:ad:4a:dc:03:d4:5e:34:
df:36:5e:e9:d7:48:05:7c:a2:e9:d9:91:ef:3b:1d:17:97:c7:
7e:e9:a5:97:4c:58:9e:3e:ea:bf:52:92:01:b2:f9:1a:8d:fd:
28:dd:1c:2a:68:31:e2:64:46:46:0d:25:00:c5:a4:40:18:c8:
1e:17:c8:db:81:a0:f1:54:42:50:fe:4c:04:a0:36:34:56:89:
05:49:62:8d:49:02:b5:02:09:02:53:49:bc:15:63:00:84:74:
21:65:a5:47:fe:d6:43:14:0b:87:84:10:18:45:ba:9a:f6:53:
c3:dd:9e:89:31:73:45:34:2c:53:9f:e4:d7:b8:89:bc:c2:dc:
85:eb:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:06 2025 by rpki-client