Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
File: ekeMWqImonjosZBvNxxgz8fYfo4.cer (raw, json)
Hash identifier: 2O3bA9OUdpcdYi1fH1+L8stAVdczyRMiR/VqGr2ljFk=
Subject key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC475E79CBC119302A0396E4E0FFB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 89.106.144.0/21
IP: 94.143.104.0/21
IP: 185.236.124.0/22
IP: 212.1.216.0/21
IP: 2a03:480::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:47:5e:79:cb:c1:19:30:2a:03:96:e4:e0:ff:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:8c:2a:8d:93:6a:0b:82:18:ba:e5:a1:aa:
7f:66:a2:2d:60:ed:0a:45:bc:a8:a4:3a:d0:44:dc:
e5:f9:de:12:19:01:70:09:4f:15:d6:c2:32:d2:bf:
4d:42:8e:74:19:b7:d6:7c:cc:4a:ba:85:76:81:d5:
a8:1a:48:94:b5:c0:11:26:bb:d5:7d:d3:aa:03:f2:
0f:58:9d:84:10:8a:3d:ae:d0:05:51:48:24:e4:0a:
f6:0c:35:10:97:1f:ce:b9:fa:57:cf:55:5e:e6:97:
04:ca:47:35:95:db:77:37:93:9d:97:15:6f:f5:bf:
74:b4:0f:79:5d:f0:f7:b5:54:e6:2b:82:8a:53:02:
84:05:0e:34:66:17:cc:f2:7c:88:cf:50:85:90:23:
e5:e7:22:b8:c6:fd:c3:c6:bf:b2:c6:da:52:83:1d:
ad:bd:c8:70:64:5f:d7:6d:8c:41:a4:39:22:52:86:
5d:bd:99:d5:3c:ff:96:0c:00:61:db:7a:dd:5d:41:
12:66:df:d7:1a:17:be:06:fa:f9:ab:64:82:17:38:
00:b0:46:b1:fa:2a:13:56:5f:03:7c:ba:48:59:7d:
ff:87:b0:31:57:70:54:92:89:c2:0e:88:27:46:7f:
55:ed:bd:53:ee:94:5b:89:59:0a:d1:5c:db:e5:87:
8e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.144.0/21
94.143.104.0/21
185.236.124.0/22
212.1.216.0/21
IPv6:
2a03:480::/32
Signature Algorithm: sha256WithRSAEncryption
13:4a:d3:ce:e0:71:c4:c6:8b:5d:d7:08:b0:5b:b9:c6:8f:9f:
48:9e:e7:2c:eb:46:2d:06:9d:56:7a:4d:b9:23:e3:f5:38:b4:
de:e5:74:c7:90:bd:60:24:a5:2e:c7:5d:73:95:b8:92:51:41:
3a:fb:b3:d6:04:df:fe:68:49:6d:5f:f9:1b:e4:bb:34:15:20:
81:ec:70:bd:9d:af:02:2c:22:08:27:27:cf:d6:75:8b:df:84:
71:28:95:e0:29:d1:ad:8e:44:f4:fa:9c:0a:60:59:b0:2a:20:
cc:85:18:8f:02:43:b3:84:37:b7:b8:db:11:65:0e:51:3a:dd:
00:01:fc:d3:77:0f:76:cc:43:09:fd:98:eb:66:24:2a:37:47:
6c:1e:46:54:bf:6d:5f:f2:91:31:c4:7b:56:0b:a4:e3:08:9e:
ec:1a:a7:e6:c2:26:d9:82:23:20:52:14:01:01:af:c3:68:ca:
cc:d5:fe:0b:a1:7f:52:f6:8f:ee:ee:56:ec:47:5a:19:7f:4a:
c8:73:2c:b2:2b:59:de:d3:05:f6:7e:c8:42:d4:2d:9c:75:e1:
7f:49:89:a8:d9:69:5d:60:89:bd:93:46:4e:60:03:c0:f3:f3:
4d:ab:eb:89:ee:a7:9c:29:d5:c4:2b:13:3c:fd:c5:dc:a6:1f:
46:73:33:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:38:57 2025 by rpki-client