Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
File: IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer (raw, json)
Hash identifier: PIDWSwQ4i+yEKyNj+nIy+y2UpAMdfeDam7IRSwDxZI8=
Subject key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6EB4BBF01CB511633734D3DEB613B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a0a:db00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:eb:4b:bf:01:cb:51:16:33:73:4d:3d:eb:61:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=219885ea020e65006314ee9480def3b3efc039e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1d:f4:f5:e0:7e:8a:f6:9e:62:df:3a:5f:95:
e0:61:53:76:bd:36:e3:91:b1:0c:32:a4:d5:36:f1:
dc:89:3d:76:0a:de:07:a7:4e:83:ea:dc:29:ea:e4:
eb:40:d3:45:90:c3:bd:38:7f:8d:31:68:32:f9:c0:
45:15:ea:16:89:c5:b3:b6:8a:4c:55:32:cc:4e:49:
29:69:8e:13:9a:fc:6e:0c:91:45:a1:0c:67:67:f6:
24:0c:c9:a5:8e:58:a7:87:60:9b:a5:c2:61:bc:67:
19:16:64:5d:7b:e3:8e:bd:46:18:f1:4f:e0:06:09:
8e:33:eb:d2:85:63:1c:2b:f0:1b:73:23:66:e8:f6:
ee:65:3d:a9:42:d8:13:f5:64:a0:a3:b8:63:6e:6a:
4a:7a:6d:1b:50:d9:cc:bd:42:38:d2:b3:83:f0:8b:
20:66:94:99:57:43:44:9e:75:5b:8b:d9:dd:76:df:
a8:9e:12:02:25:87:74:aa:12:7f:5b:1c:42:ba:62:
cd:f4:27:b8:e3:c3:0a:e0:75:24:83:b0:ca:98:6a:
c5:de:13:33:d8:07:ed:d7:00:24:18:92:d7:c1:d0:
75:ee:e3:ff:a2:c9:5f:1e:95:6f:e2:c4:a1:1f:b7:
a1:fd:cf:af:4d:8d:53:df:17:a5:1d:1b:b1:e6:51:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:db00::/29
Signature Algorithm: sha256WithRSAEncryption
6d:08:77:c5:99:37:77:d5:d5:25:20:07:6d:2d:1d:35:85:09:
8d:b0:75:b6:a5:35:46:49:68:8d:c2:96:e0:e8:ae:fb:58:ec:
9e:51:80:fe:d6:46:a2:a8:11:32:b3:39:12:45:c1:e5:68:cb:
3f:68:94:f8:98:ac:ac:ee:38:d3:b3:27:8d:5e:a2:64:29:4a:
b4:63:69:0c:69:74:31:23:88:a8:a9:6f:c2:5c:2a:05:c1:05:
78:17:e9:e6:34:ac:37:87:05:6c:37:92:cb:06:a0:d4:87:27:
02:fe:5d:29:7b:bb:fb:45:d2:11:5c:a4:da:9e:3f:cb:e0:62:
2a:91:fb:9c:cf:4d:9f:bd:8c:55:d5:a3:a3:f2:86:97:ec:0d:
ce:2f:df:8d:dd:59:1e:b3:18:0e:43:72:a2:ec:2f:aa:b0:f3:
4a:76:e3:7e:33:87:d0:ed:5a:0e:5b:7f:9f:68:99:d1:f5:78:
ce:34:b7:a3:ad:a1:c8:f1:7f:cf:44:ca:f1:d3:f1:e1:5c:1b:
00:80:40:18:38:10:3b:03:89:01:8c:9c:74:7f:ae:5f:c7:17:
c6:56:4b:36:b4:3b:60:ca:f1:dd:c5:e0:a8:73:29:4e:22:b3:
cb:ee:58:bd:35:98:07:3f:bd:4d:58:e7:64:14:9e:3a:95:35:
ae:09:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:23:12 2025 by rpki-client