Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e_e2YOSoOie4TAG4eEYUFtBlMKI.cer
File: e_e2YOSoOie4TAG4eEYUFtBlMKI.cer (raw, json)
Hash identifier: kxI8cjF0Tw/f3+JHWk5UKYCNhPVK1jr5ibPDCDF3/HI=
Subject key identifier: 7B:F7:B6:60:E4:A8:3A:27:B8:4C:01:B8:78:46:14:16:D0:65:30:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FBDDB7216ADCE26268D2ED4F1A694
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/2b77c5-4083-4e86-b47e-302f7694bcb6/1/e_e2YOSoOie4TAG4eEYUFtBlMKI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/2b77c5-4083-4e86-b47e-302f7694bcb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.243.232.0/22
IP: 2a14:c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bd:db:72:16:ad:ce:26:26:8d:2e:d4:f1:a6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bf7b660e4a83a27b84c01b878461416d06530a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:d9:ad:59:bd:5d:b3:50:41:a5:52:24:af:
39:bb:1f:81:f9:7d:93:b3:20:a8:f7:42:2f:6a:1e:
dd:ba:db:d7:c5:14:23:77:68:30:20:15:19:21:e3:
1b:39:0f:0b:a7:3f:40:c9:c0:40:67:8f:35:0a:b2:
ac:06:f7:97:5c:0b:e8:8b:8b:65:b2:ba:76:ff:19:
1b:46:8b:ba:70:1c:7b:37:cd:a0:c8:30:c9:9d:ee:
01:e0:51:ee:b8:5e:50:27:1f:29:15:2f:2b:e9:b3:
79:39:ff:d2:32:96:af:85:ea:8e:c1:c7:5a:d4:d2:
79:22:64:b9:7c:1c:b7:69:11:e1:ec:25:da:78:7f:
77:1e:47:ee:11:0d:02:52:44:8a:ca:dd:81:81:b1:
a7:7a:74:b7:cb:e3:36:bd:73:9b:d4:1f:02:6e:d6:
dc:2f:0c:b8:eb:62:86:2d:7f:ac:95:ed:02:86:20:
a6:b2:95:fd:6a:8b:59:8d:e1:45:3c:2c:01:02:25:
0d:d3:f9:55:1b:94:83:c8:98:18:07:b1:08:73:31:
a9:1b:6b:71:32:9e:80:49:8c:8f:38:da:c8:37:c2:
4c:1d:9b:2d:b3:09:76:f6:75:87:22:9f:ec:21:76:
cc:ad:f7:5e:d6:55:4a:d5:f8:5f:c8:54:6c:a9:3c:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F7:B6:60:E4:A8:3A:27:B8:4C:01:B8:78:46:14:16:D0:65:30:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2b77c5-4083-4e86-b47e-302f7694bcb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2b77c5-4083-4e86-b47e-302f7694bcb6/1/e_e2YOSoOie4TAG4eEYUFtBlMKI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.232.0/22
IPv6:
2a14:c40::/29
Signature Algorithm: sha256WithRSAEncryption
55:3d:24:09:d5:d2:3d:e6:32:f1:e2:95:8d:e8:70:d6:a9:1a:
d3:47:7d:db:c0:98:0b:72:8e:7e:0a:ed:c6:3e:42:fa:07:7a:
16:3c:09:55:3a:c7:2f:1e:d3:99:98:fb:7e:67:45:ef:71:21:
f1:7e:06:40:f0:75:53:ff:15:44:1e:e7:f6:fe:01:fc:8c:7d:
3a:c2:a1:ea:ed:7a:f2:35:0a:6e:00:a3:c5:8d:19:c6:26:95:
64:6f:c6:f0:9d:10:c4:4c:a9:b3:f3:31:e9:07:3e:c8:8d:97:
17:2f:a4:00:d5:6a:aa:71:93:23:5a:91:2f:04:e8:0c:bd:9e:
ea:db:32:77:61:60:2e:c5:42:9d:5c:de:86:bd:7b:66:5e:1d:
ce:8f:af:e9:aa:5a:51:1d:b2:b1:86:e9:2c:c1:05:c9:33:ea:
8e:55:66:29:9e:41:bd:69:c0:7b:4d:9e:11:80:2c:ab:e0:74:
5e:13:bf:cd:6e:fb:d7:2a:0c:2a:2f:92:a7:1e:2a:37:c2:d1:
9c:26:0f:35:71:6c:9b:21:88:94:16:3c:31:4c:a0:c5:55:85:
f3:dc:07:85:a2:cc:25:e8:40:9d:f8:67:5b:f3:22:d4:78:df:
b2:6a:65:e1:1c:80:43:2a:c2:1f:10:3d:f6:93:8f:29:bb:ca:
da:ff:cd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:20 2025 by rpki-client