Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer
File: aIPzR-OJH1c9-AFa1swzHM6wR2g.cer (raw, json)
Hash identifier: vukGKI+kxvT0q1OAeBzxNvxomO7QVeZnxHbgFAJp/wE=
Subject key identifier: 68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F0C76FD298F9231E9A6B1B455B56E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.176.99.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0c:76:fd:29:8f:92:31:e9:a6:b1:b4:55:b5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6883f347e3891f573df8015ad6cc331cceb04768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:fe:e3:a1:b6:82:1a:75:42:a1:29:c5:da:
f5:24:b4:4c:1e:6e:69:10:b8:a0:2e:2b:70:63:3f:
95:bc:a5:81:81:da:e1:0c:a5:a4:ba:ca:e6:60:02:
66:3f:ee:16:92:64:6d:f7:3e:b7:04:2c:b1:de:05:
74:55:9f:ff:35:4c:71:50:e3:09:f0:38:42:e3:5b:
50:ab:57:27:d7:e9:11:10:84:b9:3e:7f:ea:d7:13:
f3:76:63:bf:cb:f8:1b:af:4c:bd:6f:90:f7:f9:5b:
3f:48:83:b3:60:87:e5:91:ea:5d:e2:bf:af:fd:9f:
9e:0e:b3:ed:62:dd:15:74:a3:0f:74:f4:89:b7:28:
40:7b:4b:c0:1c:ad:7b:80:be:24:0f:03:50:d1:50:
9f:f4:19:41:4b:7c:60:39:34:ca:34:03:ad:ea:f8:
58:50:e7:4b:bb:c1:fe:1c:e9:da:f5:91:3b:dd:80:
21:20:ef:99:60:d8:95:81:a6:bc:f1:47:b6:40:25:
ca:d3:51:3e:36:20:f8:22:c0:ee:3e:7f:14:39:b5:
fd:8c:ac:81:ee:0e:6a:d7:8e:6d:1c:0f:1a:90:23:
c0:70:09:55:c6:a0:20:8d:af:70:bb:6c:12:75:2e:
a5:da:f6:bd:26:f5:11:f2:6e:23:db:36:53:c0:c3:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.99.0/24
Signature Algorithm: sha256WithRSAEncryption
74:66:61:96:e5:66:ed:12:d2:6a:7b:fc:3f:87:05:bb:e9:50:
35:33:27:b3:ec:fb:ba:e5:83:d2:5b:84:45:96:40:d3:47:81:
34:4e:4d:b2:a7:3e:01:fd:41:77:a8:cb:1a:89:70:59:46:25:
1b:ce:07:7a:26:c2:53:27:4f:e1:c8:13:58:05:4b:c0:8c:b3:
96:14:57:66:7f:04:ab:47:67:10:ae:43:2b:50:09:e7:08:b6:
17:06:25:0d:5e:5a:0b:02:7f:23:ed:b0:e4:eb:93:11:7b:d4:
32:49:ab:83:ac:ea:3b:c5:ec:f2:e2:ac:ca:27:57:f7:78:ef:
51:6d:d0:c8:65:a5:98:e4:b6:1a:9b:64:01:2b:4d:79:b0:e3:
7a:5b:1a:27:fa:37:8d:f6:06:ac:18:d6:c3:1d:d8:0e:03:6e:
de:b5:86:ad:21:b0:bf:15:7c:99:76:0b:cc:a7:8f:68:4b:c9:
29:8a:64:e3:b2:01:d4:7e:05:68:77:05:41:95:b5:c1:a4:0a:
a6:a1:cd:d8:89:38:72:34:1b:88:b0:24:96:0c:d2:a1:05:cc:
71:b5:5c:aa:e0:0b:7e:50:a5:f5:ec:03:fe:c8:f3:71:46:86:
c2:a8:5c:28:e1:3c:ca:6f:80:bb:cf:2d:51:9a:99:a9:8a:e3:
1b:a1:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:31:01 2025 by rpki-client