Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
File: aDjbfmmRJ9pMHFpek_RPMCtihjs.cer (raw, json)
Hash identifier: 6R/VfC+Mcx/h4WfW1VXcxvY222sHNIhfkHgqDkeRWZM=
Subject key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7767DC24E631FB7BF7BAED265BE7E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.218.164.0/22
IP: 2a0b:d9c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:76:7d:c2:4e:63:1f:b7:bf:7b:ae:d2:65:be:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b9:0c:69:6c:bf:77:2d:d5:8d:1b:17:e2:8c:
e5:bc:93:8b:1a:77:e3:be:14:4e:89:06:0a:45:c4:
5d:6d:bb:d2:73:74:e4:b0:c8:21:2c:13:c4:35:2e:
f1:91:87:94:73:3a:af:06:84:fb:a8:a5:18:6f:5f:
84:b8:b3:d0:fc:6f:46:09:b9:f3:85:3e:d1:02:69:
68:67:0a:68:44:1b:9b:5e:25:03:bc:a9:c0:3e:19:
00:5a:cd:d2:d9:de:a1:4b:9f:6a:2e:46:fc:c3:6f:
dd:76:f6:b8:50:2a:78:7e:61:89:b9:c6:e2:2b:30:
f8:f7:5e:54:71:33:e6:8d:c1:3a:8d:82:3d:02:ed:
e1:9d:93:88:13:14:fc:8f:2e:c9:05:d0:f4:22:7c:
cf:3d:fc:ed:f3:cf:81:3a:29:2e:0b:e7:7c:0f:be:
ea:51:17:87:3e:6d:54:5a:9e:0d:2b:2d:e5:bb:fd:
b1:e5:68:09:d6:b6:8f:9e:09:57:ac:14:1b:74:e2:
41:96:cd:6b:be:4a:00:4f:96:3e:f7:d2:00:83:ac:
38:3a:d4:a0:22:21:1d:a3:e5:3c:63:93:04:70:9b:
98:4a:dc:9d:a3:2b:65:1c:79:8a:75:74:1f:50:6d:
d6:35:ad:31:6b:08:f2:36:94:4f:a3:04:5a:07:93:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.164.0/22
IPv6:
2a0b:d9c0::/32
Signature Algorithm: sha256WithRSAEncryption
5e:74:7d:2b:40:a2:05:f4:7a:55:b9:d1:ea:33:bb:66:ce:01:
a2:36:51:93:bb:6b:75:20:27:4e:23:dd:5e:56:a4:20:48:7b:
8c:69:df:e1:92:bf:4e:2b:3f:54:47:3b:65:56:a8:8f:cb:83:
a4:aa:d6:9e:98:25:e8:c3:98:d0:e2:ed:1a:8e:05:83:df:23:
5b:47:18:1f:b2:4a:f3:c3:bc:f4:5d:82:c8:23:89:e7:7f:ba:
7d:0e:4a:2e:ca:98:c9:fa:ff:9d:2c:91:0e:b4:aa:20:d4:3e:
db:27:8c:c3:95:45:03:3e:68:89:87:0e:c9:3f:e6:3d:4e:31:
93:df:f2:7e:ea:e4:22:a2:da:82:33:59:8b:ca:b1:09:2a:70:
d3:96:45:95:f2:3b:07:d5:ea:8f:b1:47:1e:ec:f2:32:ec:32:
be:68:24:d0:fc:0b:69:5e:a1:d4:9d:ff:e4:e5:2a:37:d5:c8:
75:e0:3e:23:55:f5:61:f7:4c:50:a0:ab:cf:f5:44:a1:f1:7c:
7a:f7:e4:aa:f9:79:f0:18:ee:6d:b0:ea:e6:df:60:7a:89:8d:
f3:7d:ec:2f:3b:1c:3d:fa:0d:ce:09:55:9c:9d:59:13:77:02:
21:73:cc:ac:63:36:8c:9e:9a:d7:b0:d5:5b:55:4b:2c:f2:3f:
d6:b5:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:11 2025 by rpki-client