Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.cer (raw, json)
Hash identifier: 0ZfXtgs+P6fKMqf6OddcRaEvySowVuQoSI7p19X4CU8=
Subject key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB849B71E714F084A8551D74480A56
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 88.151.14.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:84:9b:71:e7:14:f0:84:a8:55:1d:74:48:0a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:2c:81:ae:45:eb:c8:9b:f3:85:c5:7a:37:
0f:2a:91:b5:71:24:d5:da:47:e1:f7:70:bb:04:af:
14:e2:a2:55:e0:8b:ea:7f:e4:d1:37:90:3b:25:cb:
0c:52:32:35:de:01:0b:c4:04:b6:f0:d8:44:8c:69:
36:45:60:95:e1:92:26:91:bf:1c:0c:4d:f3:52:3f:
1b:57:f0:d5:cc:32:6f:e9:cc:7f:b3:b0:b2:fc:d6:
db:21:bd:86:cc:cb:99:45:c5:5a:f2:19:37:db:a4:
bd:5d:39:6d:6b:67:63:4e:c1:a6:14:93:bd:ea:c1:
fe:c2:98:ce:2d:21:f3:20:b1:3f:32:04:76:57:01:
43:ca:da:3c:67:34:92:5a:31:f5:6a:4f:57:1f:b6:
5f:31:da:99:f7:6b:c1:8a:75:9e:f6:2c:ea:c0:c4:
3b:f8:ed:2b:de:78:fe:42:1e:75:b5:d2:92:d7:3e:
d8:99:6b:8b:26:9f:3a:13:99:ee:68:0a:08:42:98:
d2:79:4c:58:37:a3:4d:93:ce:9b:bb:d3:6d:4c:6f:
00:1a:a7:07:1f:a9:29:c6:f3:bd:4f:54:39:82:3c:
b0:1b:58:66:7d:d0:28:27:c3:e6:1a:a7:43:b4:99:
57:81:42:10:47:d4:84:99:26:79:da:6b:1a:6d:6e:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7d:c2:9f:8c:67:44:d8:be:e6:f3:fe:b5:69:94:db:18:d8:
93:65:61:ca:89:02:9f:ed:b3:bd:f0:40:3a:97:da:ce:7d:7a:
19:b2:f2:51:3c:24:97:4b:62:2b:b9:5e:17:be:19:91:ea:e5:
55:35:da:27:40:37:f1:3e:5b:98:b1:d2:ce:a3:51:67:fd:45:
05:89:78:4d:03:9c:c1:f5:9f:7d:bb:1b:cc:13:44:6d:81:55:
19:91:5e:98:b1:3a:bd:e0:61:dd:50:dd:b8:c1:f1:e3:97:d2:
c6:63:0f:b6:99:00:b9:c2:42:7c:70:86:df:f3:3b:fa:aa:c8:
6f:e4:9b:63:c5:85:08:0b:78:74:d5:40:bb:1d:b3:49:85:d9:
ce:70:da:e9:6d:5f:ed:56:be:57:54:2b:95:ac:e2:4d:3f:60:
ad:8c:ea:19:34:cb:2f:2d:4c:b3:a5:d8:05:1b:98:cc:85:86:
22:f1:d2:12:31:66:1c:13:89:43:c4:4d:c1:84:02:36:3c:28:
87:7d:65:2b:e4:35:10:7a:cf:f1:cb:41:fe:40:a9:7c:51:87:
a0:76:61:87:65:c7:4e:60:fc:cd:f5:71:8a:ce:eb:c9:13:cb:
73:1a:f3:e0:15:27:37:45:2c:95:6f:ea:82:82:54:99:9d:d3:
e3:c8:5b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:55:56 2025 by rpki-client