Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer (raw, json)
Hash identifier: ZXdtj/AMUrwq4JuESxW0USnSP0slhiCtL2elOPU7Ojw=
Subject key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747515255CD6B123BD374A4C971672A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 37.143.0.0/21
IP: 46.28.40.0/21
IP: 91.208.12.0/24
IP: 2a02:2d00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:51:52:55:cd:6b:12:3b:d3:74:a4:c9:71:67:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:ab:c9:07:df:6b:99:33:04:17:c6:28:3b:
eb:93:8d:8b:62:37:e8:a9:41:39:e8:92:bf:db:bf:
df:21:b5:5e:6b:d4:d7:0b:ca:2f:32:30:66:30:39:
93:ec:21:e7:36:75:8e:27:b3:8d:6f:27:37:32:90:
8d:82:63:d4:3b:4e:ca:5c:02:4e:62:59:29:e2:3a:
74:90:c0:06:e1:fa:80:63:6e:ed:e8:10:a1:24:c1:
ae:83:5d:9c:3e:38:dd:d6:9a:06:0b:ac:38:af:dd:
47:ea:36:e8:09:97:22:11:26:12:4f:93:92:af:e7:
39:9e:b1:25:bb:e5:a9:00:4a:85:30:be:f9:26:4d:
2b:81:12:57:e2:b5:ba:33:59:ff:41:b1:7f:eb:05:
4d:94:a9:05:b3:c1:96:77:d1:e8:52:48:37:83:11:
de:e7:28:85:20:43:32:81:d8:33:f4:8d:fd:15:84:
a5:79:28:d7:0e:66:36:bc:62:e7:d9:05:f0:3c:4f:
4e:a4:40:01:e7:76:c8:d4:6d:d6:4d:af:f1:db:04:
15:0f:6a:2d:ff:ea:8a:68:16:bb:02:27:fc:5c:70:
9d:16:76:d2:e7:a1:bb:cf:75:b7:13:20:14:b0:16:
02:88:08:ed:3b:cf:17:40:c3:cf:39:8e:9b:1f:f8:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/21
46.28.40.0/21
91.208.12.0/24
IPv6:
2a02:2d00::/32
Signature Algorithm: sha256WithRSAEncryption
96:f9:13:e7:b1:a2:d8:83:07:de:ee:06:3f:4d:aa:60:3c:63:
ff:48:54:5a:e7:b7:5d:31:0d:73:8c:17:56:c2:00:d7:02:28:
33:25:87:7e:d3:4d:cf:29:99:34:6c:9c:3f:eb:88:ae:d0:5b:
ed:74:06:f8:57:bb:f9:43:98:d8:1f:d0:fb:2d:55:d1:d6:29:
98:06:32:d3:c7:4f:4c:20:b9:f2:ea:5c:90:f4:fa:4e:dc:45:
33:a0:0c:15:a1:73:a5:e0:ec:46:c2:32:74:a8:c4:08:52:6a:
60:e8:8c:c0:42:3c:b7:dc:0a:5d:99:49:7e:eb:28:2c:3c:38:
37:4a:3e:80:ea:96:e9:da:3a:5a:33:66:81:03:af:da:4d:93:
ba:e0:a4:77:54:d5:ca:5a:d9:6e:85:8e:92:d2:f5:25:ba:a4:
7c:3a:38:dd:32:aa:ec:19:d8:73:fd:c7:7e:ef:da:6b:79:17:
e7:a4:c7:7c:26:f7:17:56:55:24:3e:41:87:dd:50:50:d4:12:
23:d9:71:8d:a6:67:99:72:3c:25:93:b3:35:e5:bd:98:5a:0d:
d3:12:44:05:72:21:e9:c8:fe:ba:c4:f9:2a:5c:7f:4d:95:f7:
a7:82:db:76:38:d9:53:2c:a5:bc:cf:1d:80:23:0d:c9:a3:ce:
63:ae:8e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:27:31 2025 by rpki-client