Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer (raw, json)
Hash identifier: yU4J3WMoGPUOPrs7A8ttPQYs3CciGkwkj9D0iiqDykM=
Subject key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C3671F01FB03A4D9E7F61BF4D676D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 109.205.152.0/21
IP: 185.6.132.0/22
IP: 2a00:1b20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:36:71:f0:1f:b0:3a:4d:9e:7f:61:bf:4d:67:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:4e:bc:d1:32:43:92:9a:75:cf:6e:ff:21:
2c:c0:6e:8c:3e:78:01:51:5d:d9:3b:a5:1a:98:72:
24:31:7c:51:96:b8:69:ee:73:58:f1:16:56:4b:ee:
cc:1e:8a:a3:4c:a8:61:10:fd:24:59:e8:09:f2:f0:
a1:45:f6:1c:b5:a3:72:5b:14:5c:ad:ba:df:1e:61:
5f:04:44:a1:94:4e:c6:c7:08:4e:6e:2b:dc:1e:ce:
7a:2d:4a:1e:44:a2:88:21:5b:b4:ad:a0:3a:e3:59:
39:34:7e:99:d0:83:f3:c3:bc:87:4f:77:cd:10:0a:
2b:9e:00:8f:d6:29:8e:7a:bf:ee:1e:eb:d2:a2:b0:
f2:d7:54:49:60:2d:b4:31:08:5e:33:5f:97:e0:f2:
cf:0f:9f:04:eb:40:8e:d8:47:cb:ea:36:f4:f5:56:
cd:dc:c0:82:52:7c:7d:92:36:94:29:32:f2:00:b1:
ef:8c:55:c1:70:68:95:dc:f0:a3:5f:01:57:55:7a:
85:8e:85:6d:35:28:95:a8:81:6c:5d:37:42:c4:ed:
96:02:a8:f9:13:19:78:d5:6c:a4:b7:a7:a7:5d:eb:
93:18:28:67:ba:90:52:31:b3:95:63:22:d3:bc:47:
fa:1a:cd:e5:0b:5d:5c:3d:19:9b:da:b6:87:41:e7:
f7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.152.0/21
185.6.132.0/22
IPv6:
2a00:1b20::/32
Signature Algorithm: sha256WithRSAEncryption
98:f2:87:f6:e3:0f:98:89:df:74:4d:11:bf:48:8a:5b:d0:a6:
26:2e:1c:b3:8e:4b:fa:eb:04:1e:82:ee:33:b4:65:af:ed:44:
66:71:14:55:62:16:41:30:56:d9:ae:d7:54:51:37:d1:cc:74:
df:dc:4a:a6:d8:54:24:12:28:35:09:a2:2c:a0:32:fb:0f:34:
69:f7:65:8d:54:6d:e6:af:5f:bd:78:34:dd:47:f7:03:2d:69:
d0:f8:a6:cc:2e:a8:2d:cd:8d:49:22:7f:d0:8b:8e:23:7d:00:
66:ea:b5:21:60:0b:af:92:e7:97:14:28:5f:22:44:27:51:3d:
80:59:56:ff:d0:9e:f4:0e:c9:84:5c:30:6b:d5:19:fa:d2:94:
4b:4d:61:5a:73:44:2a:11:69:cd:e8:b7:11:3e:5d:66:53:28:
6a:32:35:22:21:1f:ac:0e:a4:82:8f:96:36:6f:09:4d:f6:b9:
d9:73:d8:18:8f:e4:4d:ad:f3:c9:4e:6c:71:a9:02:8f:2b:51:
3f:81:b5:6e:99:5c:fd:58:19:dc:b6:c3:aa:0d:45:c8:7b:77:
64:1d:98:e2:4f:1b:4a:e8:ff:62:fb:3a:6c:24:e4:92:26:23:
29:ff:d8:f6:c5:e1:8f:04:8a:cb:8e:6b:7b:59:3d:d5:7e:cf:
0e:90:98:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:36 2025 by rpki-client