Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
File: RRblOzLKp2GQbw_N6idbcg4XQsg.cer (raw, json)
Hash identifier: hcJL92RkickY/jlCPtpbLNA7/B9pOd1T3mFvNchQh10=
Subject key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C3F99D8F28AA5C77B25C0F2CDB1C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.177.176.0/22
IP: 2001:67c:1200::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3f:99:d8:f2:8a:a5:c7:7b:25:c0:f2:cd:b1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:42:d8:d4:77:24:4d:db:4c:69:b3:c4:0f:
02:92:e8:ff:61:d5:7e:ce:12:29:e8:34:08:e5:52:
10:c0:79:b2:16:03:8a:34:64:e8:43:7f:d8:a1:ab:
b7:55:1b:52:ba:f5:90:36:f8:5b:af:9e:75:27:c1:
4c:a0:d8:64:11:de:d4:58:3e:88:07:c9:a0:f4:7a:
1e:22:b5:67:ee:cf:92:40:22:2f:87:e9:a0:3b:70:
fb:a2:09:72:c8:88:b6:81:2b:43:30:42:5f:d6:f4:
69:d1:5e:7f:24:b1:22:ce:54:c3:bf:39:e7:b2:7b:
b6:1f:a6:f4:75:e9:e7:c0:e4:93:c4:59:9f:de:9b:
58:1c:b8:49:6b:c5:ea:44:18:4e:68:c1:b9:0e:ae:
0e:e7:e5:9d:6d:ee:66:aa:f0:bb:ad:27:1b:86:41:
11:61:78:f2:6e:86:ea:f8:ee:80:b1:1d:6b:61:cd:
47:37:f3:6b:a3:0a:9e:2b:d8:64:2a:c0:3b:f6:43:
57:fb:f3:c9:f4:ea:8c:5c:a7:11:70:e1:fd:2e:23:
40:a6:7c:0a:d2:34:3e:87:e5:7c:a3:44:b6:78:93:
f7:b7:18:00:03:ee:7c:5d:64:ec:bd:48:96:2b:fb:
b6:98:ec:a6:f0:fa:87:3b:6a:79:ca:22:81:13:8e:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.176.0/22
IPv6:
2001:67c:1200::/48
Signature Algorithm: sha256WithRSAEncryption
7e:8e:99:91:5f:2b:33:8a:59:35:4d:80:b1:27:17:88:50:3f:
f5:62:4f:72:69:20:de:3d:07:a7:b4:07:dc:be:72:bc:15:6f:
31:c2:e5:ab:2b:ef:63:25:22:c0:0b:67:73:a2:d3:3f:82:4c:
19:92:62:6b:f8:dc:9e:30:44:75:e9:d4:fb:12:e1:9e:4c:1a:
20:ae:5a:8c:bf:09:ef:cf:34:92:5e:22:c4:ce:7b:8d:00:0c:
3b:aa:ee:3c:0d:d0:5d:04:5d:4a:6f:0e:d8:da:04:26:44:17:
bd:b2:c2:d4:39:41:10:16:ad:33:df:16:4c:6e:eb:24:11:5a:
66:2b:e7:04:5d:38:bf:02:e5:19:a0:ad:79:7b:0c:d0:28:44:
8d:9e:81:29:96:a0:95:80:67:27:75:55:7f:3f:02:18:da:b8:
49:c1:84:ec:61:c8:83:32:79:f6:1a:a0:a6:44:88:30:82:4f:
f9:8e:b7:e9:7b:ff:73:99:88:38:80:53:26:62:31:be:9e:6f:
47:80:7b:17:e1:d1:be:11:57:5a:32:65:49:9a:22:05:ca:e0:
67:0f:a8:14:9d:d2:34:dd:48:d7:94:23:e7:74:7f:25:a0:58:
e5:0f:27:4a:dc:1f:3f:89:b1:de:1f:68:08:ca:fc:3a:d2:02:
f0:b1:f3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:51:09 2025 by rpki-client