Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
File: l6r4kriZHowCd5yy24ZNMh7r6QU.cer (raw, json)
Hash identifier: SITnsWk6chC/JiukoU0nxIOcMujo+Ggq+uYPy7/ZVV0=
Subject key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1FB8AF0AC5E07DC19AEF6C00FE2D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.135.219.0/24
IP: 194.11.0.0/20
IP: 194.11.112.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fb:8a:f0:ac:5e:07:dc:19:ae:f6:c0:0f:e2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:2e:85:47:e3:5b:90:5d:ad:00:06:91:3c:
62:1b:c2:84:36:0b:3c:2b:2b:f7:ba:3a:c4:52:9a:
b0:2e:6e:17:99:d9:c9:7c:ca:f3:9c:53:35:59:c0:
86:d4:4e:64:ed:5e:a0:d7:f2:df:1c:0c:ff:d9:74:
26:ac:b1:b8:6e:4e:0a:f1:7b:52:f0:d4:a5:ce:51:
85:b3:3d:36:24:35:76:6e:34:da:f1:fc:0c:7d:b7:
c7:45:fd:84:0a:49:ec:3a:a3:f5:df:14:f8:dc:29:
3c:a2:21:2e:f0:59:46:6e:99:c9:9e:5b:8c:e3:70:
27:d7:07:3c:af:a0:da:76:08:62:17:68:0e:f6:5b:
bf:cb:fe:b7:07:90:6d:8d:1d:42:e0:92:2a:1a:59:
98:4d:3e:dd:10:ba:16:38:fc:e8:fe:a8:db:ed:06:
c5:46:7d:69:aa:50:97:ad:95:af:62:a7:04:45:b3:
49:60:04:98:f7:32:04:5d:ad:68:a8:6a:7c:f2:9c:
23:d3:b0:87:69:82:8e:96:ec:64:f0:ff:d3:38:82:
bb:73:df:48:a5:74:64:13:9c:f4:2b:09:d7:ca:bd:
e4:69:4c:57:82:8f:97:a8:10:df:2d:0b:8e:93:81:
57:52:95:1c:5e:65:21:50:c1:92:8d:46:b7:48:d5:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.219.0/24
194.11.0.0/20
194.11.112.0/20
Signature Algorithm: sha256WithRSAEncryption
01:d2:a5:a1:3a:43:92:90:78:ec:6d:54:9d:2a:59:e1:48:6a:
ea:2b:4c:0d:fe:52:db:87:e4:8b:03:5e:03:42:2b:a5:9e:e7:
55:b7:cf:fd:93:2d:21:9c:08:4b:eb:90:a9:f1:08:18:a2:8c:
25:3f:14:4f:3a:68:85:c4:53:22:ec:44:82:0c:a8:a4:38:ce:
5c:3f:00:48:73:b1:62:77:f9:a0:ea:23:49:0b:9e:30:63:48:
01:19:0c:07:ff:38:5d:aa:2b:33:3a:82:82:0a:05:e7:f2:be:
7c:ca:ca:ed:63:87:cd:f4:a6:83:10:74:e8:6e:ad:0a:29:47:
fb:56:00:f7:70:ec:09:a0:9a:25:09:7d:54:ae:f3:14:92:19:
7f:5b:90:5d:ee:de:a4:45:42:40:bb:24:7b:a0:52:7f:5c:a3:
28:26:3b:02:78:b6:34:a8:ed:ed:d6:cc:63:25:cb:96:57:f3:
37:ec:42:34:73:b7:e7:76:8c:5e:80:f3:24:ec:f8:14:7f:60:
74:23:9f:a8:52:b9:8d:04:51:5e:05:f6:f5:09:22:cb:cc:df:
bf:c5:d9:82:b7:da:9f:1f:45:9b:10:61:6f:cf:f3:fc:f1:0a:
a3:6d:24:ef:35:ae:48:49:88:bb:69:c7:08:52:76:3b:0a:a1:
ab:88:6d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:14 2025 by rpki-client