Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer (raw, json)
Hash identifier: F/LZp+1HsZqNygdF6yvGKOboHAgHSuX9fUZeFVUWyN8=
Subject key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DF0786431B928C38B764996CF8B6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.128.144.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f0:78:64:31:b9:28:c3:8b:76:49:96:cf:8b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:fe:f9:d3:c4:e3:15:9b:36:03:14:9e:b0:
9e:32:53:f8:83:65:76:aa:41:5f:ed:b4:61:4b:c9:
10:3f:df:98:24:72:80:83:2e:c4:88:88:cc:5f:3b:
29:59:05:9b:38:11:e5:09:d0:4a:98:cf:0d:f3:0d:
90:77:50:29:b4:4b:7d:d7:bf:8b:09:5f:aa:10:cb:
2a:eb:91:ac:6e:d7:df:1b:59:c3:76:99:f4:d1:fe:
9f:7f:9b:fb:fd:41:7e:19:ca:f3:25:ce:c2:b6:b6:
b9:99:c6:7d:6b:00:20:83:13:d2:80:8c:4c:dc:f8:
81:c5:70:6f:d1:18:30:3a:63:07:6b:d2:9c:52:6c:
2b:3f:0c:91:5b:08:f2:c8:1f:2b:4b:c8:c4:f0:41:
18:39:87:9b:c6:5b:9d:2b:c4:03:d2:5f:5b:d2:24:
e1:33:7b:ca:cb:51:d4:ad:88:98:b1:6e:4d:b3:4d:
7f:f0:04:4c:a4:58:a5:30:17:bb:50:44:7b:6c:70:
fb:e0:fb:66:f0:77:c2:16:24:9b:f5:69:18:6b:8f:
99:c7:1e:01:67:47:30:24:ce:80:4d:c6:20:30:84:
a8:9d:1b:e8:ab:c7:35:ec:e3:e6:d6:e3:8f:80:2e:
c7:db:98:68:98:92:9b:8d:3d:38:42:0a:a7:9d:e4:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.144.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:4a:20:02:5c:ae:79:db:80:ca:55:90:66:96:d5:39:86:9e:
1e:9c:c8:de:91:40:4e:cf:5b:c3:b0:53:79:e8:3e:1a:68:76:
b5:4b:2c:8d:eb:fa:32:a9:39:94:e9:03:b7:f9:ff:44:95:82:
33:29:30:f0:f7:44:44:63:29:70:bb:49:ae:ad:40:a5:36:3d:
42:83:b8:05:cb:79:cc:ef:56:4a:a9:37:93:68:96:54:ad:3d:
f2:c5:40:99:40:f9:e0:d2:f0:17:e7:35:ea:17:3f:04:84:d5:
e3:db:d9:30:70:a4:c8:87:3d:54:2e:66:ca:89:d5:06:43:15:
7b:a8:14:15:59:53:b6:b7:76:1c:42:50:6f:fa:d3:50:f8:9f:
5c:34:5a:b6:c5:a9:c8:10:5d:a1:6f:ea:d6:05:22:83:b0:ae:
16:26:66:92:94:9b:d3:e2:65:c1:6a:73:70:8a:67:55:3e:c8:
a5:a8:67:fb:7f:17:1f:18:4d:f4:40:e6:c9:fd:75:da:c0:37:
ad:a1:df:21:fc:5a:c6:7f:df:be:27:2c:c8:a1:00:ca:56:15:
a1:38:c6:f6:94:ee:62:38:27:ff:04:11:22:13:d4:e4:2d:87:
c1:ca:9f:f9:7d:80:4a:b2:df:36:18:1f:1d:f6:2a:c3:e0:31:
6a:bf:72:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:11:12 2025 by rpki-client