Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
File: aBnbgbSauhKxgQyzopnu5GMt1yA.cer (raw, json)
Hash identifier: +xU6l6nlaxGzQcOiFNd7FavwKjWSn4Hi3BEcEYbOAHE=
Subject key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194CBADBB80E4C6692CC07D33068D0DA793
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Feb 2025 11:59:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 161.42.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:ad:bb:80:e4:c6:69:2c:c0:7d:33:06:8d:0d:a7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 3 11:59:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:21:b7:3c:47:8b:fe:11:24:5d:cd:be:b7:
7e:c7:b7:26:2b:d9:b3:f9:d5:46:ea:eb:a9:77:6d:
ee:03:0a:4c:ea:82:27:4f:a6:de:66:9a:ec:71:22:
e6:e4:7f:1b:81:e7:bc:75:b2:cd:13:be:61:01:c1:
a8:71:90:54:74:bf:f8:27:34:90:72:e7:b5:2a:66:
1f:25:16:57:6b:7c:d0:85:1f:78:3c:d5:42:a3:bb:
46:15:08:1d:60:91:64:f5:c6:4a:f6:97:88:09:ba:
e5:13:b5:4e:e1:0f:24:8f:79:36:5b:67:2f:07:2c:
e8:4c:2e:07:e9:d1:70:9e:9b:93:d1:5b:af:12:97:
2b:67:72:61:ec:36:a6:5b:4a:3e:f4:25:b3:74:eb:
78:33:d7:2b:5d:2d:1e:86:82:b7:b0:67:bf:93:07:
29:80:bf:ff:61:47:85:1e:33:0f:4b:d8:cb:30:d5:
f5:5b:ce:f9:f9:51:d8:4e:28:ba:03:4c:de:41:57:
59:36:aa:62:dc:39:08:2b:4f:c2:52:d0:29:2a:50:
2a:cb:d2:ce:b1:4c:7f:19:19:02:c8:9c:16:42:73:
12:a5:45:6c:dc:fe:8a:50:e3:15:70:f0:eb:a5:02:
b1:87:a0:c9:f2:55:fa:18:6b:82:7a:62:d6:5c:b9:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.42.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:e9:80:24:16:71:f0:0b:8a:09:70:d8:1c:49:fc:0c:cc:6a:
35:ff:78:f0:00:7b:76:9c:2b:43:17:41:3d:7f:19:12:b9:b3:
50:b8:eb:f5:c0:d6:5c:68:97:79:8a:a1:d2:b1:e8:ba:e9:2a:
b2:c2:50:bb:bd:df:48:54:e7:14:d1:9d:e6:ae:64:a7:e1:71:
92:eb:f1:de:41:66:79:58:89:0f:cd:4f:03:c3:4b:55:93:9f:
41:9a:e7:21:57:d0:51:b8:ca:05:34:7d:41:78:cc:91:eb:53:
54:94:19:4a:91:ef:d6:e1:c0:ed:d6:f5:ab:4e:6a:54:a9:b5:
e6:31:73:fa:96:a1:f1:63:b1:87:3e:5a:89:e2:65:e6:5e:a2:
0b:fd:bc:07:7d:0b:47:cf:db:cc:ac:28:0d:15:1b:7f:a6:5c:
ef:28:35:14:6a:9d:e8:a9:1c:e2:42:45:02:09:27:83:1d:d3:
70:de:4f:9f:1e:ec:c4:b5:b1:c6:b0:56:c7:53:f4:3f:a8:a3:
a4:84:ac:1c:90:f5:64:07:b7:bd:73:cd:1d:4f:38:8e:ee:54:
61:f6:cb:e2:0f:b3:d5:90:a3:cd:1b:45:9f:97:b6:89:97:8d:
d4:36:ee:a8:78:65:1e:21:b1:68:8a:47:65:13:51:5e:ef:f5:
87:fd:0b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:30:09 2025 by rpki-client