Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
File: QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer (raw, json)
Hash identifier: 8sFPasNRyAUtA06hx1UAMzvL8hWFJTLEwPbpvaervqw=
Subject key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019633528DB0B367541A0207E92D2B55B7B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 14 Apr 2025 08:02:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.242.6.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:52:8d:b0:b3:67:54:1a:02:07:e9:2d:2b:55:b7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 14 08:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:b5:58:87:98:fb:b4:12:05:9a:4d:ce:54:
e0:e2:ef:f2:7f:6d:40:c7:e7:35:4b:ee:1f:57:c7:
4a:60:00:5e:a7:91:02:ba:13:04:36:0d:a5:3d:35:
3b:a5:b6:ea:26:20:a8:99:3f:27:4c:fb:dd:b8:b8:
f9:78:e8:1d:8e:88:9f:7d:2e:21:51:88:19:54:a2:
cc:64:58:08:ad:41:c8:6d:3f:3e:17:85:ca:7b:61:
ae:a8:d8:f4:96:62:9a:3c:6b:c5:eb:cd:4f:50:e3:
6c:09:1a:45:e3:7f:79:74:10:df:70:da:71:0b:96:
a1:fc:ad:97:5d:c4:73:10:6a:f1:00:14:35:04:ec:
bf:7a:2e:66:5c:9b:1d:ec:1f:81:b2:2a:b3:48:65:
23:d8:12:0b:b2:03:25:21:4f:43:83:2f:23:46:49:
ca:d9:b5:e5:21:35:fa:d5:19:c2:51:ff:40:a0:42:
2b:71:fc:f2:6a:c8:75:ab:17:85:95:1a:33:00:81:
e4:67:b5:cd:2f:12:e2:47:af:e6:48:be:c6:14:f0:
65:ca:1b:57:a6:49:90:be:eb:67:04:27:85:fd:d6:
d9:f0:52:cb:40:17:0b:98:cb:13:a0:0b:51:a8:00:
05:d7:c2:68:0a:f9:e0:6f:d1:a8:29:6e:90:0c:51:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.6.0/23
Signature Algorithm: sha256WithRSAEncryption
07:c7:9b:f0:2e:a8:66:72:1d:fc:89:eb:ed:44:92:8c:62:f9:
97:4d:c1:83:49:4d:38:d5:90:a7:d9:a6:2e:e1:02:dc:dc:21:
93:fd:e1:22:33:28:80:e6:dd:31:d0:9c:c1:65:de:b0:26:e6:
f2:42:7a:f3:ce:23:42:97:36:01:f7:99:c3:84:6b:ac:67:f0:
e7:27:8f:bd:dc:1a:2b:67:f8:cd:a7:9b:d2:00:e9:8c:c2:8b:
e4:9c:32:40:c4:a6:cd:30:2e:10:15:c7:f1:b0:7b:e1:8b:31:
c3:c4:27:a3:ae:75:3f:36:50:a3:df:3c:51:62:fb:9a:e3:fd:
5e:ed:02:87:e6:d6:93:ea:3c:ee:da:65:80:b2:33:77:09:86:
be:f9:36:d4:54:91:d1:3c:f4:e6:c5:ee:82:46:9a:f9:5f:b7:
ab:88:e9:27:3e:63:49:db:05:c7:f4:67:c3:26:89:c8:14:9e:
a5:27:de:22:e0:c3:14:45:b4:67:ff:aa:88:12:0d:15:36:aa:
c4:e3:63:cf:20:54:c0:66:a3:b0:92:a0:f6:76:cb:43:4f:20:
72:8c:58:c4:30:55:cd:04:b9:c7:73:04:89:91:cd:cb:54:9d:
2a:03:f0:14:a6:36:11:f6:81:fc:1f:c7:b3:05:bc:6e:dd:93:
9a:24:88:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:34:53 2025 by rpki-client