Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.cer (raw, json)
Hash identifier: kax3C8GcX2W4i/Q2JoMu/th3hjYhR89/U5evkJ3i66w=
Subject key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B30F5378E8B8646D66D26EBE65E60A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:fb8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:0f:53:78:e8:b8:64:6d:66:d2:6e:be:65:e6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=080702932802c2743d335f67d47a4238c3324533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:7f:30:03:b6:b0:12:e8:30:d1:63:75:66:
8e:44:d8:95:99:11:5a:dd:f7:77:2d:80:cb:06:f2:
10:b1:54:5c:d2:b5:f8:60:ef:fe:df:f1:08:c8:5b:
4e:14:8b:d2:af:7a:bc:17:f3:8d:2f:0a:b0:7e:13:
8b:96:51:8e:90:e2:6b:22:07:a1:58:a4:fc:34:1b:
ed:6c:14:f3:50:3b:64:0e:b1:54:62:68:bd:f7:05:
5c:c4:3f:8e:de:6f:7e:84:77:85:84:17:80:f1:b7:
6e:c9:fc:b0:28:d3:42:f6:16:43:d8:e4:35:a6:9b:
a5:fc:e1:87:64:dd:2b:e7:d6:11:e0:ac:7e:d9:b7:
d1:d8:c8:ce:54:7d:7a:ba:04:64:2a:e5:df:11:65:
84:97:76:90:dc:91:6f:9d:3f:97:57:e9:5d:f7:aa:
2e:49:ac:44:03:2f:3d:e3:8a:0e:11:e2:5e:4f:78:
b8:53:62:7b:6e:4f:ca:03:ce:ec:54:43:52:cb:24:
5d:71:df:3e:8b:42:25:de:d1:70:4f:ce:fc:64:e2:
75:87:90:16:bb:b2:16:01:d1:dc:f9:da:ea:72:74:
80:61:fe:03:78:7d:32:e5:b9:6f:1e:df:68:65:70:
b2:34:46:a0:9d:1b:37:2b:dd:49:d8:b7:c0:99:2d:
71:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:fb8::/48
Signature Algorithm: sha256WithRSAEncryption
71:be:a1:e5:ed:84:47:14:ea:64:9d:8b:5e:6c:3e:d0:0a:a5:
a7:81:26:8b:3e:77:38:0c:ba:bf:af:57:9f:1b:23:6e:fa:35:
e4:91:e8:18:fb:17:50:ea:e0:46:7b:3e:2f:42:1c:22:78:24:
57:50:de:1d:48:a2:a5:13:74:28:b2:90:b7:db:80:69:ec:5e:
67:91:2f:3a:1e:b3:71:00:b4:9c:e2:41:c0:0c:44:99:3c:83:
a1:fb:8a:d4:51:8d:bb:79:83:aa:0f:ac:31:b6:45:b5:12:e5:
a9:51:a2:43:a0:1b:88:e2:97:d9:47:ee:fe:3b:05:a3:69:c8:
a7:b6:1c:c4:b6:10:81:6d:e1:b6:19:47:69:e6:3b:e1:2b:5c:
e6:3f:80:b7:64:21:01:ab:13:ad:46:c1:96:ed:31:29:3f:10:
67:bb:da:14:24:4b:46:0a:1b:ae:89:a0:33:cf:9e:44:15:a1:
49:c9:f1:e0:09:ef:c1:a5:2b:6e:8f:10:eb:6a:62:10:51:1f:
79:7e:e0:a3:4e:65:49:e3:3b:04:a2:6d:4d:fb:3a:11:77:5b:
eb:cf:d9:b3:7c:71:58:a7:c2:61:10:91:9b:f4:76:7f:b0:2b:
db:01:7f:37:3c:9f:52:78:07:b1:e7:ec:43:bf:fc:02:66:5e:
f5:f4:5e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:58:31 2025 by rpki-client