Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
File: _6vCNZX9gER9mPXsNRMWG9JHP8Y.cer (raw, json)
Hash identifier: tsdhQ6gQar8tsm1mJNJ0WfnuJKJa7hep5w7y8+0+BhE=
Subject key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6C6F6DA6717BAD322826C765862EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.222.252.0/23
IP: 193.223.70.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c6:f6:da:67:17:ba:d3:22:82:6c:76:58:62:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:be:dd:bc:ca:c9:9e:8c:c4:84:e8:d7:b8:9a:
b5:8f:d2:b5:e1:4e:fa:7d:db:95:b9:fc:63:7c:79:
34:c5:6c:68:99:b7:d5:24:8b:5d:1f:3a:4b:2f:d0:
e5:2a:ff:37:3c:a0:95:3d:fc:3a:e3:df:a6:c4:18:
1d:85:c7:7b:45:39:ac:91:99:b6:86:05:89:d2:1d:
54:23:81:cc:20:bc:8c:ce:29:d2:77:ad:a9:74:24:
01:f2:c5:ca:40:87:57:ec:77:18:38:5f:f5:79:6f:
a1:36:f8:45:43:b0:17:83:8a:15:22:7a:76:37:1c:
55:ba:03:8d:51:6e:1d:b9:b1:a0:01:fe:27:e1:65:
85:31:d5:0a:7d:3e:af:37:77:06:3b:7c:63:1e:2d:
bc:92:e6:5d:6d:1c:bb:f6:d4:49:bf:6e:10:e1:4b:
07:0f:b8:fa:89:13:47:13:5c:68:17:5b:f1:59:3c:
f6:45:51:78:5e:a4:37:e1:22:07:aa:bc:e9:dc:1e:
49:72:3b:7e:7e:fb:65:f1:65:f3:ac:88:40:d1:9e:
e5:24:13:9e:05:a7:75:64:80:a5:20:29:7d:bb:bc:
58:09:f0:63:53:1c:0b:e0:c2:0d:ee:a4:1a:31:af:
98:0e:04:e3:de:b4:e1:73:e6:54:e9:41:44:d3:25:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.252.0/23
193.223.70.0/23
Signature Algorithm: sha256WithRSAEncryption
10:55:22:8f:45:de:21:cf:a4:51:65:0e:aa:d7:a3:a1:c3:4c:
24:28:7d:a4:ca:98:83:43:f8:1b:0d:a7:d5:33:56:f5:45:88:
a2:80:f4:74:65:7d:c4:1f:aa:92:3b:c7:2e:cd:23:c8:33:1f:
d7:54:61:53:bc:2f:f2:b7:64:e6:b0:89:99:ad:b8:a4:3c:ca:
76:0d:2a:56:f3:7c:8c:54:d7:65:2c:af:e1:20:7e:c9:db:aa:
20:53:73:fb:c0:10:a4:22:63:2e:1e:d9:30:28:a7:53:b6:b3:
e9:40:a1:00:2d:29:88:a7:ae:b8:3f:9b:1c:e7:80:e9:c6:47:
df:05:e4:de:64:9d:d5:79:79:88:21:63:9a:bd:46:3b:6d:4f:
9e:4c:1a:eb:48:e9:69:37:a9:73:49:43:dd:e0:cb:ae:be:45:
48:d5:ac:58:32:b1:e6:98:aa:6c:65:99:fe:b7:53:bf:f5:a3:
27:ee:c4:c2:b5:7c:27:71:91:6b:ac:e1:d4:6a:98:64:9a:16:
2d:74:ed:e6:f5:f7:78:fa:99:fb:6b:5f:d8:dd:5f:b9:22:08:
ef:cd:0d:b0:82:1f:06:6b:24:ba:59:4c:6a:2e:4e:53:90:e4:
02:43:0c:15:96:a1:74:44:ac:6c:9f:df:d7:2f:8c:60:af:d0:
f4:ec:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:34:25 2025 by rpki-client