Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.cer (raw, json)
Hash identifier: ObZgDsfAuybqKzjhk6SjHKDjF8ws8qGPbpzLjpS7iNI=
Subject key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425218FC757498ECF0AAB871EF42180D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.110.118.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8f:c7:57:49:8e:cf:0a:ab:87:1e:f4:21:80:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:3a:21:f1:c8:0c:ac:0f:44:92:5f:60:12:
f8:0b:0b:ca:c2:db:92:dc:e3:38:72:ab:a3:15:c0:
4a:3a:83:04:c7:f5:93:14:99:0b:9c:af:88:e7:a6:
c3:22:e9:40:fe:af:f7:56:08:6b:0c:4a:09:ea:21:
34:3f:a1:c0:3b:56:48:b5:95:0a:43:84:66:a8:01:
44:d6:05:92:91:f5:49:fb:fd:c0:17:70:e9:21:de:
b5:e7:f6:ba:40:9b:f4:53:6a:6a:a9:17:2c:87:fe:
4d:c5:d2:55:f0:99:ca:e3:b1:68:6a:36:d2:bc:ed:
f2:ba:ea:7d:a7:2a:21:43:da:97:aa:50:5c:e8:c1:
b3:a4:26:47:2e:22:29:0b:49:ae:a1:f9:89:81:4a:
d5:cc:49:7e:33:4a:65:f8:06:9b:8e:f3:d8:04:eb:
c1:f5:fd:fa:d1:05:9d:82:f6:3c:37:a3:99:1f:26:
c1:d0:fe:17:ea:ab:1d:32:a5:c3:65:5e:e1:9e:2b:
36:6a:c4:51:90:c8:41:30:64:93:ad:1e:af:6f:8a:
e7:e1:36:db:47:52:99:33:da:f7:d2:ac:2c:37:c4:
8a:98:fa:14:87:6b:33:e1:a5:99:e4:a7:ee:15:c4:
84:b0:20:19:10:49:ac:66:42:fe:bb:46:a5:d9:85:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.118.0/24
Signature Algorithm: sha256WithRSAEncryption
21:76:e3:ff:65:f4:83:f8:00:91:80:13:58:b8:20:69:f4:a9:
ec:80:8f:e7:a7:f5:d5:c1:cd:bf:27:95:be:f8:57:c4:ad:45:
a1:30:b4:27:e0:38:36:41:95:d8:ff:bd:8f:63:67:bd:fe:11:
96:57:7d:d6:ed:cd:aa:57:1a:24:88:34:db:a1:ab:27:60:5e:
32:9a:47:48:eb:47:f1:44:4a:08:13:38:5b:f1:a4:83:16:75:
fc:5f:64:37:b4:38:3c:f5:c1:f3:84:74:b3:4c:6f:b4:31:1a:
dd:42:50:16:07:72:1c:32:e2:ac:2d:af:19:7d:6a:a7:30:59:
e9:b3:f5:05:69:a6:89:83:ca:64:71:c5:4d:cf:54:54:ab:9b:
69:c5:c1:07:53:0c:7a:02:10:84:b5:60:3e:79:56:52:9e:f6:
94:6e:90:6f:73:f6:71:d8:0f:6c:e7:f7:69:03:79:54:d2:b7:
93:a3:a8:66:bd:ad:e1:d3:0f:92:0c:88:24:ef:71:8f:14:cc:
f6:65:ac:bc:df:ff:29:44:7b:fc:c8:b1:8d:4f:8d:8f:38:70:
db:0f:c0:47:e9:ef:11:4c:22:ff:8a:50:22:d8:37:e4:ea:b6:
43:18:a5:ad:e6:36:ee:71:27:a0:56:f6:d6:b4:77:a2:c2:c7:
2c:ce:c3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:46:30 2025 by rpki-client