Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
File: fC4N6VOoXYdf1kZKwSNQcr95xto.cer (raw, json)
Hash identifier: QtyMNN+0b8Si31ebNjbr+oxg4AefQScOKR9mFD4AIZE=
Subject key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425209FB1E79B71DEEF1A4802B97851DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.147.73.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:9f:b1:e7:9b:71:de:ef:1a:48:02:b9:78:51:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:42:01:cd:f3:62:50:97:4f:40:77:53:4e:
e6:29:cc:23:e5:41:62:6b:e0:60:b1:d4:69:d1:61:
ad:0c:68:d9:a7:ea:bf:90:ca:c2:c8:c9:3e:6c:69:
be:7f:79:6e:84:38:3e:0f:04:f6:d0:ea:41:32:b2:
36:8f:53:5b:63:69:0c:ac:cd:35:b6:14:e0:de:89:
af:19:9c:a5:d5:9e:8c:1b:a6:8a:f1:5f:a7:15:9d:
4a:2f:0e:5d:cc:5c:e7:f0:16:8e:5f:2f:e9:9b:2c:
ec:a8:85:f0:23:6a:5f:bd:e6:10:2d:73:30:0e:e9:
40:5e:db:40:09:7e:90:93:d6:d1:89:a6:59:21:12:
c9:4e:3b:5b:88:a1:ac:57:0b:e9:cf:a8:4c:f9:50:
da:f2:97:7a:ed:87:77:56:8d:53:8b:ae:cd:fd:f2:
07:5b:b4:dd:3c:aa:46:a8:64:67:b0:c1:ff:8c:3b:
8d:e9:65:a7:76:bc:a4:00:09:da:86:78:09:09:02:
62:a8:87:37:6b:ac:c6:67:78:8f:10:83:86:04:02:
51:af:62:f5:f4:c1:ed:a2:d2:f5:d4:36:fc:f5:b2:
59:95:14:ba:a1:4b:e4:6e:fb:53:4e:35:28:8b:7f:
a1:4a:ff:8a:83:5e:5a:ca:7d:32:26:d5:0d:a7:99:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.73.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f1:2f:53:b4:90:1d:c8:8b:54:0c:0f:a1:ea:3c:59:82:0a:
58:ba:cf:fa:4f:b9:75:ff:65:19:9f:f5:e4:c1:17:1d:45:76:
c3:92:05:5e:51:7d:ca:ac:14:49:2e:71:04:8e:6e:5a:6e:93:
5d:36:29:c8:d9:a1:3e:a2:65:5d:af:c6:db:26:3b:a6:b0:cb:
ef:46:30:1b:0d:39:9f:54:dc:ae:b3:54:10:46:a1:ab:11:f8:
08:20:84:3b:29:cb:e1:c9:d1:bf:42:75:1d:c9:84:ac:4a:34:
d3:92:2e:50:98:87:ba:8d:e5:8b:c2:ce:59:ed:03:65:22:1b:
eb:9d:c6:17:e2:46:84:23:9b:9b:13:89:c5:2b:d0:52:b4:c8:
b9:68:d8:0a:ae:71:75:a0:b5:28:ff:30:42:e0:0e:e8:9f:cd:
1e:f0:49:f6:52:42:8d:59:2b:3c:b4:0f:bb:c2:c8:4a:53:0b:
b5:a9:cf:bf:89:95:39:8d:9b:60:75:d6:14:1f:7d:fa:20:25:
5b:31:da:d6:1b:2e:9a:d3:5d:97:ad:f2:27:1c:01:a1:19:b0:
73:0a:33:f1:4f:e5:76:6e:89:19:24:f3:40:28:6e:fb:5e:90:
3f:1f:45:33:e9:97:ec:33:62:3f:2d:a2:0f:ac:2c:b8:3e:eb:
45:a7:cc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:56:38 2025 by rpki-client