Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
File: inQVrmNNYTFZy9LOdKwmGn1axNQ.cer (raw, json)
Hash identifier: gnjIzTHjvQi564iav4d2NmctF+kPAmXfpuOHEw1p+Lc=
Subject key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D74273177636500026B413FC512EFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 37.131.179.0 -- 37.131.183.255
IP: 185.212.52.0/22
IP: 2a0b:72c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:42:73:17:76:36:50:00:26:b4:13:fc:51:2e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:b0:7b:0b:5d:7f:ef:88:60:42:d5:a8:41:
3c:c7:13:15:65:95:b7:cb:95:c0:be:c0:0c:86:79:
d6:ea:a3:35:f3:94:a8:4d:6a:f5:12:24:3e:1d:0f:
7b:8a:04:4b:d3:c0:4a:28:ac:c8:dc:82:a3:1e:ee:
66:09:24:b9:7b:f4:be:68:e8:57:32:d0:63:46:84:
9b:67:9a:67:d0:6d:a0:e7:8b:43:bc:c9:01:1b:09:
4f:b8:f5:27:37:d5:23:75:7f:52:56:70:11:07:e6:
97:50:10:77:5b:e1:b4:be:60:c1:5d:46:fd:29:bf:
32:f0:be:00:10:f7:f7:fe:ae:81:18:a3:ae:4b:dd:
8d:ec:0a:57:97:ca:89:e8:e4:9c:21:11:a9:3d:25:
2b:bd:74:a1:c6:d6:ca:8d:cc:c9:cc:22:d0:b9:51:
66:2a:fe:05:ce:08:54:56:19:97:f1:89:ae:62:d2:
fc:6a:1e:b1:a7:fa:cb:30:13:c4:79:d3:bf:11:ac:
08:7a:16:0e:7b:72:7f:2e:f7:55:34:71:2d:79:6f:
ac:d1:a7:16:fd:22:bc:6b:43:53:58:75:72:ec:fc:
3c:ee:d5:0d:cf:fd:bf:57:42:0c:7a:96:87:13:25:
f8:0a:fe:3d:66:da:73:70:f8:27:e2:2b:50:73:91:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.179.0-37.131.183.255
185.212.52.0/22
IPv6:
2a0b:72c0::/32
Signature Algorithm: sha256WithRSAEncryption
21:df:6b:36:e6:05:2a:ac:af:1c:9e:5f:66:8d:eb:99:10:95:
7b:02:a5:19:3c:9e:e3:4d:d3:14:19:62:c5:e7:98:35:e5:74:
ad:24:31:59:ef:2d:cf:e7:f2:b5:f5:57:11:77:77:5b:79:13:
c6:26:11:17:98:64:cb:60:80:55:49:63:0f:df:ad:75:f7:bc:
20:61:f3:4b:57:7c:b1:16:29:c4:63:9b:cd:9f:41:d8:1c:4c:
dd:41:7c:97:e2:92:7d:a9:65:33:46:75:6c:64:5c:5d:5c:ea:
32:09:91:4c:0b:e3:32:f9:3c:65:cb:f2:45:74:a7:ae:fb:00:
3e:dc:e9:f8:4e:b6:fe:e2:25:ce:d0:fb:49:78:94:20:77:41:
76:b7:5a:83:cd:39:10:cf:01:27:f8:f0:68:a1:3e:1a:98:d3:
21:c6:45:6e:65:d8:2a:5d:8b:f9:ea:f0:36:0b:1c:41:2c:3d:
b7:ef:bc:28:43:5b:b1:91:cd:6c:f9:f7:f1:7a:f2:70:32:66:
8d:d9:4b:bb:31:17:4b:a2:25:b1:79:74:a9:6a:9b:c1:e5:c9:
5b:79:bf:87:37:83:3d:ae:7b:80:b6:67:1d:68:d5:e8:b9:44:
38:bb:99:1e:ab:ec:14:d6:b5:1b:d3:e2:6e:3d:d7:3c:e1:65:
29:79:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:44 2025 by rpki-client