Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
File: S1ejnbXHqja-gs11HlDLkCMDPco.cer (raw, json)
Hash identifier: OuKBNN6juAG03XOmEOmHPM7iiV6exrmaccszJItBgvQ=
Subject key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194DF699942B7601BB4FD221DEA1BC15937
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 07 Feb 2025 07:57:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.31.10.0/24
IP: 193.39.250.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:69:99:42:b7:60:1b:b4:fd:22:1d:ea:1b:c1:59:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 7 07:57:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:43:96:34:21:57:ff:91:b3:df:79:d5:c5:
e5:11:96:38:36:d7:a5:12:70:9c:31:5d:94:63:c0:
67:04:d1:df:a3:c1:d0:9f:8d:00:54:ac:e3:ec:04:
76:1c:2b:ce:65:33:95:0c:63:2c:52:23:d1:88:77:
8d:98:81:2a:e4:5f:c6:03:a9:68:b9:59:8a:43:84:
60:18:0b:bc:b3:f0:79:ed:30:62:1b:14:6d:56:c3:
37:98:fd:10:7e:41:ac:65:b8:6d:03:20:70:5f:42:
36:5e:81:11:cc:45:11:9f:8f:d8:36:c5:33:7b:0a:
4f:f3:09:30:7f:0a:08:fa:b5:f7:89:90:fa:17:ef:
76:cc:88:d5:56:f9:61:1b:00:52:1d:88:fb:bd:55:
12:21:f9:6f:18:44:ce:85:4e:a1:b9:87:23:11:67:
31:8c:b5:91:b2:57:64:4e:26:a6:82:cd:01:1f:38:
61:64:41:2b:86:25:c5:1e:5a:3e:42:00:7f:fc:ba:
49:5a:d1:6c:f9:4d:6d:7e:89:c6:76:40:bd:b1:2a:
90:17:bb:cf:a2:ee:11:31:34:6d:b1:d4:c8:be:a4:
bb:ef:59:49:ee:92:35:05:78:9c:30:e5:02:62:fa:
b3:d9:36:93:9d:b2:e1:e5:d5:b5:4c:7f:61:94:93:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.10.0/24
193.39.250.0/24
Signature Algorithm: sha256WithRSAEncryption
12:9c:43:f0:f1:01:bf:0e:26:ff:c9:9d:95:7e:df:42:94:ec:
04:36:38:18:26:1e:a0:ee:ef:3a:4f:20:40:18:9a:8f:79:49:
34:55:ef:6b:87:b0:e4:7d:c0:07:3d:20:59:34:dc:d1:38:69:
9c:63:90:42:e0:71:cf:82:1a:41:83:b4:95:b1:c5:a5:90:b1:
35:4c:19:de:9f:ab:79:be:1d:b8:c9:52:47:93:00:16:d3:66:
81:bc:e5:d4:4d:d7:6f:80:67:02:fb:5b:72:0d:c7:12:5d:67:
65:aa:fb:ca:3c:e5:cd:25:3a:5a:ae:94:92:69:75:6a:32:56:
f9:79:d3:f3:ce:40:39:76:54:41:70:de:41:a4:6a:c8:35:78:
d1:17:da:a7:f8:09:d1:1b:2f:94:c1:58:9f:91:a9:47:67:78:
4d:be:b0:fe:ea:56:bd:00:48:59:60:ca:cf:83:2b:24:f6:b9:
e5:08:0e:98:7c:05:e8:07:59:1a:06:25:8e:49:c5:52:4f:a5:
3f:fe:3e:7a:6d:1e:cc:a2:58:f7:7a:0b:9d:dd:a5:c2:1d:1f:
5f:50:a5:61:80:b5:58:60:7e:74:2d:fa:8d:5d:b8:47:ab:05:
46:dc:f8:47:65:ea:10:22:b0:03:53:56:5b:5c:ec:dd:fe:fa:
d0:05:43:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:30:44 2025 by rpki-client