Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
File: EewaDmTqhLaaQHzz8qklOIq07LQ.cer (raw, json)
Hash identifier: o2ffnPSjLw8oJLa1Ju3HVO+HIKn5g0Dfmo2alqw03hU=
Subject key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444AE95722B6D14357FF6B3CE8344CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 31.25.12.0/22
IP: 185.197.148.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ae:95:72:2b:6d:14:35:7f:f6:b3:ce:83:44:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:ac:e7:90:da:a3:6f:d2:a8:4b:11:a7:a2:
99:d6:bf:c1:f0:fd:99:78:28:f4:54:0c:8b:98:4f:
7a:6f:4a:73:81:3a:44:5d:77:62:7d:a9:a1:1a:32:
10:ea:65:26:11:d6:57:f4:36:86:d5:d3:9e:71:bc:
9f:77:35:db:c5:8d:22:76:29:41:3d:c8:9f:fb:85:
c6:6c:0f:8c:27:33:b2:68:1f:95:f0:bb:e7:32:31:
b3:f5:7e:83:b1:64:84:fa:c5:65:1d:c0:4a:1c:67:
4f:71:22:b0:2b:df:35:e8:db:24:21:c2:58:3e:b4:
d1:89:e6:33:84:03:01:78:98:f0:99:5b:7e:23:26:
d4:18:51:cf:a4:c3:62:12:db:a1:c3:df:97:cf:f0:
9c:0e:00:5c:68:39:33:6f:33:65:c8:fb:05:20:70:
aa:23:8e:99:5d:34:da:3b:19:7a:9e:0e:f5:7d:9a:
db:2d:bb:f1:ae:59:44:5d:d0:bf:a0:36:02:53:6c:
2d:e5:bc:b6:e6:bf:0b:81:e8:fb:e6:1f:39:6b:d7:
58:0c:08:a5:7f:e6:f8:64:8b:28:98:e7:04:19:42:
22:86:03:0b:77:69:d1:20:cd:6b:df:c2:32:de:4c:
12:88:bf:23:55:f4:41:f1:76:07:2b:92:48:ec:8a:
b4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.12.0/22
185.197.148.0/24
Signature Algorithm: sha256WithRSAEncryption
68:6a:24:9c:82:e2:f1:c2:2e:8c:d3:3c:b6:96:60:99:e4:64:
02:84:db:8b:10:6e:e8:74:15:63:18:88:1c:8e:df:93:8d:72:
71:81:2e:3a:f2:cf:eb:c4:cf:2d:ea:1c:6f:3e:2f:ca:ce:77:
af:30:9f:4d:6e:77:0c:5f:ee:13:56:a4:38:44:2c:87:c8:5b:
17:94:0c:b6:d3:df:70:ed:95:fd:74:93:48:c7:70:bb:9d:c8:
94:8c:c0:1a:9d:f1:d1:a9:b1:74:21:d9:f6:7b:19:b8:91:3c:
4f:27:4d:55:f7:6d:0a:5a:53:0d:bd:7c:58:b8:12:d9:44:ab:
a5:7a:63:67:c4:e2:ab:89:9d:d3:bd:b0:79:38:26:ba:5b:d3:
80:5a:1b:ea:3e:b6:9f:e8:43:64:8d:bd:1f:a6:d3:c7:31:5c:
c7:83:53:f1:b6:5b:f3:53:36:dc:c5:4a:12:97:34:dc:3b:41:
ca:f5:7f:d0:a5:37:f4:0c:a9:c2:49:30:80:1e:cf:96:5a:e9:
c3:70:b3:42:be:52:e4:89:d5:63:04:24:4d:c3:c0:15:14:63:
67:a6:cd:2f:91:35:7f:69:eb:79:83:06:06:19:54:34:1c:5e:
80:5a:9b:80:a5:73:85:e8:11:24:b6:bf:2d:7d:87:01:82:ba:
7e:ed:fb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:41 2025 by rpki-client