Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
File: m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer (raw, json)
Hash identifier: pKQslLRlIaQNQGllp7jKQqA53nqTV7Bqvz9TOV+BXdE=
Subject key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F3C60642C81CD3AEC30B1F1F266D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.194.0.0/23
IP: 91.194.14.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:3c:60:64:2c:81:cd:3a:ec:30:b1:f1:f2:66:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:3f:b9:68:c4:5a:3d:82:b7:85:d8:c5:88:
d1:43:df:02:c3:c6:b1:4d:d8:1a:71:05:59:73:3c:
c4:fa:19:8b:7f:f1:bb:79:0f:93:56:9a:ad:a3:69:
eb:f5:79:59:73:f1:a0:2c:8f:39:ed:c2:57:65:5b:
07:9b:02:d6:4e:f8:d3:a1:9e:a3:3f:42:3e:6c:61:
16:db:14:6f:9c:cc:db:df:7b:17:39:2a:44:00:f9:
1e:7b:b2:4d:2b:31:d7:77:1f:2c:59:11:71:70:bb:
f9:3b:92:bc:56:6f:b9:d3:59:38:2e:53:40:f0:cd:
ec:c9:1c:d4:14:a7:83:fd:2a:0f:61:22:31:46:78:
f7:d8:94:63:2c:01:10:e4:20:cf:6e:0e:b0:20:56:
a2:8a:cd:45:91:0b:0d:cc:96:b0:f9:18:71:f9:ec:
6a:5e:53:8a:6d:f3:30:6c:ea:6a:d5:4c:db:da:94:
4d:e8:34:af:e1:0c:12:ec:d4:6c:f4:dd:57:f3:cf:
fe:4e:62:49:92:ea:a8:4a:b0:89:f6:6f:4c:80:59:
b0:de:3e:46:ac:1a:d6:87:ce:bb:63:d4:e7:a2:09:
ba:2b:57:51:23:9f:11:85:75:a4:ea:2d:c2:f7:88:
76:36:79:d4:8b:d1:a1:34:19:f5:2c:11:56:99:01:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.0.0/23
91.194.14.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:55:08:69:6e:ae:b3:05:bc:19:95:2a:5b:f6:bd:ca:0a:f9:
a5:00:7b:e0:39:06:41:79:21:21:f2:cb:58:b7:17:7f:a4:2d:
5d:b0:33:b0:82:20:e3:db:0d:2d:6f:c3:b0:e9:5e:46:e3:fc:
4c:e8:b9:10:8f:cb:cf:b0:47:a3:2b:95:c9:ac:cd:1b:91:d9:
94:cd:63:8c:5b:41:f8:9c:6b:85:9e:05:3f:0b:b6:b8:76:52:
33:9c:96:12:0e:40:8d:7b:06:22:95:88:72:a9:0c:9f:b5:77:
59:7f:31:a2:aa:7c:bc:27:09:f8:96:41:81:96:b1:a2:1b:87:
77:42:98:33:2d:39:2a:7a:b7:af:2c:f0:a8:80:95:86:4f:98:
3b:d8:5c:90:ac:71:90:0e:2a:5b:15:c4:8c:fe:66:32:c3:0e:
27:f2:71:4f:23:1c:e5:58:36:35:7e:b6:58:52:c3:bc:9c:58:
d9:c4:d6:9d:d1:f6:dd:69:06:56:8f:4c:e2:6b:3e:10:2b:20:
03:ec:b1:f8:b6:90:61:20:fa:95:de:d4:54:2f:d9:81:c6:be:
8b:cf:40:51:f1:a9:b9:4c:74:c6:79:cd:4c:ce:89:f2:1a:e3:
0d:40:14:59:79:72:38:d0:02:fd:39:89:e0:7a:1f:72:2e:11:
1a:b4:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:33:38 2025 by rpki-client