Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
File: cLTaDxATrNthwveibRTE8N6CIuw.cer (raw, json)
Hash identifier: hkMkWmedJKYuWWsQKFdUUi4jmC2DUR1K+O4CpNNnsJM=
Subject key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942520846A7E72AB95345D7CB6BA2AC9A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 129.194.0.0/15
IP: 192.33.212.0 -- 192.33.220.255
IP: 192.33.222.0 -- 192.33.231.255
IP: 192.80.31.0 -- 192.80.42.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:84:6a:7e:72:ab:95:34:5d:7c:b6:ba:2a:c9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:ed:24:f4:30:b3:47:a0:d2:c7:59:cd:25:
61:54:d6:49:dd:3e:02:5c:de:2b:67:0a:c6:43:0b:
a1:e2:75:96:f7:0a:de:ef:bb:ae:e5:bb:19:ec:95:
69:a2:8d:77:ce:5f:35:c6:5f:65:c7:09:69:00:ef:
f8:60:cf:bd:f5:59:7d:79:71:3f:7f:22:fb:2e:d3:
6c:e7:b6:99:91:1c:3c:fc:13:aa:71:3d:18:7f:1b:
84:27:12:4e:81:50:8b:9f:84:37:e1:e6:62:72:d4:
84:7f:d2:dc:f3:84:f3:c0:1e:df:21:a5:d7:7e:25:
47:3a:74:22:04:1d:a7:35:ce:55:f5:c2:07:e8:8a:
e4:17:e2:e1:b0:8d:e1:ee:04:9d:bb:8a:93:ea:89:
de:12:90:ae:cb:d4:d1:f6:bd:ca:0f:4e:c4:6c:d9:
71:cc:82:c3:14:f0:6b:38:a1:d1:28:37:3d:a4:d8:
f2:2b:d0:7d:04:10:0b:4b:46:83:2c:7a:b8:6e:d6:
0a:85:d7:b9:00:8a:a3:c3:87:2e:3c:f9:54:d5:91:
c0:f5:2b:52:26:b3:22:2a:ee:50:ae:87:0a:40:11:
bf:92:4a:c7:f1:18:58:9c:a2:a1:5f:36:d7:25:85:
a0:79:ef:a3:47:b9:4d:4f:40:c4:b8:d9:56:7d:ff:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.194.0.0/15
192.33.212.0-192.33.220.255
192.33.222.0-192.33.231.255
192.80.31.0-192.80.42.255
Signature Algorithm: sha256WithRSAEncryption
0e:7c:29:1d:62:74:52:f7:07:82:97:14:c3:a0:c3:1f:07:f6:
04:c7:fd:d2:1e:9f:ff:d3:20:68:0c:7c:bd:79:74:e5:4e:8f:
22:6a:3e:77:ef:5b:54:51:85:0d:7f:81:8a:f6:0d:cb:9c:5f:
9b:90:2c:07:d2:30:0c:25:73:00:9a:f6:60:f1:30:70:bf:b7:
00:d2:b3:4a:50:56:00:51:07:cf:62:ca:f3:4e:e1:71:fd:3c:
ae:9e:5b:b3:dc:09:cd:45:13:65:0f:ed:fc:3d:ef:69:c5:0c:
c3:de:8d:95:22:ad:10:23:50:1f:64:8b:a6:a4:26:b9:f6:02:
f8:f7:59:54:f2:b9:77:a8:b0:81:7e:b7:5d:97:db:e0:11:c4:
3e:2d:0a:ce:87:d7:a3:88:7f:5c:94:83:14:32:5d:f6:57:ea:
a3:78:8b:cf:7c:e8:92:bc:e2:b6:83:e7:e2:81:e7:8d:e6:55:
fe:c7:4a:a7:ed:58:31:0a:49:e3:10:84:5a:da:f4:94:42:e7:
d1:2b:c4:86:a4:96:77:b5:02:93:8c:05:82:65:4e:da:c9:8d:
44:aa:19:d9:6f:4e:64:f6:32:e6:2f:02:18:ef:70:dd:d1:b4:
b4:f1:24:f2:a7:65:8a:af:8d:64:0c:b1:10:a4:f9:86:7b:1f:
a2:2c:ab:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:54:03 2025 by rpki-client