Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
File: flyFKPgXh8SJxUqZODkmn1prH5Q.cer (raw, json)
Hash identifier: SmAiQXPd2JQOoTshtPNWrAx4FE5GVjjtjxKdtPBiFXA=
Subject key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C0DA676192FFE538087E0D70307D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.108.190.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0d:a6:76:19:2f:fe:53:80:87:e0:d7:03:07:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:e0:96:f4:89:0c:fe:28:6b:04:d1:5c:8a:
1f:7f:0c:e4:b9:0f:61:1d:e6:a4:aa:4e:11:f8:80:
28:5f:30:7a:84:f4:b1:94:d0:7f:71:c7:49:b0:5a:
45:de:b8:55:c7:6d:01:24:73:38:a8:d0:59:3c:b0:
aa:43:16:b7:b7:59:8a:7c:24:92:00:97:55:3c:1a:
b9:1b:8e:76:4a:c6:7d:a6:ac:eb:0c:c3:cd:61:2c:
f4:a4:f9:3d:3c:f9:a3:13:26:3f:5e:d5:ff:7d:0b:
ed:08:3a:8d:b3:ca:b5:cc:e9:b2:e7:ae:c3:de:04:
f6:7e:7c:14:e0:ae:fb:b4:04:05:42:86:f1:5f:4e:
21:b4:66:18:9e:3f:b0:ce:98:eb:22:3a:9a:b8:ff:
ec:0f:5b:df:a3:c6:0f:69:68:11:b8:e5:34:18:8e:
77:c7:c9:5b:2c:93:68:85:55:cf:ad:79:db:34:f8:
53:53:2b:f9:5b:26:39:91:18:dd:b7:a7:2f:0d:17:
91:82:85:d3:96:c3:2e:94:89:20:bd:34:20:43:2e:
c9:34:6a:02:dc:7d:ae:1d:cb:8b:0c:e9:d7:48:28:
70:43:a7:91:32:9b:22:c3:e3:b1:ed:7b:eb:6d:22:
88:dd:ea:97:97:f4:f8:77:0b:4d:30:a4:ab:3e:77:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:bb:b6:b7:74:8c:78:8b:4a:10:a2:be:aa:e9:f6:51:8c:99:
b7:e9:3a:00:d2:40:2f:61:a6:a1:92:3a:36:c1:7e:ce:5b:22:
11:30:4a:e2:12:85:aa:44:6d:38:95:07:b5:b4:8e:39:5a:cb:
c4:31:3c:45:cc:01:e6:7d:71:23:85:02:83:88:d2:85:03:da:
4f:c5:c6:eb:27:86:02:fd:92:d4:3e:1d:48:f6:a0:d8:25:db:
4d:d6:a9:51:c7:1c:e3:53:35:52:63:b9:38:93:4b:6b:b2:44:
10:39:fc:6c:9c:a4:06:56:8e:b7:ca:8f:f7:51:bc:bd:90:e1:
30:f6:2a:b5:bc:0b:bf:c9:53:85:35:e3:f1:33:c4:39:97:3f:
63:7b:4b:b4:68:6f:12:90:f6:39:20:6f:4c:d2:55:06:dc:73:
c1:45:ad:17:dd:8d:91:34:c1:16:fc:e1:b6:b5:62:bf:6e:3e:
e0:e7:66:f5:d7:f1:14:d6:02:55:d7:50:60:0d:e8:ae:65:a0:
4e:ba:14:b1:b1:5b:9e:ab:19:06:ef:e3:29:64:2b:96:9f:4e:
9f:18:f0:b2:58:1c:e6:c1:14:07:56:c7:1a:d9:79:bb:a0:aa:
d6:30:a9:c6:98:5a:78:b2:76:e3:17:c1:ee:03:1a:76:ce:ff:
fc:bb:60:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:09:58 2025 by rpki-client