Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
File: cFtQehAZ98Rlc33FlzbAb93c7-c.cer (raw, json)
Hash identifier: 66ZyVY/lDr0MnaRNLeqcbiHALvmHmIgA4Wlr+SFGTMg=
Subject key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA7B1CC7D3800734A3FB1C9BFC008E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:d68::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7b:1c:c7:d3:80:07:34:a3:fb:1c:9b:fc:00:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:c1:0c:ba:dc:0e:57:2e:11:d0:29:a5:94:
9f:ef:f5:28:53:15:8c:f2:78:41:83:40:d7:68:35:
43:c4:e5:d5:22:14:7f:b8:7a:68:d6:b8:8b:9e:e5:
d5:ed:75:5d:f6:d9:77:df:34:8a:d3:73:c0:6c:2a:
50:a6:f4:21:51:b4:9d:10:21:a2:94:08:e7:ff:bc:
e5:c6:e2:d8:b4:ff:74:a8:18:0e:1a:b7:e2:e1:49:
5a:27:30:90:3e:84:a4:33:39:f3:13:37:aa:87:31:
d9:a2:0b:5a:3b:5a:a5:67:57:bd:c2:a2:a1:ea:ff:
29:30:2b:72:22:d4:44:c0:bd:77:3f:d5:8f:aa:d5:
a9:2b:91:a5:7c:c9:90:aa:7c:e1:b1:ce:cc:2f:09:
9e:1d:53:95:a9:f1:0d:b7:c7:8d:42:9d:b2:df:52:
df:ba:79:c8:ed:5e:eb:7d:cc:53:29:8c:7b:45:ca:
78:54:7f:93:e0:62:56:a5:ad:b5:a7:4c:a7:de:92:
67:16:2e:f8:ce:b8:64:c6:0b:ba:d3:89:d8:02:9a:
30:27:35:e2:37:35:81:cb:23:b4:a8:1a:ef:bf:43:
27:56:99:ef:be:46:04:56:e0:78:e8:ba:3d:09:9f:
03:eb:36:0b:73:55:7b:d8:ad:d5:2a:2d:aa:ee:83:
27:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d68::/48
Signature Algorithm: sha256WithRSAEncryption
a2:55:8e:7a:33:d4:a1:ed:41:45:28:95:89:33:48:b6:bd:a9:
27:36:37:a1:5d:eb:66:71:08:cd:bd:1e:2b:5b:5a:20:13:5e:
94:21:45:f5:38:a0:43:80:cf:4d:e1:03:f8:6f:71:ff:49:72:
e0:02:7a:e1:be:92:b5:5d:6d:27:40:bc:05:c1:aa:68:72:36:
0a:e7:f2:f1:de:c3:a7:48:7c:18:70:65:52:aa:3e:d4:51:3b:
e6:1d:9f:84:d4:26:f1:9c:4b:93:05:2b:16:4d:e8:37:37:3d:
f1:f7:eb:55:62:58:37:0c:cb:90:3f:69:69:5b:e3:33:a5:4f:
a4:71:20:d6:eb:dc:80:a0:2c:06:a8:db:a8:ab:c5:15:3d:73:
13:86:ae:74:ed:75:b8:5a:e2:30:ed:dc:44:55:88:63:9a:01:
3f:6d:2e:5c:8e:1a:9b:75:41:98:32:22:13:7d:62:c7:a4:ca:
4e:74:a5:20:f9:a7:59:86:c2:be:fa:ff:0e:c4:cf:e6:1a:22:
27:19:04:1b:52:8b:96:68:cf:5e:2b:23:b8:59:1b:41:91:a0:
42:48:9e:b2:a5:62:5d:4c:c3:9c:69:11:71:83:18:36:7f:94:
aa:43:59:b6:5e:71:9b:32:a1:53:9e:09:bd:40:b0:71:68:e0:
b7:1a:6b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:49 2025 by rpki-client