Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
File: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer (raw, json)
Hash identifier: pYWbYyl/+R2Be9ViKW9BAYD3vDfp/pti0YPEP5ARYus=
Subject key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDA8F209BCF21C5C458E90B93DCDAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.200.86.0/23
IP: 194.0.246.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a8:f2:09:bc:f2:1c:5c:45:8e:90:b9:3d:cd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d5:f2:60:7a:6a:02:dc:12:b7:89:c7:30:e3:
57:d0:5a:de:02:e0:af:d7:77:45:27:6c:a7:05:80:
73:20:fd:d8:86:d2:fe:87:f7:e8:1c:a5:9f:22:89:
55:7e:04:2e:f4:e4:9b:1a:68:6f:1e:03:c3:79:54:
87:b7:ec:b1:94:65:0d:63:83:59:07:51:38:52:e2:
a2:bd:d5:8f:f8:d6:0b:ef:b1:bb:7b:80:56:c0:97:
a8:71:d4:55:b7:21:0a:25:2c:3a:ce:31:51:0b:51:
b0:5a:b5:a3:4c:6b:f7:a2:b1:b8:e9:f8:d0:d8:80:
26:a1:9c:55:9a:dd:e9:bf:58:da:12:34:44:63:f9:
e1:90:9b:47:61:28:96:e4:7f:7c:95:8e:fe:66:2f:
26:c5:6f:b2:67:13:20:2b:df:a0:5b:29:d6:88:f4:
f1:cf:d8:2c:cf:4b:7e:68:8c:63:4c:a2:27:09:02:
7f:51:bd:f1:fd:77:4f:32:83:af:46:5b:84:4c:51:
6a:a5:d3:27:45:9a:7e:87:96:5d:ef:e4:92:b1:27:
7b:99:39:c1:bb:31:f8:ea:54:4f:14:65:24:c9:68:
41:e8:fd:c6:4f:a3:bf:c8:22:d8:fd:1c:d5:fd:3c:
df:06:44:e5:fa:fa:aa:cf:fa:f4:21:a4:f4:dc:68:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.86.0/23
194.0.246.0/24
Signature Algorithm: sha256WithRSAEncryption
64:91:15:ca:1c:97:af:5b:ba:ab:00:c5:29:87:05:55:07:3d:
7b:18:8c:0b:75:3f:4b:22:81:9d:11:4d:6e:13:ea:df:f7:7a:
9e:11:1a:56:89:73:b5:90:e1:44:a8:a8:fb:d7:74:fa:8c:5a:
dd:7a:e3:8f:5e:85:91:fd:6b:79:8f:30:c8:7b:9e:8a:89:c3:
cc:71:d7:a8:a3:91:4c:df:2f:fd:94:d9:3d:74:59:de:a6:06:
1f:2c:cd:16:b6:1f:34:05:1a:75:76:b4:2b:a6:18:d7:a0:61:
96:ba:41:75:fb:b7:41:b0:05:cc:10:c3:65:61:92:7c:5c:48:
99:8e:d4:5b:ca:ef:aa:33:a9:17:df:5b:50:aa:d5:5b:95:21:
d6:88:ff:8a:6e:c8:11:d3:5d:58:03:cf:14:5d:4f:7b:00:28:
b2:2c:24:16:d4:02:16:5c:67:df:d7:19:04:0e:db:8d:32:27:
a6:c1:f9:49:8a:99:bf:72:76:07:2b:df:b5:d7:25:b9:94:07:
a4:7f:72:bf:c3:40:fd:eb:46:52:15:e1:9a:ea:42:b0:f4:cb:
03:a9:17:95:61:f1:8e:d9:3f:06:f2:87:3c:a6:57:45:f5:a9:
b9:21:63:15:9e:07:6f:8a:74:cc:17:a4:ec:81:4d:c8:09:cb:
c4:df:aa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 22:09:45 2025 by rpki-client