Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
File: bgC7pk9Ra41jNaAc8wS4It7hrtA.cer (raw, json)
Hash identifier: bCSgREaxd9n9EH0E5m2dW5xjbcCmncNBuX+3hON6DjQ=
Subject key identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942745BECF3980753B7732AF52C540E672
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.5.188.0/22
IP: 2a02:7f40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:be:cf:39:80:75:3b:77:32:af:52:c5:40:e6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:1b:a6:b6:47:5f:bd:85:81:92:d6:c0:fc:
10:47:fb:ed:3d:60:e4:74:dc:98:e3:37:8d:d0:56:
0b:72:97:4b:cd:c2:16:0a:69:5c:e2:71:45:57:e9:
82:37:33:c9:4d:e3:f6:db:95:e6:8a:fe:0b:fc:ad:
3c:6e:c5:fd:6c:57:60:aa:da:48:e4:7e:f2:e6:7c:
8b:de:77:87:6d:8e:33:6c:57:af:cf:32:61:14:32:
ba:54:95:7a:0c:09:d8:bc:6a:55:63:63:84:ee:6d:
d6:a8:10:6e:e2:8f:9d:f3:03:10:b8:0a:c2:23:b1:
49:e7:c0:8d:93:47:fa:cd:46:52:fc:bc:ae:1e:98:
eb:51:28:f8:97:c6:93:a5:e6:b0:aa:86:d1:2e:87:
a3:9e:09:9a:9a:02:fd:22:8b:9e:e0:e5:e8:c2:d7:
69:e2:2c:cf:cb:64:c0:20:c4:d4:e1:43:ec:ad:6c:
58:8c:8d:c8:a2:e8:64:23:b9:d0:99:7c:f8:64:d9:
c7:ea:f8:0a:6b:b7:3f:78:d4:28:78:02:3f:c9:d2:
9a:96:62:3c:3a:bd:00:7a:36:73:94:c4:c5:6a:6d:
0f:53:7d:6c:ff:0b:f5:5e:d6:85:b4:fd:12:e6:49:
03:63:a5:79:d5:ff:29:c0:16:8a:af:90:d9:ea:48:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.188.0/22
IPv6:
2a02:7f40::/32
Signature Algorithm: sha256WithRSAEncryption
97:5b:07:06:a8:5d:36:2d:cd:e2:60:9a:3d:a9:32:1a:43:ab:
de:37:9c:c4:52:82:f6:87:68:dd:f9:03:69:10:d5:21:3c:d5:
94:77:5e:40:94:cc:45:85:7a:ca:37:fb:d0:cb:ed:7e:a1:bd:
f2:a8:8f:0a:73:02:ea:7a:d3:21:33:63:63:a0:8b:f6:fd:d8:
51:6f:ee:65:27:ec:da:23:bf:82:4e:2a:50:2c:f3:a0:ee:c8:
26:89:05:1d:a4:ff:e5:db:8f:5b:5a:67:36:03:b3:fb:af:29:
ce:8e:2a:52:ad:a7:e9:4d:b8:a2:b7:e6:e0:7e:2f:38:3c:ab:
11:f1:07:e3:7d:5a:75:75:6a:0e:df:55:e1:c1:ea:86:b4:69:
df:d8:12:03:17:cb:d0:5c:df:fa:ca:14:50:74:08:0e:0e:e1:
33:70:79:d0:49:e8:1b:e5:0e:95:dc:44:fa:a4:74:88:f1:80:
47:31:37:85:32:8c:dd:b9:15:66:eb:ae:2e:70:95:e7:92:38:
cd:c9:c0:03:e8:c7:ee:98:87:83:1d:6f:33:ec:e8:07:2e:a7:
91:4d:09:3c:96:54:a0:44:61:b1:ee:66:e4:95:9d:8b:9e:fa:
56:42:f6:bd:46:b7:81:7d:fd:03:37:6f:6d:2f:9e:84:08:36:
25:38:7c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:59 2025 by rpki-client