Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
File: YmC2AROb4BNWnr-OG-taaUuch-w.cer (raw, json)
Hash identifier: u5I3gywrwOIvmtcF5I7tds6SNto62Q1ruRqJ8WxZu6Q=
Subject key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423696B9169DA86C3E2D68FFA6A9C36C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.203.116.0/22
IP: 195.5.174.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:6b:91:69:da:86:c3:e2:d6:8f:fa:6a:9c:36:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:26:6c:83:9d:45:51:1b:48:35:cb:66:62:
a1:1a:ce:da:32:20:28:08:9a:48:77:0f:1e:28:13:
3e:82:bc:7f:57:75:1b:38:d2:50:78:01:05:94:ec:
e3:0a:72:35:77:d1:4d:9d:34:7a:72:ac:8a:f7:ae:
57:f7:ff:62:c4:96:8a:bd:64:94:11:27:59:8c:ab:
9b:f2:f9:ca:7f:f4:dd:4e:41:e9:42:d3:b1:af:1d:
63:40:ec:2b:05:52:d6:1b:47:d3:23:a0:5f:0d:5e:
cb:3c:8f:c8:5d:58:b1:de:5d:fa:c1:5e:cb:75:4e:
6a:d5:c9:24:1d:00:7b:49:ae:a4:7e:ce:d1:01:aa:
fe:35:36:9d:97:c5:32:4f:1b:09:93:ae:67:fe:39:
77:46:2b:78:80:3d:05:bb:29:3d:97:d5:99:af:15:
dd:f8:5d:5e:2b:13:7c:95:0d:bd:1f:1c:eb:02:09:
35:d1:00:49:a8:7a:57:3f:3c:04:a2:93:d5:c1:c7:
cd:a6:9f:23:73:94:58:46:dd:8e:ea:a3:bc:f7:75:
e2:c1:d0:5d:00:a9:91:9f:1e:33:95:5d:5c:26:77:
ce:fe:f1:42:bd:94:fe:45:64:f2:9c:a2:ac:8e:24:
84:3f:67:7d:27:1e:4e:6e:53:a5:bb:be:52:26:21:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.116.0/22
195.5.174.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:10:2b:9d:1e:6e:74:c7:8f:39:3c:db:2c:fe:de:65:5f:22:
9f:2a:92:69:33:d6:e3:7d:8d:35:fc:f3:2c:cc:67:0d:90:b4:
c1:fb:a5:f4:76:e3:d7:d6:23:94:7e:0c:95:1e:34:06:68:fe:
f6:da:a1:43:99:d4:62:e5:56:e6:a2:a9:1c:1d:ba:3a:3a:2d:
7d:c7:f9:c5:aa:49:f4:d1:1c:9e:13:99:b0:80:ce:67:a4:e4:
b3:21:df:9a:dd:38:02:87:22:ed:7b:82:5b:55:02:5c:15:01:
9b:eb:d5:6c:d3:7e:28:76:d2:bb:e1:bb:55:5e:35:03:68:68:
88:d2:5d:34:28:dd:68:9d:24:e5:69:16:59:8d:7b:41:ce:05:
b9:52:86:60:43:5a:41:2f:81:90:60:a9:7d:78:d9:80:32:84:
14:94:99:27:a8:e7:a1:0e:aa:43:33:2d:fc:b9:57:20:94:f4:
ba:33:db:27:e8:3d:d0:ff:58:db:f4:7b:45:17:bc:a8:dc:ea:
d5:c3:74:42:4a:5a:83:fc:97:76:53:09:97:17:47:cc:1b:00:
b5:a0:84:f3:72:28:18:ae:bb:84:7d:27:45:86:9e:12:bf:4d:
4a:19:ce:b9:95:ca:02:c9:5f:bd:7c:ac:3c:2b:33:b9:8a:ed:
5a:39:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:01:15 2025 by rpki-client