Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
File: fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer (raw, json)
Hash identifier: 4aXLVtiQckWn+VW2llUhHms+4UhI9HJf4xYuZ2sZ7rc=
Subject key identifier: 7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5BCA03C6584538971A837B973520F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.195.104.0/23
IP: 185.215.188.0/22
IP: 193.22.109.0/24
IP: 193.141.180.0/23
IP: 2a0b:acc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:bc:a0:3c:65:84:53:89:71:a8:37:b9:73:52:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:55:bb:8f:fd:5b:13:e5:36:7e:26:9f:16:
b8:51:94:b9:3f:bf:38:17:a3:be:80:46:cf:44:d2:
25:bc:95:da:97:ae:8f:76:a8:28:a5:74:11:33:f1:
91:bc:1a:af:0e:2c:33:ba:c2:1f:95:40:ab:2c:b1:
d9:6a:97:ab:e8:57:a1:56:b7:7b:35:38:76:00:f8:
02:f3:b1:6c:bf:ba:93:5a:ce:d9:95:e7:88:48:0b:
4e:d6:69:c6:42:e9:26:6e:ab:38:c7:3e:95:09:69:
cf:7f:e7:79:b2:cc:df:a3:96:d4:16:20:7b:13:47:
6e:ca:9f:71:63:c8:cd:02:6e:f7:11:22:7c:f6:3d:
ee:d2:d7:b1:e7:b4:77:3b:e3:a7:57:b2:a8:b6:f8:
e5:68:32:02:63:3a:70:f2:70:ae:97:35:64:2d:90:
68:3b:16:ac:6f:31:ea:d3:e4:03:34:58:a8:40:bf:
a4:7d:7c:f2:8d:6d:e2:16:dd:a7:b7:7f:f2:6e:3e:
bc:cc:78:0c:dc:1d:6e:a0:d3:61:d2:e4:76:3b:57:
f6:7e:fb:56:21:aa:c3:46:d7:9f:50:29:4b:14:b6:
67:c9:d6:e2:d1:2b:98:0c:bf:4b:bb:9f:9b:f0:97:
d3:1d:96:2d:09:17:e8:60:6a:72:ff:af:00:b0:3a:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.104.0/23
185.215.188.0/22
193.22.109.0/24
193.141.180.0/23
IPv6:
2a0b:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
48:fe:3b:04:b5:17:23:79:28:ea:2b:6b:2c:3e:d2:a4:c0:d5:
53:22:01:ea:04:5e:a3:7b:6f:2d:74:ea:63:52:1a:50:9a:b8:
8c:8e:0e:ee:fb:a5:53:05:67:09:df:ec:2f:01:a8:8d:90:19:
dc:80:a3:a3:75:c7:f0:02:47:b9:1f:8f:c4:fd:39:9a:2e:49:
a0:57:51:7c:db:07:b5:7c:02:c8:11:06:dc:0b:fe:2b:6e:7c:
3f:4b:58:d3:6d:94:8f:96:fd:5c:14:ef:84:b7:d5:ea:86:0f:
e2:34:e3:6a:51:97:0a:90:d6:a2:e8:bd:0c:29:28:e3:4b:d0:
7d:af:52:11:82:4b:a6:57:db:cf:21:6d:d8:e9:0b:29:39:a2:
f0:50:cc:97:76:e5:e2:a9:f2:9d:55:f2:21:b9:22:b5:97:c3:
62:ce:bb:6b:9c:a4:06:bd:91:ec:ba:52:93:3e:80:d5:e1:34:
db:b3:2f:a5:79:8c:52:3a:bd:25:e7:6b:3e:0e:2f:92:27:11:
16:65:0f:2b:d6:cb:f0:3d:31:34:9a:98:e3:a1:8b:87:6c:73:
6a:6b:1c:fc:56:12:f4:db:2f:df:0b:4a:18:cd:7b:0b:cd:08:
32:cf:52:c2:08:6c:88:50:32:f7:1f:d2:2b:81:25:1f:2a:7a:
e3:6a:64:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:06:01 2025 by rpki-client