Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.cer (raw, json)
Hash identifier: xekfwCHtC/7ElMHTDqWA+tDBDrbtEn623GcfAfwX8Go=
Subject key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196EE7124A1B764B794D76DBD00288758C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 16:05:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.126.196.0/23
IP: 185.216.52.0/22
IP: 185.252.172.0/22
IP: 188.208.28.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:71:24:a1:b7:64:b7:94:d7:6d:bd:00:28:87:58:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 16:05:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:bb:e4:8f:be:bf:c1:4b:80:e9:92:50:52:
5b:7a:e5:2b:72:1b:35:d6:d4:dc:e7:bb:dc:3f:29:
70:cc:1a:6f:fc:88:02:f8:13:00:e4:8e:df:f4:ea:
b3:9c:41:aa:d4:26:b5:29:9f:50:2e:59:42:a7:9b:
e0:ba:26:bc:78:c5:05:7d:e4:b5:d6:f7:7b:32:3d:
3e:7b:40:e0:02:26:0c:cb:c0:72:6b:df:b2:be:d4:
0e:11:6a:33:45:41:35:ad:60:60:80:7f:96:d3:ab:
33:ba:ae:c6:50:61:af:f1:e4:87:bd:65:43:24:86:
37:73:bc:14:e4:7b:0c:61:c3:6e:8c:5a:94:9a:3e:
39:05:5f:b6:96:27:cd:f5:be:20:99:1d:03:3c:d4:
c2:5f:a1:ed:29:44:66:d3:e3:35:f9:c2:0e:b5:4c:
5f:34:e0:e5:78:43:4b:e0:ca:34:75:4e:fb:f4:87:
8d:af:aa:b5:95:9e:7e:b5:3f:2c:1a:9e:74:f4:88:
4d:75:86:2b:71:26:ce:97:cd:68:c8:ef:9c:1b:a8:
6e:a8:39:4d:77:bd:cd:f1:79:ad:c4:18:23:0d:40:
d2:f1:ae:2e:94:f4:27:ac:a6:aa:10:b7:85:99:17:
51:2a:34:e8:83:d1:e8:44:85:f6:f9:26:91:c0:ff:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.196.0/23
185.216.52.0/22
185.252.172.0/22
188.208.28.0/23
Signature Algorithm: sha256WithRSAEncryption
63:2a:01:06:c4:ea:e1:c9:a5:75:5d:cd:2a:47:ea:65:d0:4b:
e3:6b:d2:9e:52:80:5f:d6:79:3a:49:bf:25:2d:20:9a:95:fc:
e0:41:f6:8a:80:f2:ae:f3:2a:b4:ab:81:f4:dd:e3:a5:77:6e:
78:1c:9b:e3:f5:af:30:a5:d5:67:2b:bd:6f:0f:f0:7d:5b:3d:
92:2c:68:d3:ca:72:2c:5d:7f:b1:df:bd:72:e4:b9:06:1b:a0:
c0:0d:8d:a9:e8:a7:21:fd:44:4a:c7:60:58:52:ec:64:11:3d:
61:8b:d5:3c:9b:19:b9:cb:04:99:d6:99:11:f0:9a:fe:21:02:
ef:53:a1:ff:8a:8d:f1:3a:7c:f9:c5:2b:3d:dd:9e:62:e0:06:
6f:e0:1a:3c:d1:bb:6f:c8:21:b1:93:ac:af:9c:1d:e9:7c:b2:
8b:64:b7:88:63:ea:11:78:1a:59:6b:d0:13:31:5d:8d:43:a7:
17:0d:d4:c1:c8:c7:45:41:17:c2:18:03:07:31:9a:0b:59:9d:
62:a2:bf:f3:4e:b4:9a:62:1c:9e:2c:03:da:86:7e:bf:ca:0b:
78:f5:ec:d3:51:22:c3:64:8f:da:f8:f4:cb:41:03:3b:22:af:
d4:52:f5:95:a2:e1:21:2c:df:b6:b1:74:7a:2f:da:f2:ff:08:
83:67:e5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:13:45 2025 by rpki-client