Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
File: gTpCg40uRe1drUEUYG2XKaZQHSM.cer (raw, json)
Hash identifier: ThW4NxPHfwGLDxcG59YJPtL2HgbzuoKK3cOO8iDX7cw=
Subject key identifier: 81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B399DB042501111A3D27696AD0CC2F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:12a4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:99:db:04:25:01:11:1a:3d:27:69:6a:d0:cc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=813a42838d2e45ed5dad4114606d9729a6501d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:69:0a:f2:c2:39:cb:a4:1d:2e:bd:d3:f3:
cd:e1:b5:87:6b:99:af:6f:7a:56:ad:c2:63:90:b6:
32:3a:83:55:9d:5c:82:3b:47:61:24:e4:c6:16:fa:
a1:ac:a7:52:81:34:ae:59:4c:13:98:be:a5:ac:cf:
9a:06:50:70:05:73:99:40:51:40:a8:c2:ff:7b:2a:
a0:ee:f8:bf:83:87:6e:d4:61:a1:4d:f3:a2:28:5a:
d2:7a:55:9d:7d:a8:3c:7d:c6:81:0f:d7:1b:80:b7:
1a:df:38:55:cb:17:ac:4e:b6:63:8e:16:df:80:4c:
ae:aa:e5:9f:c2:47:1a:bd:6d:0c:1d:ea:33:61:89:
f3:67:5a:31:74:af:5d:58:db:d8:57:e3:16:cf:ea:
51:95:ca:15:4c:b8:35:2f:3a:78:77:2e:73:52:fb:
a8:c3:82:08:1c:05:70:e6:84:d2:82:01:c8:6a:30:
e2:b8:34:9a:a8:1f:21:65:dd:f6:7d:22:6f:1c:ec:
3f:ae:e2:18:82:b7:cc:7e:f3:8f:2a:cb:a5:46:4e:
f7:d0:96:59:9e:9f:3c:fa:2b:f1:18:ed:02:c0:2d:
21:36:d0:4e:8e:1b:2d:57:4d:ff:4d:94:80:29:ef:
70:0b:8b:6a:47:5f:f9:a0:f0:4e:da:ae:28:0b:9d:
23:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:12a4::/48
Signature Algorithm: sha256WithRSAEncryption
17:8f:12:6e:96:d6:aa:45:cf:15:eb:61:15:f9:71:89:02:8e:
83:da:ec:6a:11:ed:51:ea:f6:ec:98:0e:45:cd:e8:6f:89:0b:
b9:0a:47:b0:78:3e:e9:70:fd:32:3e:cd:c9:cc:4a:fe:16:2f:
19:c1:32:87:80:4e:85:4b:ad:5f:3a:70:f5:2a:2e:af:c5:48:
f6:12:05:dd:f6:81:3b:63:ea:1c:6a:4d:8e:41:ad:50:a7:f1:
ef:c9:b5:be:e7:70:32:6b:58:bb:b1:fa:c5:11:50:dc:18:05:
82:4c:7c:c5:ab:ed:58:49:4e:5b:0f:5c:8a:00:b3:e6:f7:3e:
bb:5b:1c:2f:dd:7a:16:9c:f8:fc:63:9a:77:30:ad:38:fd:99:
43:9b:0d:83:9e:64:7c:a0:49:3a:6f:74:fd:ed:4f:cb:67:be:
55:99:f8:56:1d:a7:87:5f:e8:97:72:53:14:a6:b2:f2:1a:04:
ca:97:6a:16:5c:84:90:7c:42:8e:2e:da:65:95:47:81:a4:06:
eb:e5:a1:0f:78:5b:3b:ce:67:7c:3d:25:ca:7c:b0:78:3f:0b:
83:3f:c5:4c:ce:0d:f4:f5:2d:15:e4:d9:b4:bb:80:c7:1d:bd:
19:a0:c3:81:bc:1d:01:e7:54:55:12:e2:62:17:47:c3:39:b0:
ea:e5:2c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:21:33 2025 by rpki-client