Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer (raw, json)
Hash identifier: 36uoGGimLWNL+o5p4KQtZMFgVAh+LLkFCidTWUk+8fU=
Subject key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067C7CBCF288519BC4DD5347BF1D75A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.76.242.0/24
IP: 192.92.149.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c7:cb:cf:28:85:19:bc:4d:d5:34:7b:f1:d7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:b6:42:46:2f:7b:5e:76:49:7a:de:74:14:
8d:f8:e3:76:9f:c9:cd:df:55:ca:3b:ee:09:6a:c3:
9e:78:1c:73:3b:52:0e:fd:a2:a6:01:de:5b:de:cd:
6b:4e:1c:99:ec:10:78:24:91:00:9b:0d:48:7b:4b:
39:c3:60:6b:4b:22:dc:b7:ac:a1:59:c2:f1:51:3e:
f2:fa:4b:2d:07:b9:bd:a8:d0:a2:2d:dd:5f:25:7a:
25:a9:5a:e8:da:d7:f5:e6:62:08:36:6b:6c:3e:4d:
b3:3e:02:5a:8b:3d:24:ef:ff:61:dd:fa:12:73:9f:
66:f7:65:b7:94:b9:81:fe:38:4d:ab:52:29:92:1a:
7a:e4:d4:2f:ce:41:70:3a:a8:e5:dd:0d:f0:1f:4b:
d1:cc:d6:85:f1:d1:a2:f7:d5:0c:7b:16:a6:20:26:
f1:5c:bd:0d:cb:c9:d8:10:1d:a3:2c:b5:e2:23:34:
3e:ba:86:66:1d:b6:96:9f:59:77:d5:d5:26:67:15:
c1:10:cd:27:be:87:8a:05:54:3b:16:63:e7:37:2f:
25:b3:57:b2:be:5d:2e:68:e6:39:18:51:13:e9:5e:
a7:64:6a:2d:37:12:ad:05:4f:93:83:c6:88:e6:88:
ad:7e:57:7d:0c:8d:d3:35:32:04:6f:81:fb:31:d1:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.76.242.0/24
192.92.149.0/24
Signature Algorithm: sha256WithRSAEncryption
14:82:8d:87:85:fd:17:91:6d:51:f3:07:35:8a:2e:67:5e:8e:
05:d0:6d:d9:f4:cb:42:d8:fb:87:af:16:f3:12:a2:60:7f:ab:
cd:25:e0:2b:98:fa:79:a8:5b:b1:81:25:aa:d8:6b:fc:2e:a0:
25:9e:9f:ef:14:31:fb:b8:04:8d:69:20:cb:cc:f0:02:29:02:
49:95:42:30:79:2f:3e:ae:fa:e2:9a:66:01:1c:db:ad:a1:f2:
2c:74:84:1a:27:a9:47:4d:76:fa:d3:38:12:9d:e2:d6:d0:5d:
2a:af:a0:68:7e:30:35:a2:97:bc:05:e7:7b:ce:60:71:bc:02:
d2:82:c7:6b:c6:5f:10:a3:ac:87:2c:54:76:17:dc:5f:f3:8a:
20:06:c3:58:5f:f2:77:55:bc:33:da:fb:4b:29:c4:67:60:57:
6d:67:cd:9a:c1:f0:c2:68:e7:cb:67:40:2d:e0:ff:b9:a8:d7:
84:e2:42:d6:2b:70:f0:22:24:03:88:4e:b3:7f:a5:4a:bc:49:
05:51:d0:ed:a5:1f:76:00:fe:37:32:ba:24:af:2b:6e:60:20:
ee:25:81:ea:5d:a0:b9:aa:bb:63:f1:24:67:f3:d6:30:f9:09:
76:ac:df:48:30:ca:ff:14:53:75:ed:0b:c8:27:12:7e:92:f8:
0d:ea:1b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:36:58 2025 by rpki-client