Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
File: KX75vv0afiTAzJcpmH_AZda3Ey8.cer (raw, json)
Hash identifier: 67DYGsTPCdK1U+G6n6CjpIytelw6YTaWCtXHunOgz50=
Subject key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B636A2318A2D36D05676A2EB89933A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 5.10.208.0/20
IP: 185.23.236.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:36:a2:31:8a:2d:36:d0:56:76:a2:eb:89:93:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:39:bc:c5:6f:56:f0:ef:73:bc:7d:a0:db:
45:fa:b7:a1:78:29:1e:e7:b7:bd:9f:d2:30:cb:e1:
25:87:52:63:c4:57:da:ad:5b:b6:a5:65:54:69:87:
69:d9:d4:44:af:74:45:1d:15:b3:e1:6c:2f:61:b6:
50:fb:14:5d:b2:df:ab:bf:c0:b9:2c:be:81:35:c5:
92:66:c9:1c:a4:97:f4:7f:9d:6b:49:64:2f:aa:42:
cf:d6:90:e4:1f:a7:ae:b8:7a:2d:97:d1:d2:0a:15:
b3:83:8b:87:41:1b:87:f1:9a:2b:5b:e0:1e:51:d1:
53:6a:16:93:46:8d:63:ab:55:6f:13:5b:8e:7a:9d:
70:25:3d:23:62:26:97:ae:92:95:17:df:9f:da:60:
f3:00:1e:59:93:80:35:aa:c2:67:ec:2b:b6:11:03:
47:9b:6a:da:37:dd:c5:be:a6:7b:cb:21:b8:b5:90:
08:db:13:8f:48:44:05:36:85:ca:82:ca:ea:f2:76:
22:70:cd:ca:55:90:0b:25:5a:84:a8:8b:67:db:e0:
16:97:ac:43:90:f4:f0:37:27:f7:71:97:54:3f:a2:
fa:b9:46:38:74:8c:cb:95:ea:9b:6e:9a:79:f6:90:
47:d3:46:64:a8:a0:f3:24:74:96:12:ab:eb:1e:b2:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.208.0/20
185.23.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:28:95:b0:50:aa:e4:20:38:23:28:f9:a5:a9:57:72:a8:2f:
eb:43:9b:33:70:4c:9d:43:1e:85:1d:1e:fb:08:18:13:7c:6f:
46:85:e5:00:22:c0:b5:24:16:5e:c6:b8:e2:74:cf:d9:b3:02:
a8:bc:0e:62:28:10:93:37:fe:27:b0:b8:0d:3f:fa:ec:f9:c4:
d3:0c:7e:b6:f1:7e:a4:03:62:13:06:d5:61:18:83:1d:ce:59:
e4:53:e4:40:e2:91:00:ce:80:7c:9c:52:06:68:93:ba:93:f5:
8e:f6:d2:06:bb:58:14:1d:02:0e:b4:09:c9:07:6d:3d:87:18:
ae:a6:92:60:c7:52:7c:93:52:ed:03:77:ff:b3:cf:17:6e:9f:
d0:f7:6c:dc:49:fb:bb:6e:01:4e:14:f5:8f:bb:42:08:83:54:
4b:17:19:6e:b5:d5:08:cb:0f:d8:2d:89:e0:e3:49:de:c9:90:
f2:aa:96:f4:18:7b:06:ff:74:54:a9:7f:ea:a8:8c:81:22:ca:
b9:14:db:fe:e0:ad:07:26:e1:b5:1a:e8:ea:38:dc:39:90:78:
39:33:d7:f9:75:41:74:6e:17:30:c4:da:0c:da:10:72:3e:9e:
5b:7f:20:f7:5a:3e:a2:df:64:2f:90:6e:d7:ab:fb:6f:74:16:
e0:f5:b3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:50 2025 by rpki-client