Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
File: Eipka-1MQXprSAX5PXenpGXjS5M.cer (raw, json)
Hash identifier: 3s0j2acJAwzu1QbGrygdbjafJRqjfoglFJd/sBORRLY=
Subject key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A1C68F43FBC3D0E5BD1BC716AA2EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49102
AS: 49831
IP: 93.159.128.0/18
IP: 185.1.120.0/24
IP: 2001:7f8:d6::/48
IP: 2a00:1578::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1c:68:f4:3f:bc:3d:0e:5b:d1:bc:71:6a:a2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:e1:fd:bf:30:4f:18:af:c8:74:50:e0:a0:
97:4a:f6:5d:42:e1:a9:29:c3:00:1d:02:ba:91:e5:
4e:a1:6a:c3:92:eb:d0:82:49:db:66:cd:86:78:11:
4b:52:3e:c1:f6:0a:5d:ab:ad:fe:ef:fa:ed:4d:a3:
48:39:8e:c6:16:68:72:c4:ec:7d:df:da:4d:45:d1:
78:0d:c2:e5:8d:f4:df:fc:27:97:d0:bd:1e:bd:bf:
8b:d9:24:23:91:19:25:71:59:4c:0c:9c:ae:7b:cf:
50:79:06:6a:e2:aa:59:72:b8:26:76:94:75:31:43:
f4:f2:48:9d:50:c5:9b:00:ab:e4:8a:d6:4e:63:2c:
69:86:f9:a0:70:bc:9b:aa:8d:67:db:94:7e:92:0a:
dd:60:f2:06:cd:05:54:36:13:8e:4e:e3:6f:67:74:
69:d7:fa:c2:49:0e:f9:3b:59:e2:b6:e6:5e:b7:42:
2c:28:12:58:d0:61:85:fb:8f:54:5e:30:cc:17:74:
39:82:21:c2:4d:83:0a:0b:ea:9e:b8:d3:a7:58:4f:
e6:8d:b5:db:20:31:5e:1a:d7:5d:5b:1c:7c:8f:1a:
27:9e:5a:3c:cb:db:53:2c:0a:fb:ee:b5:7c:dd:b3:
ca:52:11:e3:68:60:9c:84:da:4b:9f:98:10:60:a3:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.128.0/18
185.1.120.0/24
IPv6:
2001:7f8:d6::/48
2a00:1578::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49102
49831
Signature Algorithm: sha256WithRSAEncryption
2e:32:b3:cb:59:41:d4:b8:a3:a5:8c:17:2e:f4:0a:da:e6:70:
dd:b1:fc:3a:d6:15:26:0e:c8:7e:88:d0:74:fd:ee:66:76:7a:
4b:82:33:5d:be:0d:d3:4a:19:49:02:dd:49:69:46:d7:2c:bb:
46:4d:20:f9:34:24:e1:dd:a3:9d:f9:84:84:27:96:71:66:8b:
ce:2e:55:2f:73:94:22:6c:2b:ea:e7:30:b2:1c:85:25:3f:dc:
90:9f:f1:77:8d:61:8f:cb:5d:ea:af:61:9d:04:0d:de:90:de:
72:8d:60:73:ed:ab:21:74:1d:3c:27:9c:fc:58:c5:4e:65:5a:
46:ef:ac:78:7a:58:85:01:48:e4:d1:b7:86:55:2f:d4:4a:ed:
29:1b:18:2c:80:2d:13:f6:21:99:2d:53:a6:b5:b7:45:99:79:
8e:5c:4f:9d:fa:61:25:be:49:98:18:cb:20:0c:40:c7:69:a9:
b8:27:fa:e9:62:22:b5:47:d7:2e:03:c4:6d:a3:5f:2a:87:3f:
a3:2c:48:a4:08:30:1b:32:2f:47:4a:7f:b8:0b:0c:b8:a5:19:
46:d7:23:62:40:ae:69:15:78:9f:5c:20:0d:f3:11:a1:56:2b:
e2:94:15:f3:ae:77:0f:9e:14:c6:2a:c8:1e:b8:b4:5f:ef:fe:
9f:dd:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:55:28 2025 by rpki-client