Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
File: ToWU69x9fPfaLgA8hNhqfBr4cbw.cer (raw, json)
Hash identifier: FsXG1mu3NMcBafNnf8xoawnuurFBbSfwVT8HxfW/kkI=
Subject key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BA0CA70F360ACAD9B7840823EFC90
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.155.72.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a0:ca:70:f3:60:ac:ad:9b:78:40:82:3e:fc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:0f:66:29:b0:fa:02:93:5c:86:74:b4:de:
a7:1c:10:d7:c5:1b:64:c0:94:f0:2e:8c:6e:2e:12:
d3:1f:51:4a:50:9d:3b:85:f6:81:2d:27:ae:97:df:
95:c4:5f:29:cb:77:ab:ec:02:8b:d6:39:cf:ef:fc:
71:80:51:16:e1:7f:07:95:7d:46:41:2e:1a:13:78:
07:92:b0:c8:fc:4b:95:25:59:95:d5:ad:1e:08:85:
e8:5f:b8:c0:f6:9e:57:ad:ec:09:1b:34:44:3a:e4:
25:71:38:dc:82:72:85:fa:ba:2a:9b:8b:a7:d2:50:
7d:56:5c:ee:3e:0c:8a:5f:61:b9:17:6f:ac:27:0a:
04:e6:92:06:ea:c0:04:58:c4:bf:16:e3:36:e4:bb:
24:40:d1:ac:c4:37:df:f8:c6:cb:a4:d9:fd:4c:0b:
e3:46:81:52:2d:d8:54:24:39:9c:11:44:3d:21:41:
5d:b9:97:c6:06:f3:4a:1f:ad:22:01:18:94:29:57:
36:06:77:72:11:f6:85:e4:a1:f7:28:e5:d6:83:c9:
af:ce:48:4f:6d:d0:2a:56:9e:d0:f9:cc:1b:83:9b:
01:b6:fe:37:92:32:cf:99:6b:48:cf:25:b9:70:4b:
a3:9e:6a:b3:af:74:ba:3e:37:ff:54:0f:de:46:be:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.72.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ed:5b:43:b8:08:6f:0a:4e:40:24:a3:b8:46:cd:ba:03:d7:
0e:20:8e:9c:e4:fc:8f:8a:0a:d7:09:67:3d:7a:7d:25:e6:2d:
21:2d:a9:1b:a4:e2:99:29:9d:0f:0b:a3:82:67:a2:90:bc:16:
22:31:2a:09:cb:94:91:e1:68:7d:02:d9:9c:fa:cf:59:c5:4e:
70:e8:55:63:f2:50:7b:5b:6a:90:16:95:84:74:7c:bf:3c:2b:
3a:8f:57:e2:52:af:46:50:54:99:47:8e:0c:3e:44:c7:ac:85:
c6:8f:96:98:0f:c9:59:f1:9b:e9:6a:4f:b3:11:97:f2:b2:2d:
ae:e8:6a:9d:d0:d3:33:23:4c:44:57:e1:00:a7:33:47:91:fb:
f7:75:0e:5f:4c:f5:4b:12:18:0f:89:40:09:a1:cc:24:da:a0:
bc:57:a3:b1:f9:b6:26:0c:4f:6c:67:bb:e4:3e:4e:89:88:25:
cc:a0:83:ad:0a:73:e5:ba:f0:3b:10:82:58:b0:bc:e7:b5:cb:
a3:4b:24:7a:20:a2:c5:cb:51:79:27:1f:d0:d1:40:b9:5a:e2:
90:84:88:90:bf:2a:da:ed:73:bc:03:8b:fd:37:84:6e:0a:d0:
0e:5b:54:bc:4f:56:0d:5c:5e:94:1b:a8:e6:c7:d9:a4:f1:36:
81:22:98:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:40 2025 by rpki-client