Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
File: FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer (raw, json)
Hash identifier: 4anv6g7a7ZilNYVGhu5bu7NRWSDUN7OsYn89dRKopO8=
Subject key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DD8CC7EB93104F24030012627AF8C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.67.4.0/22
IP: 2a03:22e0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d8:cc:7e:b9:31:04:f2:40:30:01:26:27:af:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=146170cb906ef42d097c6402d83eec3d92677a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:14:10:20:df:f7:01:be:2e:3e:7c:5f:bc:
79:d9:a3:ee:15:b5:ec:c2:70:f5:41:d9:40:99:de:
c6:91:81:c9:da:c9:76:c6:7e:9c:ec:92:22:58:84:
26:64:b4:a8:e6:42:c2:cc:de:72:a2:39:9a:bd:98:
db:ba:0e:7a:0e:34:5e:3a:3e:51:fc:e6:4a:83:6a:
11:29:6b:ad:80:cd:db:1c:f8:e8:ff:8f:b3:4c:79:
cc:53:58:b5:07:25:58:14:cf:9c:56:91:8c:81:07:
e9:03:30:7f:75:1d:a8:e6:cd:bc:91:75:f8:a2:50:
e8:ba:26:2b:ce:92:f9:c0:7e:50:2b:93:eb:8c:cf:
3a:51:e1:87:56:04:96:ea:02:dc:e5:ff:ba:79:09:
f7:5d:8c:cd:a8:30:d1:04:43:8c:6f:4b:e9:1c:7b:
bc:20:3e:ac:7f:b2:7a:42:e3:fd:2e:a7:83:6e:43:
1f:7a:7f:5f:15:d0:a4:bf:bb:18:4b:27:ad:4f:e2:
09:ed:95:f2:10:a1:93:7f:14:98:39:02:63:48:ad:
4a:76:14:94:1f:e7:03:50:3d:a6:b2:83:cf:99:3c:
c6:32:c2:29:5f:ae:0f:28:74:a7:99:f5:f8:18:1a:
0a:4b:a1:a8:d2:f6:6a:33:4f:c9:0f:ee:bc:5c:10:
99:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.4.0/22
IPv6:
2a03:22e0::/29
Signature Algorithm: sha256WithRSAEncryption
08:85:b5:e6:f0:7a:91:8c:11:34:9f:fc:b9:84:44:79:72:f6:
5c:4c:b9:0c:37:e0:91:50:31:4a:29:c5:f0:d5:fa:8e:22:26:
6b:2b:99:e0:e5:76:08:83:21:e6:1a:c9:6e:08:53:a9:ae:e6:
b6:11:66:61:6b:b0:3b:c5:24:3d:b0:36:a3:02:95:1a:fb:31:
d6:ab:3b:c4:56:bc:b5:91:ef:58:86:65:f8:e1:95:95:d4:11:
df:c3:1b:51:fd:b0:b1:21:21:ff:9b:92:75:c4:97:28:47:0f:
a7:64:8a:06:f6:30:78:53:8b:ef:f4:dc:ba:3d:64:5b:3f:6c:
d5:12:be:90:a2:dd:ea:89:ca:8c:0a:9e:96:f8:e1:f2:95:90:
05:b3:ca:fc:91:56:44:13:59:e3:38:60:f6:b3:0e:92:ae:2c:
33:f2:46:83:51:06:36:86:3b:f2:4e:f1:b1:fa:ed:60:1b:bc:
c0:cf:76:43:7a:f3:2b:44:b1:2d:ea:f3:fb:52:c4:52:12:24:
50:c7:d3:90:64:45:f8:37:90:13:6b:41:56:39:de:a5:ca:32:
f1:f0:93:5c:24:6f:6f:0b:d8:92:46:97:52:d9:5e:a6:44:6c:
c1:a8:0c:e2:cb:ba:31:a3:68:52:25:4b:94:6b:60:e3:02:68:
44:5d:db:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:36:32 2025 by rpki-client