Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
File: U3h815RuENiGRqx53lfMbsWeQTI.cer (raw, json)
Hash identifier: J15Zyc3nn6uQuH15mnWj3VjrRBa4ejb21pzcVsrNz6w=
Subject key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB5E49CB9C6C04756A1CFCD508A728
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.54.124.0/22
IP: 2a01:bde0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5e:49:cb:9c:6c:04:75:6a:1c:fc:d5:08:a7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e9:a2:e7:41:cf:d6:db:89:c9:fb:b8:5a:27:
cb:5d:95:83:fa:b6:1b:34:ac:48:ae:42:9c:58:74:
43:bf:bd:9e:61:94:f6:33:24:44:bc:b8:b4:9f:38:
51:d4:b0:62:9e:04:dc:52:21:e2:94:0d:5f:6d:b2:
d0:ca:37:c7:d7:1a:13:5e:e2:c9:4d:0d:18:0e:26:
09:fc:85:19:b6:7b:35:3b:92:5b:b1:26:35:0c:c5:
51:ad:b2:43:f1:db:eb:52:36:03:c0:fa:42:62:b8:
ee:94:eb:db:27:c9:1a:83:40:39:15:c2:49:a0:88:
d8:d3:72:4a:d0:94:f1:5c:a4:3b:02:ec:04:e4:96:
4c:7c:a1:0d:ef:15:c9:27:5c:a1:ee:3d:ba:f7:d2:
b8:6a:de:ac:99:06:62:fa:4a:5b:46:2a:19:bd:87:
29:af:4a:6f:ef:85:1e:97:3f:e5:bc:00:f1:6b:1d:
61:25:b4:e9:7b:a4:40:69:85:1c:26:0f:ac:96:f3:
be:3d:d8:7b:48:52:95:53:23:b5:68:41:68:22:f6:
d8:ca:74:f3:3c:5c:7b:6d:67:96:86:aa:2c:64:69:
21:24:c9:5d:fd:df:1f:45:24:8a:ef:5b:a3:60:32:
fa:cf:81:dd:ba:79:c3:44:18:7c:ea:20:e8:a1:28:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.124.0/22
IPv6:
2a01:bde0::/32
Signature Algorithm: sha256WithRSAEncryption
38:51:3c:86:f6:29:27:91:b6:41:31:73:3c:33:a4:ad:61:0f:
ad:93:78:2d:0b:b4:07:90:3f:6f:3b:20:0a:13:5f:d1:7c:93:
69:d0:a7:8d:ad:c7:cb:b1:c6:84:62:03:b8:1b:4f:51:3b:e0:
79:8f:95:cb:ea:75:e5:19:72:69:58:1a:5a:af:88:39:d7:c4:
52:58:ec:0f:a0:c2:3d:68:4f:2f:9f:5b:f9:42:aa:dd:75:6e:
e1:cb:91:7f:c7:7c:65:d2:e2:a6:f0:83:ca:fa:37:76:d1:28:
b3:9c:1a:a0:05:8b:bb:1c:b8:07:71:05:5c:0a:e5:09:86:d3:
12:b5:fb:8b:c7:0a:14:08:f6:1e:c6:48:ff:69:ae:cc:76:b5:
3c:92:ac:46:57:3d:bd:44:e7:81:c7:47:18:76:91:b8:cf:b7:
7f:f9:ec:52:dd:77:0e:8d:89:71:5f:83:e5:97:b5:9e:89:24:
8a:b8:72:73:e9:40:14:c3:98:d3:29:ed:8f:5a:18:c7:0d:4a:
49:52:e2:72:e7:1f:2d:1b:99:e9:2d:24:d5:34:b0:95:01:fe:
e5:9c:83:34:2a:4f:2f:25:7c:76:7b:d2:64:15:9d:99:57:98:
eb:fc:19:67:84:1d:cd:0a:54:44:ac:e4:36:33:4e:68:99:27:
a9:30:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:04:41 2025 by rpki-client