Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
File: lCWIuR2pzKgbSeYDqYjiseq93Jg.cer (raw, json)
Hash identifier: ettRIyYzBQE2rK1vW2l4pP0yGKjheh+CZeehmWvkM9U=
Subject key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195FBE4538E584C48862A6CF8A145F5DDC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Apr 2025 13:43:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a0f:3a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:e4:53:8e:58:4c:48:86:2a:6c:f8:a1:45:f5:dd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 3 13:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:73:1e:d0:ba:2f:7b:ad:7e:f3:54:ae:24:
e7:77:5b:c1:62:b7:82:ee:af:1b:ae:78:31:1e:51:
5f:5f:75:fe:79:fe:dc:56:88:d8:67:37:1a:f8:8d:
b6:fe:90:d6:0f:73:13:af:a0:d9:f6:09:07:8f:e3:
f5:0a:de:a6:e9:3a:2d:3a:19:be:e1:33:83:1d:b4:
1a:36:f2:8a:a3:0c:cf:68:af:9b:aa:5e:70:7c:15:
55:32:cf:c7:12:ba:db:77:c4:94:7a:6d:f0:64:00:
14:ab:4a:8f:cf:c5:2c:d0:f5:57:58:74:cd:4e:a7:
51:78:bf:cf:41:7e:70:5b:c4:ca:9d:66:64:53:29:
cb:70:4b:55:92:de:74:33:31:61:75:82:27:de:ba:
0d:e7:4e:ce:a4:f4:23:02:ec:94:d5:58:d7:13:c6:
f8:64:53:0b:d9:f0:89:35:78:9a:96:70:22:47:5c:
10:93:09:51:11:61:7d:36:51:38:7f:22:af:34:51:
98:e1:3b:18:02:a2:19:a9:69:79:ac:f9:bc:29:0e:
b5:5d:be:f6:9e:4b:00:e2:70:f7:15:f1:19:4e:ed:
d9:e8:75:01:ef:d4:01:0a:7a:ee:6c:95:aa:05:d2:
4d:b9:88:e6:49:26:63:17:4e:cb:de:bf:6d:90:1e:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3a00::/29
Signature Algorithm: sha256WithRSAEncryption
89:0c:c5:76:18:00:c1:d7:41:ac:a3:3a:39:0e:88:95:19:c9:
b5:26:5d:30:15:89:34:24:f2:c5:25:05:c1:55:c3:de:96:5b:
39:45:6e:50:da:3e:eb:35:9f:04:45:22:5a:23:21:5a:44:6d:
24:1b:9e:7a:7c:74:72:4a:be:c2:90:63:96:95:bb:1c:1d:b7:
c1:27:98:63:ef:a3:8b:ea:7d:dd:7c:f2:42:85:08:62:7a:27:
8f:3e:4f:61:08:57:35:6e:50:99:be:a7:c9:72:9c:81:5a:a7:
52:72:fa:cf:67:e9:6c:10:5a:18:c9:38:b1:0c:c5:59:df:e9:
eb:54:0c:a0:97:a6:37:ff:20:13:a7:2a:38:33:fc:0b:04:e4:
e8:e5:c1:20:9d:38:c3:ea:7f:d0:6a:91:53:d7:fd:f9:0d:71:
95:e2:64:0d:59:6c:fd:92:6f:e6:26:0b:4e:74:c3:8e:04:f5:
95:84:e9:51:c6:b5:b6:b6:05:fd:ae:5b:5d:a5:47:da:2c:57:
41:6c:c3:16:5f:7e:30:2e:bc:95:b2:fe:18:7f:3f:22:93:47:
63:ed:a6:bb:ac:49:ee:79:6f:5c:8b:69:86:69:b3:22:77:74:
da:a1:2b:06:e9:bf:78:f1:a6:0a:70:e2:40:41:2d:d1:3a:b1:
45:62:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:43:29 2025 by rpki-client