Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
File: RQxYEkixGuKkb1UuXKQ8adZecqg.cer (raw, json)
Hash identifier: 0r9QeAwAaQcV3SKznxCc/2AGwgo/O/gpA83sMRtcCIc=
Subject key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E392DF2F6FBA789003D7A80D41B0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15363
IP: 193.101.11.0/24
IP: 193.101.24.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:39:2d:f2:f6:fb:a7:89:00:3d:7a:80:d4:1b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:39:4e:97:b4:35:8f:48:60:58:78:86:92:
5f:d0:ec:37:19:28:63:c0:90:9e:f0:92:25:5d:73:
03:77:98:f0:13:97:6b:36:18:44:2b:6a:b2:4e:d3:
86:95:37:6e:fa:28:e7:b3:49:99:7c:f6:fe:52:5b:
d7:27:24:3a:77:98:b7:33:30:73:6c:9a:a8:ff:78:
56:b8:6f:8b:e2:b6:3a:bf:e4:8c:43:4e:55:ac:34:
b7:e3:26:62:66:e8:5d:57:16:8f:d0:33:c2:8e:04:
36:b1:1a:bf:b3:cf:57:fc:f9:fd:a7:76:89:09:c4:
9a:e3:08:e7:bd:5d:7c:a8:a5:70:8f:41:e2:94:d3:
e4:a5:0b:69:69:5d:b6:14:50:d9:c0:83:36:63:33:
2a:a7:48:40:3e:98:68:dc:95:f0:34:56:5d:a1:26:
3e:5d:e7:e6:9a:0e:00:1a:25:da:1d:ad:85:dc:05:
b2:47:d1:f8:56:b0:1b:ab:08:2f:95:2f:93:14:2d:
13:f0:45:1e:0e:ae:d5:e1:1e:6a:32:69:57:14:c4:
12:ad:fd:5b:21:92:d8:e1:42:2d:07:4a:69:c9:a1:
ae:61:58:5f:dc:74:bf:ff:1a:d6:3a:70:a4:9a:cd:
32:fd:d5:d0:11:08:ea:55:2d:a1:2c:1e:55:d1:e6:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.11.0/24
193.101.24.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15363
Signature Algorithm: sha256WithRSAEncryption
8c:78:44:80:82:6d:73:72:72:10:14:81:0e:59:2b:38:0a:2f:
37:ca:7b:b3:5f:7a:33:35:7c:c9:20:8f:66:2d:0e:a2:65:5a:
21:17:34:43:67:4b:40:29:9f:34:89:ef:06:c6:88:bc:e9:c8:
e4:ea:92:bd:fc:26:f3:72:b4:a3:ab:4c:a0:ab:6b:3b:23:ac:
f6:65:43:27:e8:e9:05:28:23:79:b9:4e:46:9c:1f:fd:09:23:
e3:e5:f7:0a:2f:1e:e9:6c:78:04:45:70:25:c9:d3:b7:ee:42:
a2:da:1d:f7:1c:78:db:8c:e7:81:49:e9:70:29:cc:4d:67:04:
2c:72:f4:a4:17:02:1d:cf:10:e7:a1:b9:b3:92:0f:33:39:e4:
a9:c6:b8:2f:d1:d1:1a:5d:a2:a2:13:48:9b:c6:fb:48:b1:02:
eb:3a:9f:5a:c0:c3:cf:9d:2e:6d:d6:3f:3f:32:fb:c7:93:27:
6e:74:1a:04:83:14:a6:11:a4:4b:2a:86:55:49:ac:7b:b1:05:
22:79:29:96:e2:5b:0c:88:66:84:23:0b:5e:bd:94:ca:60:69:
b8:52:f4:27:62:47:72:38:68:37:61:d4:a4:cf:28:39:8e:93:
68:fa:59:4a:65:98:4f:e9:78:6d:b7:ee:87:52:15:6f:6e:0d:
92:6b:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:42:26 2025 by rpki-client