Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
File: bfHIcky70DS6t6Da3wq0uZ_2b_8.cer (raw, json)
Hash identifier: AcjNHy24PcadEUZJ/DxbA37vf1t9HphTjF9AekWb7xQ=
Subject key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B21601EFD03580DCB5CE32B2D67AF1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 156.83.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:16:01:ef:d0:35:80:dc:b5:ce:32:b2:d6:7a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:7c:5d:fd:e6:63:5a:52:44:47:3b:02:71:
9d:65:37:d2:32:9f:9b:56:67:7d:77:5c:a8:65:b9:
81:ac:8f:1f:7c:ed:17:e5:71:60:41:f6:21:71:09:
3c:df:02:eb:47:56:60:12:3f:2f:b9:07:d6:b1:c3:
87:08:d5:4d:67:9e:95:af:98:e7:41:d7:30:b3:77:
aa:27:d1:d4:a6:e9:7f:1d:32:4c:19:21:57:bb:06:
93:7f:61:4d:c0:26:f2:af:4c:57:73:e8:ee:86:a2:
07:7c:5c:2d:29:72:ec:4d:15:d8:a3:00:cd:78:5f:
40:6e:df:7f:0f:92:bf:dc:f0:c8:09:01:8c:62:57:
34:9c:8b:bc:2d:36:a0:06:bd:54:6d:2c:0c:a0:5f:
97:78:d3:91:06:58:fc:45:b6:dd:74:6b:1e:a0:29:
66:8c:c2:a1:61:b1:52:1b:e5:cf:a7:74:f9:d9:4e:
da:2f:df:c5:28:56:9a:c9:8a:b5:d6:41:bf:57:c1:
28:ed:05:56:93:7b:a0:d8:6e:77:f4:21:c8:92:4d:
36:e5:b8:87:39:3f:c6:d5:ac:90:b7:22:ed:ec:ca:
c5:85:21:e0:f2:27:22:a4:73:dd:af:df:28:3d:0b:
09:d4:27:76:6c:61:57:7e:8c:65:bb:00:c2:08:9d:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.83.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:69:85:08:dd:16:f8:0c:91:ce:f2:b2:23:4a:19:04:ac:a0:
fc:0e:31:58:2e:45:3c:71:35:fe:45:8f:a4:1d:69:d7:03:27:
a9:cf:d6:6f:d7:16:97:12:20:85:fc:5f:82:c2:83:9b:1a:2f:
b4:5c:2e:6a:a9:dc:67:0a:94:6d:3d:68:5a:f6:1b:8c:3e:72:
83:73:24:84:7b:67:c9:f6:a9:cf:34:c1:53:53:f8:36:94:53:
01:6e:7b:ec:22:d7:f2:08:44:99:5c:51:10:c7:45:48:a1:f8:
bf:d4:81:2e:a5:a5:05:48:7d:aa:29:c6:a7:93:33:a2:0e:f8:
20:36:5e:19:29:71:84:95:22:46:e1:7c:37:7d:26:aa:9e:c9:
54:9a:f3:dc:b5:bf:f6:42:97:ba:13:69:dc:3e:d4:c1:d1:38:
df:7f:b0:3a:42:a0:c1:1d:e6:3f:e2:26:8b:8e:2f:eb:31:76:
78:19:96:66:1e:5c:68:ee:a7:d6:44:ac:f0:ea:df:cb:2a:29:
9e:11:fd:7d:9c:98:fd:6d:7f:54:f0:ae:3e:2f:88:fb:7e:fa:
81:6e:dd:8e:c4:62:72:0b:25:d7:32:01:a3:e9:b6:11:b7:3b:
48:2c:c1:ef:1d:e7:4e:48:dd:2a:27:b8:d4:f7:7d:c9:b6:b3:
44:95:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:47:16 2025 by rpki-client