Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
File: G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer (raw, json)
Hash identifier: INX04nHqUGTW5RHwdd8Tobso654T0veQF29Anuqx81g=
Subject key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196F2929A3D91814EDEA59AC8158D30F1FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 21 May 2025 11:20:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.60.248.0/22
IP: 2a02:76e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:92:9a:3d:91:81:4e:de:a5:9a:c8:15:8d:30:f1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 21 11:20:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c2:57:13:6a:58:76:29:7d:30:ac:67:09:c3:
86:f0:91:f3:50:e9:5a:7f:9a:64:f8:e3:ac:4f:44:
c8:2a:22:ca:d6:f6:ea:31:84:3a:d4:99:04:17:90:
cc:d3:fc:f2:75:80:7a:9d:7f:2c:cc:53:1a:b7:b0:
e6:24:61:b0:0a:a0:25:77:63:2c:cd:cc:c8:98:b2:
fb:8f:75:ee:97:39:45:65:23:94:4a:3b:dc:b1:81:
56:be:a0:e0:35:fb:47:90:a2:a2:1f:a9:87:b5:fb:
6a:10:0f:31:7d:90:3c:95:0a:47:41:39:b1:59:d7:
3e:2e:81:3d:0f:2d:ec:f9:82:27:02:3d:14:e8:c1:
4b:98:1e:4c:e2:b8:ee:53:63:68:02:6d:62:a2:cb:
36:b3:ea:26:31:ac:c2:3d:d9:c9:f7:b5:45:13:71:
a4:0a:53:e2:61:6a:45:69:0b:d0:1d:57:27:8b:c7:
aa:03:5b:7a:1d:33:08:93:de:e5:bc:fc:ac:12:aa:
a7:54:29:ee:41:5a:56:c8:92:2c:a1:21:6e:49:71:
b1:78:ec:49:26:11:9a:8b:9f:ca:22:ac:00:df:2d:
de:3b:66:cb:38:da:2e:0f:43:94:b5:c0:ac:26:c6:
ed:29:d4:7d:88:bb:c4:ec:96:cb:cf:9c:f3:06:12:
f2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.248.0/22
IPv6:
2a02:76e0::/32
Signature Algorithm: sha256WithRSAEncryption
51:cb:cb:50:3c:66:44:2b:df:6b:f6:be:2a:3f:d1:77:db:6f:
df:13:3d:ad:da:be:00:85:a5:f2:29:86:c0:c8:20:92:4f:cd:
c8:26:da:2b:d8:62:08:a9:04:ba:07:e2:75:7a:ca:74:ed:e1:
15:01:0f:cb:8a:9d:09:d1:42:a7:13:99:d2:dd:c4:dd:57:1a:
68:57:93:88:b0:90:bb:1f:4c:21:64:a5:db:81:61:0c:e5:2a:
41:eb:29:a5:eb:47:47:e6:da:db:21:3e:76:db:ed:d4:2e:be:
55:53:49:59:c8:cc:17:8c:6a:c3:76:de:2b:3b:d2:c8:d7:69:
69:12:f3:58:c9:fb:cf:e1:49:10:2f:0d:a0:e9:41:ba:41:08:
d1:b2:54:8b:26:33:95:57:84:b5:2f:11:f2:23:e5:06:c1:52:
19:0f:63:19:96:e4:04:bc:e9:5c:50:c8:db:0e:c2:21:df:61:
df:95:a4:f5:d5:b4:56:3a:3c:72:6e:fa:90:55:5d:c7:51:42:
3d:56:cf:8f:8d:c6:28:ff:6d:48:a8:e5:66:81:74:e5:09:dd:
a7:c2:a1:e8:8a:eb:27:e1:ec:27:02:5a:af:00:8b:07:7a:31:
9a:08:33:87:7a:23:d8:28:75:bf:fa:c3:da:e2:e9:da:9f:a2:
fb:2c:9f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:24:08 2025 by rpki-client