Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
File: RWF9LghjWN2nvbDcRmyhyG7U_so.cer (raw, json)
Hash identifier: 3GJpe7rkayJLaV8usvrxZ5TK5a8B+0pI09CrykSJua0=
Subject key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F3A87AA0C9D224756C0D7166890B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.2.220.0/23
IP: 2001:67c:1508::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:3a:87:aa:0c:9d:22:47:56:c0:d7:16:68:90:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:f7:c6:15:c5:a1:39:96:e5:6f:c4:3c:61:
f0:81:05:ec:05:0d:92:7d:bc:c8:5e:0c:05:f6:2c:
22:6f:ff:cb:27:76:2b:06:9b:f0:57:85:ca:b8:cb:
94:fe:f4:97:64:6c:f6:df:34:3c:b9:28:ce:81:e5:
b4:b8:6b:57:3d:0f:fc:ba:84:6b:dd:1a:48:e9:92:
a2:35:36:58:72:44:6e:6a:d0:b6:1e:4f:ec:d6:0e:
3a:09:fb:6d:e7:e3:c4:08:13:9d:4a:08:58:2e:21:
55:c3:33:e0:12:f5:8e:17:53:1b:a4:b8:36:84:be:
84:ef:80:31:ec:f4:d6:eb:be:2c:cb:ee:36:18:66:
1a:f6:9b:c1:39:e0:93:15:15:ae:bb:b6:71:e6:97:
44:5c:c1:46:1b:0a:64:ad:47:03:ce:e6:d9:77:1e:
e3:c1:b2:1d:02:e6:5d:63:6d:fd:12:c8:2c:06:d8:
0a:ef:3f:66:64:5c:0a:64:93:36:42:e8:c3:51:71:
6e:04:a3:d3:01:77:11:fd:63:36:f7:d0:d9:31:33:
ea:ed:b2:e1:bd:04:8f:a0:cc:18:04:46:0e:40:79:
9b:e3:41:4a:d7:03:a9:7f:09:e5:f4:26:79:88:8f:
a6:29:0b:8d:de:f6:0f:dd:a7:8e:e8:b1:33:23:82:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.220.0/23
IPv6:
2001:67c:1508::/48
Signature Algorithm: sha256WithRSAEncryption
63:c4:0b:46:41:24:66:57:58:3c:fd:88:4e:bf:0c:e4:17:d6:
de:1e:2d:65:32:56:96:cb:67:63:3d:94:a3:f1:28:72:06:72:
24:e8:23:3d:f2:89:70:9c:7d:74:a9:22:bd:47:96:d6:06:c5:
10:65:9b:a8:8a:fd:f7:0f:51:e1:ad:8f:3c:6e:d9:04:d1:ba:
9c:91:df:84:05:42:2f:a0:5a:95:d2:c1:f9:1c:5c:cb:b3:b0:
86:31:30:2c:34:2e:f0:a3:95:b5:bf:6b:bb:af:3a:94:02:54:
9d:1e:8b:fd:36:58:33:2c:09:c6:fa:1e:e1:9f:2f:dd:03:07:
70:48:3e:71:d6:a2:e8:58:ee:7f:50:9e:45:2a:3f:42:af:e9:
db:9e:73:d8:1d:01:47:cb:34:a3:0e:75:ac:39:ca:6c:2d:86:
df:74:d6:87:a6:a2:7b:bd:31:a8:8b:c6:5c:95:c9:b2:fa:a6:
9a:81:11:2f:04:78:35:de:5c:4f:eb:e6:a2:a8:4d:8c:2c:93:
70:64:a7:8e:9e:bf:30:13:ac:c7:d6:20:49:00:2c:33:fc:00:
fe:b5:ab:b8:fd:3b:cd:ad:c5:1d:2c:93:7c:b3:2e:39:ad:0c:
49:47:39:a8:cb:73:79:51:3e:ae:42:3b:29:64:3a:87:63:06:
00:14:97:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:20:44 2025 by rpki-client