Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
File: YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer (raw, json)
Hash identifier: 6yetsoWQGSG88UWyz+hVUTRZGXLLzStgGtwXjVe6NLw=
Subject key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C56528C02C133973C9AF0F1BF3448
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 159.60.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:56:52:8c:02:c1:33:97:3c:9a:f0:f1:bf:34:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:a5:83:89:94:45:1c:58:a0:ac:06:1e:0e:
5c:81:03:0e:36:02:60:40:1d:be:fb:f6:9a:f1:da:
40:66:25:34:79:6d:bc:45:8b:15:19:f9:c3:fa:98:
85:96:3f:79:f8:25:5b:c7:cf:91:bd:97:49:54:0c:
7a:ec:d7:b3:a3:27:9d:08:1b:11:f6:17:c0:66:5e:
eb:fa:a4:d1:f4:ff:f8:f4:4a:61:2c:27:6b:9c:b3:
3b:49:05:a6:a2:70:db:7e:c1:82:83:94:6e:f7:98:
81:3d:de:07:2e:83:5d:7c:ee:e2:a9:0c:08:77:d3:
bb:a9:55:52:26:99:71:93:4d:38:3b:0e:77:2e:c5:
fc:0c:dc:ec:1c:2d:60:4f:6e:bd:e1:68:22:f5:1e:
65:ab:03:57:da:b6:56:7f:83:38:fb:24:4a:f3:9e:
57:e4:90:c6:10:db:f1:61:1e:95:8b:bf:5a:9c:ff:
9b:0e:3a:52:1c:26:70:b3:c3:59:6e:ec:b8:c0:c5:
81:2f:82:3b:98:94:b0:9a:f0:55:41:e5:56:6f:7e:
47:58:c9:fa:43:ad:c4:f9:48:2a:34:25:d6:8f:39:
01:fe:ee:08:6c:8f:4b:ad:71:95:d9:f5:b1:91:bb:
46:89:2e:6c:64:4a:f4:d5:15:67:75:93:6a:01:5e:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:32:ee:2d:57:2b:98:e6:d9:db:44:0e:8c:52:cb:96:bb:8e:
63:0c:c1:b3:e2:a4:79:63:ff:38:0a:e4:a2:50:85:c3:7f:60:
23:01:72:b8:9f:a3:6e:59:7a:8c:f2:c9:b1:05:33:b8:d7:00:
5a:c1:ce:f0:17:e3:f8:44:4d:7d:19:78:a1:c0:d3:ec:c9:b5:
5b:cb:9a:be:69:2a:18:f8:61:9f:15:27:4c:b9:0b:cc:e6:56:
42:a8:2c:9d:31:95:98:69:23:e1:8c:42:e6:63:ee:f3:64:8c:
61:68:05:e2:0e:cc:d0:be:6f:a5:94:5b:0d:fc:a4:e4:63:ae:
42:5f:2e:a6:31:5e:0c:bb:83:37:20:27:b8:77:79:e3:eb:2b:
d9:a9:76:36:c2:92:7a:ce:30:8d:e4:f7:5b:6d:f4:fc:06:c0:
c2:f8:7f:df:53:47:33:b1:57:bf:fb:62:9c:88:24:53:62:ea:
75:d6:f7:89:bb:72:19:2d:e4:2a:cd:2b:3a:5e:5b:60:75:34:
57:88:3c:13:a7:d2:6e:b9:f2:41:0f:14:da:0c:a2:f1:69:c5:
b4:cb:dd:bd:66:58:70:42:4e:2e:ec:f5:ea:61:58:71:2a:78:
9e:6f:2f:3d:ce:7f:af:28:3c:df:a5:c8:28:a3:0f:4f:2c:b7:
f2:bb:e0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:31:03 2025 by rpki-client