Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
File: RehkjkRdzNDY7mmfUUC7gU5Drhs.cer (raw, json)
Hash identifier: 2yjFtEw8nhzYqO/tk4FkDBPi8Rt4d8ZQmrd+z/SI7po=
Subject key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195CBF4BFC122BD992B714A2E6330234A2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 25 Mar 2025 06:19:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48592
AS: 210134
IP: 77.81.76.0 -- 77.81.83.255
IP: 91.209.179.0/24
IP: 128.65.160.0/20
IP: 185.39.180.0/22
IP: 188.214.232.0/22
IP: 194.26.2.0/23
IP: 194.26.20.0/23
IP: 2a04:7d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cb:f4:bf:c1:22:bd:99:2b:71:4a:2e:63:30:23:4a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 25 06:19:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:ba:4a:ca:ad:a0:f8:7f:51:61:eb:25:11:
4c:f3:bc:c8:4a:96:3c:5d:cb:38:fb:ff:85:c1:14:
20:dd:54:49:ef:9d:02:dc:f3:2b:49:1b:bf:04:de:
3c:b6:42:0d:56:5c:be:b5:ff:0e:6f:8a:a3:72:53:
dd:8c:19:83:4f:8b:95:8c:c7:4f:05:54:09:9f:4d:
86:85:1a:92:f7:d5:01:6e:eb:57:80:75:0e:5f:26:
c3:1b:64:fd:14:33:ab:bb:78:c7:3c:ef:2b:ff:2c:
a9:d7:74:07:34:85:54:67:80:e6:a1:20:ba:ad:15:
46:58:3e:52:d0:3e:6f:91:8f:92:f3:d7:54:56:83:
4d:fa:f1:58:d0:29:46:8d:39:34:56:bd:48:d6:d2:
00:ba:13:70:86:40:02:7e:ee:cf:8f:13:fe:bd:93:
71:5b:ee:38:6f:26:bd:e1:00:8f:f9:0b:44:0b:07:
63:5f:d3:cd:16:b3:97:07:dd:34:12:20:72:8e:b0:
16:b1:0c:2d:aa:39:56:ea:f8:4d:19:8f:30:07:7c:
98:95:fd:12:0c:99:56:62:7a:0e:be:f0:57:cd:1b:
5f:bd:bc:56:fc:6b:a2:08:d5:09:da:91:8e:03:e2:
cf:a3:ee:60:8e:e7:e4:fb:39:1e:70:7b:60:97:2d:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.76.0-77.81.83.255
91.209.179.0/24
128.65.160.0/20
185.39.180.0/22
188.214.232.0/22
194.26.2.0/23
194.26.20.0/23
IPv6:
2a04:7d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48592
210134
Signature Algorithm: sha256WithRSAEncryption
5e:68:d2:af:10:a2:7d:bc:aa:dc:73:51:b2:1d:cf:6e:aa:92:
a0:2a:29:cb:18:ce:c8:74:6f:18:49:6c:0e:38:5b:7e:fb:6c:
4d:17:b2:3a:74:45:8c:14:1a:d1:5b:06:a7:e5:10:fe:f0:dd:
a5:65:5c:d1:b7:09:2d:54:9c:30:88:15:ba:b4:47:81:1f:dd:
bd:ad:f5:6f:32:5a:45:4a:8b:5d:1c:a4:a1:d9:41:a3:65:6d:
4a:1e:61:af:60:85:60:a0:59:5e:e1:04:d9:9c:13:b1:03:7a:
61:34:2a:72:da:93:22:be:9d:9f:4c:58:77:7e:9e:9b:92:b1:
e7:a3:9a:ad:bf:b2:b5:1e:fb:33:11:40:8e:30:67:af:e5:28:
a1:b4:82:bb:10:dd:0f:0d:ff:e0:41:db:fb:1c:e7:96:82:50:
e1:0c:ba:aa:9b:b6:0a:45:09:e5:05:26:d1:6c:83:e8:27:fb:
67:6d:1b:e3:c0:81:9f:3b:16:f3:9e:c0:fe:79:ec:1f:e4:01:
d8:bc:ae:a1:d7:36:8e:dc:78:27:fd:40:44:1c:d0:ed:1f:e4:
62:b4:9d:d3:39:82:39:44:32:70:0c:bc:b0:33:1f:af:e3:18:
19:aa:a5:54:92:b5:b1:ba:1e:28:66:6b:bd:7c:04:8d:28:6f:
e0:b2:a2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:02:19 2025 by rpki-client