Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
File: CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer (raw, json)
Hash identifier: zXaO/awFf/0fNIpSbGqWE4PHvqJMU38ygGaaeIA4Utg=
Subject key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01956FE8525287DC89F0A50D9D67BD5D242B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 07 Mar 2025 09:20:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60821
IP: 185.22.168.0/22
IP: 194.46.38.0/24
IP: 2a00:63e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6f:e8:52:52:87:dc:89:f0:a5:0d:9d:67:bd:5d:24:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 7 09:20:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08fe040242651353d556b8c4240082190f271d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:37:8d:9a:ea:a9:d7:fe:8d:f7:96:f8:4a:
1e:32:8e:47:5d:1d:08:cb:60:00:11:87:4d:ac:e9:
f6:10:f5:9f:2d:a8:c8:0a:ab:ef:63:d2:c1:f4:10:
d1:c1:bd:fe:aa:9d:42:c3:21:11:ee:dc:85:4e:25:
a8:24:c6:c8:aa:77:17:1f:27:e0:35:9e:d4:68:6f:
fd:81:68:12:f9:fd:69:a6:c0:77:04:ae:43:ce:c3:
a5:19:ff:e9:22:db:ea:55:c1:43:58:42:e0:fd:ca:
4d:dd:e3:69:d1:cb:90:72:43:3e:67:bc:75:08:31:
c8:21:0a:49:62:92:b2:5c:4e:e0:4c:42:06:23:51:
bf:03:a2:3e:bd:4d:e5:9c:b5:29:c7:b8:e8:bd:05:
4e:69:a3:43:fa:84:d0:a4:5f:b8:67:21:a2:25:e0:
52:e6:d0:70:9a:c0:00:2b:82:65:28:d4:93:2d:05:
f2:af:ec:40:ee:5d:98:d6:18:4b:ea:8d:b9:ac:8d:
f9:aa:dc:94:3a:a3:78:41:fb:7a:51:35:f1:41:e6:
14:d4:18:ea:da:d3:52:67:c4:b3:15:17:98:4e:d6:
51:66:71:68:ad:e5:de:94:bf:e5:b1:a6:45:91:36:
18:55:19:a8:bf:dd:7f:f3:05:ec:31:a3:43:56:32:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.168.0/22
194.46.38.0/24
IPv6:
2a00:63e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60821
Signature Algorithm: sha256WithRSAEncryption
50:a2:ea:a4:11:2c:2f:a9:81:ce:83:b5:96:04:d9:83:d2:29:
5c:94:4c:db:2b:c4:0c:bd:a8:bd:46:2d:d3:da:85:b2:0a:17:
4b:25:77:7e:f4:74:27:16:dd:8a:1d:87:3a:9b:0c:0d:ed:65:
5c:8b:6f:e4:55:36:94:eb:0f:3a:b8:de:23:26:a8:2e:5a:02:
ed:f4:03:51:01:11:62:cf:15:04:05:47:4b:51:0a:12:8e:99:
5c:25:77:11:cc:4b:07:e7:2e:33:16:6d:cb:5a:17:e7:06:8a:
fd:5e:4a:a5:49:75:c6:03:cf:1c:f6:b5:66:ce:01:24:9a:43:
3a:48:9d:90:78:01:8d:ec:c1:a7:d7:b3:d9:a9:59:c4:d1:1f:
e9:31:29:0e:fe:bb:eb:65:00:b9:86:54:de:51:79:eb:f8:1f:
6e:27:d5:a5:56:26:b3:0e:6c:0d:85:44:83:15:ce:c4:0a:75:
6e:e3:38:c8:7b:7a:94:cd:21:cb:f4:fc:54:cc:69:fc:eb:ff:
1f:05:3e:d5:dd:46:aa:e6:4a:5d:bf:f7:53:ec:77:88:03:6e:
6e:d5:1b:67:29:59:e9:30:fb:27:b9:f9:a8:ce:05:f9:c0:02:
f5:af:05:82:2a:64:57:f7:c9:a0:1c:16:d1:d6:98:ec:18:22:
86:42:a0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:19:00 2025 by rpki-client