Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
File: dGNlNVtmVWSiEMNYxooBF7f765o.cer (raw, json)
Hash identifier: ARzJKK2DTg02ZTLNfwTncdoPpb0CmKp6P/NYJk/2VKI=
Subject key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7DC9C46BE9C4AF24B23698837E838
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.65.200.0/22
IP: 185.120.56.0/22
IP: 185.126.180.0/22
IP: 185.255.176.0/22
IP: 194.124.36.0/22
IP: 212.22.64.0/19
IP: 2a06:c3c0::/29
IP: 2a09:d000::/29
IP: 2a0c:5ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:dc:9c:46:be:9c:4a:f2:4b:23:69:88:37:e8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=746365355b665564a210c358c68a0117b7fbeb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:63:44:a1:5b:6d:14:2b:af:e2:40:9c:3c:
bf:eb:61:ed:e1:33:5b:ea:e2:15:2a:f5:0e:d5:26:
c3:c5:5c:3d:5f:a0:3f:61:fe:df:aa:33:1b:1a:cb:
d1:51:9d:31:e9:6c:ac:90:47:35:6f:41:4f:5b:9d:
44:ae:8c:e7:df:8a:2b:61:54:62:7a:be:c4:95:34:
30:5d:59:54:ac:77:1e:cb:11:47:7b:7a:88:d8:f3:
20:1c:df:68:ad:c0:54:25:59:45:34:5e:3e:fd:af:
ad:38:0a:61:8c:b2:c4:8a:59:3d:ff:ed:54:57:c4:
af:a3:d0:4e:76:3d:00:41:26:df:0b:05:d6:59:d4:
e3:a3:25:89:ad:6b:f0:f9:18:d3:89:10:8e:a0:87:
de:5c:47:2b:74:13:bb:fc:aa:f4:c8:9a:3b:f4:ac:
4c:09:0f:09:2c:b4:9e:08:f4:6a:78:f3:4f:d8:88:
d1:db:b1:60:c0:8c:22:a5:84:4d:cb:cf:b2:a9:a0:
81:0d:18:12:92:5d:ae:ce:1a:7f:ee:ec:03:f8:16:
15:03:1c:0b:ef:e6:a1:6d:e5:56:78:c4:67:24:af:
48:19:63:4f:37:14:5c:bd:c6:1f:59:79:29:25:31:
3d:f4:7f:dd:26:9b:11:14:b0:85:09:88:0c:a9:4c:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.200.0/22
185.120.56.0/22
185.126.180.0/22
185.255.176.0/22
194.124.36.0/22
212.22.64.0/19
IPv6:
2a06:c3c0::/29
2a09:d000::/29
2a0c:5ec0::/29
Signature Algorithm: sha256WithRSAEncryption
7b:57:de:30:d5:c6:17:3e:f6:62:90:db:78:9a:25:da:4e:c6:
3a:2c:14:d8:35:cb:61:fb:33:bf:85:d8:06:88:84:86:7d:2f:
ff:8d:80:47:1d:41:fa:a9:c3:c0:55:aa:d4:09:38:5f:03:5e:
83:30:4f:2e:bc:48:41:11:1a:97:b0:ed:39:ab:d9:c4:30:9d:
30:db:31:2f:4e:13:0f:ec:24:e1:34:9d:06:c8:0d:a0:46:47:
86:e9:b1:96:6f:95:25:0a:4e:5c:8c:a7:8d:d8:cf:b1:ce:3e:
17:c4:5d:79:a2:2d:2e:69:10:09:1b:22:a8:96:0a:b2:9a:a1:
26:72:27:3f:6d:fe:40:82:c6:dd:fa:85:6f:1f:e5:c1:e3:2d:
6b:3b:71:79:26:c8:c0:54:4f:61:bb:42:aa:ab:fc:3b:da:4d:
ba:a2:ba:9b:96:d8:00:9e:7b:87:97:ee:65:62:ff:b0:a1:58:
8f:80:72:fb:19:2f:3a:3c:b9:b0:14:75:57:9b:94:76:94:7e:
bb:c2:5f:5f:42:a2:3f:e4:9b:9f:d5:2c:7e:6a:dd:f8:e4:12:
5a:72:e8:77:c0:52:9d:75:db:1f:d3:10:d2:c0:96:3e:96:84:
7a:c1:9d:28:2f:20:4a:1f:20:66:ff:9f:05:55:c7:98:ae:74:
72:f3:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:03 2025 by rpki-client