Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer (raw, json)
Hash identifier: YjwPK/TzgPAzqLu9laxkAC1SZmzoDPQyhEwfVurkbBI=
Subject key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9EDFD53E5CD2BF5BD9D19CA9E274F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.67.144.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ed:fd:53:e5:cd:2b:f5:bd:9d:19:ca:9e:27:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:62:a3:c8:de:2c:ee:ed:56:4e:d3:bb:b6:
9a:36:29:e6:f1:05:d4:f7:57:83:6c:05:94:46:48:
a0:ee:b9:d0:be:a1:c6:8e:ab:56:2e:20:a5:3b:59:
0e:97:32:10:69:e8:8d:09:01:5f:71:d8:10:75:a0:
8e:0c:84:98:a1:1a:48:ef:f7:0e:1f:4f:19:09:3d:
e3:13:4e:83:6a:c2:f9:f8:2c:b6:88:0e:4c:b7:e3:
44:18:cc:b8:7e:5c:46:12:02:98:aa:18:4c:86:a4:
0f:76:d4:84:71:cf:f3:d2:4c:9e:a9:34:bf:cf:8a:
c4:5a:17:15:a4:5b:89:b5:2f:f8:ae:0c:c7:fb:24:
6b:5a:4a:90:15:0c:35:28:3b:6e:f2:a6:75:b3:71:
0f:53:16:9e:14:ce:b0:d8:64:c7:e1:59:fa:e6:63:
87:b2:5e:9a:1f:c8:dc:ee:55:aa:29:d9:f3:7d:ca:
5b:f5:c4:b2:4e:32:a8:4e:ff:7c:56:86:3b:4e:81:
56:40:5a:eb:ea:90:28:be:b9:55:df:16:47:10:36:
d1:4a:84:d0:83:7e:e0:6b:55:1c:7a:16:ec:7f:de:
18:1c:44:65:be:2d:bb:e7:0d:74:13:d8:40:cb:b8:
a4:ee:ec:c3:39:e9:bb:2a:70:7a:01:e2:dd:2d:f7:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
81:f4:2d:e0:6f:5f:cb:63:5a:c0:53:8a:bf:a6:46:0b:45:a3:
ae:06:51:25:94:62:82:aa:e6:ef:be:b9:38:5b:5c:a5:8a:fc:
1d:f2:5f:7d:de:72:47:26:31:74:d3:18:15:1e:d1:bd:3b:85:
5c:f7:4b:09:62:f9:30:b6:40:74:70:e2:33:99:fc:61:99:44:
85:26:01:e3:85:23:53:c8:dc:1a:a0:b3:43:aa:1e:f1:a3:35:
3f:ad:cb:27:13:21:52:b8:90:da:f2:38:de:62:44:2d:cc:f3:
bf:39:63:f9:a0:05:15:42:a1:45:45:5b:28:94:07:1c:77:50:
c8:b9:8d:81:02:87:8e:e1:05:96:7c:ee:08:b5:1c:bd:7d:82:
95:ec:fa:59:f1:01:3c:19:e6:a0:25:5b:9e:68:90:31:23:bc:
8e:ab:40:8b:75:0a:4d:68:9e:db:32:a3:f7:2b:73:75:03:2b:
55:6b:70:c1:e0:11:d6:c9:bd:d5:14:92:9f:09:69:80:b7:dd:
3a:89:e0:8a:cc:a5:ad:db:55:c1:ce:99:69:6e:fa:2b:85:f3:
b5:44:97:a0:9e:fb:40:1b:cf:db:8e:a5:4b:db:ec:fd:c0:be:
04:e3:b6:bd:0e:c8:dd:b3:c8:43:b6:fb:a9:69:ac:a8:c1:92:
70:fd:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:49 2025 by rpki-client