Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
File: E7T2uQFntxvWY_oDkeA4oBVbuTk.cer (raw, json)
Hash identifier: 4608Z+YqRkZxX3Hlmj4uKTKOAAqOESdvwwT7HtfUa3g=
Subject key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425217F2E54D70800D9AEE9307EEF9BC0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210095
IP: 85.31.40.0/22
IP: 2a0d:da40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7f:2e:54:d7:08:00:d9:ae:e9:30:7e:ef:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:83:45:3f:90:2c:43:97:c4:31:a5:9e:f7:
da:a5:bc:76:f4:89:ee:92:d8:a6:ed:97:f2:e7:ef:
a4:00:68:48:08:12:53:d1:a9:bd:3c:f3:b2:70:75:
4f:1f:eb:d7:d4:b9:03:48:4e:61:c0:71:0d:a1:db:
cc:bf:fc:09:e8:50:20:2d:5b:44:e7:e4:2a:e6:44:
13:f5:d3:72:ef:40:04:d4:9e:12:79:87:06:1e:df:
34:18:74:93:bb:c7:6a:a4:c6:a2:1e:01:fa:53:b1:
fd:44:2a:2a:4e:83:f3:7b:75:93:1e:58:ac:f4:2e:
a5:95:45:cb:ca:30:46:84:1a:51:9c:7d:10:e5:e5:
0c:3a:a8:db:03:29:9c:a3:8f:98:73:d4:c0:54:45:
f3:e3:c3:af:d5:4e:7e:0f:bf:d5:8a:fc:e8:55:6a:
5b:30:3d:4a:f4:80:ca:b8:cb:68:0e:74:d5:40:67:
d1:b3:9f:48:00:30:29:7e:0e:97:64:22:c6:7f:8d:
04:11:cd:cc:89:89:85:2c:31:e2:8d:b0:32:c2:db:
43:c4:80:cd:25:f2:6c:64:44:56:c8:82:50:68:19:
c7:96:56:f2:f7:c9:7e:ae:f5:a1:2f:d3:57:62:9d:
dc:f0:57:00:1d:91:44:9f:77:09:e7:12:6d:c2:6d:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.40.0/22
IPv6:
2a0d:da40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210095
Signature Algorithm: sha256WithRSAEncryption
2f:70:94:38:2a:a6:77:ce:14:ce:23:81:bb:f5:78:dc:7b:4c:
fb:0b:36:1e:f7:1f:ef:65:2b:b2:05:e3:cb:f6:11:1b:0f:7a:
3e:75:87:1c:46:c6:2b:fe:13:64:a1:bb:c1:2f:1f:7e:ab:5d:
5a:24:27:13:48:f9:07:1e:5b:6f:20:0a:cc:91:95:c8:4a:fe:
15:0b:23:91:80:bb:19:b2:f6:97:35:dd:61:ad:f1:6a:31:10:
cc:6c:b9:41:fe:78:db:c2:ad:06:f5:70:6b:66:76:9d:4b:c6:
97:69:54:c4:5f:69:ad:e8:ea:2b:c6:f4:e7:95:b9:97:6d:fe:
82:e1:d9:67:9e:2b:80:90:08:76:4f:2e:e5:5a:e4:fa:fe:89:
78:b4:f0:83:e3:16:fa:6b:de:f9:4a:c5:b5:e7:f1:38:64:85:
e2:9e:7e:6f:e5:c0:b8:1b:db:d2:4d:d6:2b:84:68:55:55:52:
76:61:7d:51:3b:04:e4:6b:cd:0f:a8:6a:44:af:e0:d5:65:fb:
d3:5d:73:28:03:e1:48:e5:25:96:f9:a3:1d:55:08:e5:13:42:
e8:a0:24:a7:0b:60:57:9e:f8:a8:6f:7b:4c:bb:f4:34:f7:b1:
47:e0:f7:06:e7:f2:04:0f:2a:43:f7:4f:ee:34:c4:3f:89:af:
8c:f3:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:44 2025 by rpki-client