Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer (raw, json)
Hash identifier: NojNHaxRs6u7X54kEQ+PtCNh7izOFYnltTIs+otfD10=
Subject key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D93891610901D806BB6D4B5645F7C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.162.17.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:38:91:61:09:01:d8:06:bb:6d:4b:56:45:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:f4:a9:5b:52:c9:e3:f2:a6:8c:14:36:7f:
7b:6c:67:6c:b8:08:af:34:23:73:d7:c4:9b:aa:43:
fb:19:25:f4:66:c8:60:7e:4b:ba:50:f9:1e:c3:73:
fe:45:3b:b0:e8:0f:44:cb:4a:8b:75:fe:04:64:17:
e4:c6:49:b2:42:c8:69:30:11:12:6d:ad:e4:4a:40:
e1:b4:64:b6:65:1c:eb:91:6e:28:b3:3d:02:e5:a1:
bd:50:01:a4:90:16:93:35:f1:fc:9a:d3:25:66:fa:
26:cc:aa:d2:cb:50:fe:d9:2b:ef:a2:6b:5f:86:de:
1b:ee:b6:27:d8:ad:a3:9a:4b:f0:ad:47:12:ed:34:
72:0f:24:44:9e:18:4e:c8:13:82:57:85:9e:fc:fb:
bb:72:9a:b5:e9:36:ce:ac:15:76:75:d4:31:a4:7d:
c4:86:b0:97:27:68:a1:1e:c9:3d:bb:fa:1c:8d:66:
2b:e7:cf:ef:64:35:00:b6:8d:55:f7:fa:b7:96:81:
b5:35:30:7d:f2:67:db:fb:74:b8:86:c4:af:dd:be:
a6:48:fe:b5:7d:32:0c:c7:5c:48:6b:af:3b:5c:81:
2d:f4:0c:bd:37:cd:df:7f:63:a1:b6:86:a7:03:0d:
f6:03:bb:9c:fb:7a:75:98:d1:db:e2:ab:f5:70:39:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.17.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f6:2c:cd:23:d3:42:c2:45:23:91:14:08:57:69:8f:78:63:
7a:c4:c2:e5:88:0e:66:c4:98:d6:1e:41:40:05:76:e1:8f:8d:
c5:5e:a2:8b:41:f9:95:28:65:0b:1a:8c:cf:af:04:a1:09:c4:
e9:e4:bc:5d:99:dc:58:7a:9d:49:1c:fa:9a:ef:ba:c2:3b:71:
65:da:16:50:f7:65:40:c1:40:1f:7b:39:21:17:1f:9f:a6:25:
ce:a3:8a:3f:c4:5c:a9:e1:ad:bb:a4:46:29:a2:a6:6b:49:0f:
e6:00:9a:71:b8:1c:73:da:00:5f:cc:57:83:ba:bf:8c:70:7d:
19:0d:9b:67:cf:df:00:bb:91:4b:dc:06:b0:7b:68:1c:f7:32:
74:2e:cb:be:f6:67:f3:3b:7e:60:37:88:86:59:9a:83:04:dc:
c9:db:fc:7f:d6:d4:52:b8:2c:4a:d4:51:bd:3b:0e:c8:54:62:
90:7d:ba:2f:b4:5b:4f:bc:24:b3:ce:ad:d9:f1:dd:43:83:1a:
82:29:9a:32:25:2e:23:da:20:cd:f6:e9:78:46:f1:c8:95:92:
a8:34:b4:84:c6:0d:9e:c6:2f:c6:91:93:bf:f6:c8:79:ee:0c:
04:09:3a:62:6a:fb:0e:52:e2:ea:62:56:bb:56:37:a9:f5:6e:
1f:6e:e5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:06:41 2025 by rpki-client