Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
File: F3m5XYpY_MpqgS53fn72lFP4rJg.cer (raw, json)
Hash identifier: JMxW49G6MnrCtk56M/3vQIyd6vIBB3k0EbmLWVtP40M=
Subject key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C461709FFCB25DCEAC4F765D6CEA9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.184.212.0/22
IP: 212.78.96.0/21
IP: 212.78.109.0 -- 212.78.111.255
IP: 2a00:1d08::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:46:17:09:ff:cb:25:dc:ea:c4:f7:65:d6:ce:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:28:28:28:db:0e:88:83:f1:e0:f9:c0:88:
da:f7:f6:38:86:a1:b0:3b:48:b7:8c:aa:d0:9f:8f:
44:19:28:37:2d:8b:f9:62:13:6f:73:46:65:3e:4f:
d5:64:18:cf:09:65:0d:e9:dd:99:2c:48:1a:94:a0:
7a:69:39:79:a3:14:86:1b:e0:b8:df:47:1e:60:b3:
24:95:d7:21:34:5c:8c:a1:b2:7c:c7:42:41:4a:7c:
f9:9c:5e:4e:67:7a:d4:13:a8:07:b5:a9:40:0e:e2:
72:44:92:97:d0:7a:a1:76:98:a9:9b:75:89:91:fa:
53:6d:01:83:fb:c3:2c:f9:ef:06:53:22:80:ff:21:
7b:c2:a1:62:2e:30:a6:3a:3d:6d:61:44:52:04:93:
de:e7:57:4f:b8:70:e8:2d:3a:2c:72:64:b4:fb:1e:
22:5c:73:a6:df:ac:2e:8b:ab:07:16:e3:78:3f:3f:
52:56:40:3a:05:9e:4d:46:01:b7:4c:46:3b:29:ea:
60:b4:ca:24:15:a8:92:7a:04:52:cf:7f:67:da:8e:
10:68:ef:92:dc:ce:aa:70:7c:4d:fc:5c:5a:ed:8b:
10:dd:40:8f:0b:21:a6:0a:7c:0f:0d:25:b6:74:74:
52:b8:45:73:ae:d3:d6:3f:52:ff:0e:4b:92:d6:c8:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.212.0/22
212.78.96.0/21
212.78.109.0-212.78.111.255
IPv6:
2a00:1d08::/32
Signature Algorithm: sha256WithRSAEncryption
55:bc:69:27:bf:41:99:0c:61:e4:92:24:9c:9c:47:ce:0f:20:
bb:70:86:3f:0f:8a:62:a7:02:b2:ff:4f:14:cf:98:93:ee:4d:
f2:4c:ed:d4:76:9e:db:67:86:6c:1c:6c:7e:bd:81:f2:4d:c1:
1a:34:3a:94:40:0f:05:d7:be:f7:8d:df:5d:72:6e:aa:a9:b8:
38:43:0d:b7:cb:0a:49:93:b5:9d:d1:9f:df:78:64:d3:c6:bd:
6a:75:39:b7:74:33:66:54:c5:2a:a0:76:04:9e:e3:6d:7d:e9:
10:73:fc:39:e9:75:49:b6:56:cb:70:33:f3:76:25:bf:98:56:
a6:16:2e:84:7d:3e:5a:ce:1c:99:04:29:dd:88:a0:53:6c:4b:
2a:ed:d0:ff:62:49:f0:91:cb:de:c2:96:33:13:ac:a9:d2:51:
15:10:4d:41:7a:cb:29:71:32:47:4e:8a:1f:e0:cb:fb:f4:92:
c2:d3:51:ed:3c:fe:7e:d3:c0:9b:c8:9a:3f:65:7b:eb:fb:9a:
e7:e6:41:cf:66:bd:ec:ff:85:25:bb:04:74:d3:1c:9f:68:e7:
4e:bd:b0:b8:bd:36:de:d3:61:c4:46:07:d7:ab:46:7f:a0:ab:
c7:78:fc:00:51:3a:7b:59:c0:a6:fa:42:0b:40:d3:10:1e:ee:
6f:77:cd:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:12:30 2025 by rpki-client