Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
File: rm8YQW19RwqgStALyldoPHidhU0.cer (raw, json)
Hash identifier: KXjWktNnhKzQ0c1aQsOX4g3BUszBTp1mmwZiVb2vl2Y=
Subject key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A339A95096CFDFC7A3309C81FAD4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.73.242.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:33:9a:95:09:6c:fd:fc:7a:33:09:c8:1f:ad:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:01:2f:6b:66:39:77:f6:cf:73:2c:e2:23:
1c:83:23:20:6e:70:9b:69:60:d2:9d:d9:77:68:93:
08:0e:f9:a6:96:71:53:c5:04:fb:a3:35:3b:d2:fc:
79:45:cc:a7:a1:91:84:3e:30:60:64:fe:af:c7:a1:
32:c8:6d:03:e4:18:f1:a9:7b:2a:aa:5d:2a:d6:83:
3d:5d:9f:61:fc:02:fe:fd:b7:85:29:e9:1d:2f:04:
a9:f3:4f:b5:c1:6a:40:9b:55:ac:d0:22:e0:d4:6a:
a7:d8:e5:1b:64:1d:5b:96:73:4c:ff:67:8e:68:b8:
41:8c:b9:15:8e:e6:a2:4f:2e:e2:34:36:71:89:37:
63:c9:6d:e5:fa:79:86:da:49:9e:c8:ff:ab:92:91:
e7:c1:0b:8f:7f:96:84:26:72:df:7d:9d:85:e6:53:
b5:aa:3d:4b:c5:81:64:ab:39:78:62:0c:01:82:81:
06:0c:c5:b9:af:d2:e1:eb:5d:2f:b2:68:47:66:3e:
d4:a5:75:29:8d:c1:72:cf:03:31:27:ee:d2:c4:58:
30:73:ba:36:f3:4b:c9:71:6e:dd:a1:ec:ac:01:cc:
76:08:cb:cf:16:96:bb:55:dc:d9:ff:66:f2:fe:1a:
e0:d2:da:29:39:82:31:a4:af:a0:e0:58:9a:70:b0:
34:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.242.0/23
Signature Algorithm: sha256WithRSAEncryption
70:9b:40:58:54:fa:d5:23:6e:21:63:37:fa:b6:5e:42:bc:53:
2d:8d:45:9a:7e:6e:24:91:23:38:b1:d5:1b:54:21:45:77:f3:
90:07:0b:de:52:53:ce:8d:2e:8f:d7:e9:2b:05:3e:7e:42:47:
fc:27:de:5e:1b:55:6a:f1:b4:a5:02:a6:62:a6:5e:fc:69:ed:
a1:fe:74:37:5e:22:d9:aa:55:e5:05:2c:3c:d3:49:ec:c0:c1:
ef:eb:5c:d6:3e:88:f5:42:97:43:fc:60:7e:76:1d:9e:25:b6:
0a:1f:6d:8e:43:6d:b4:b5:0f:b8:81:8a:bd:37:16:c6:cc:89:
60:51:63:eb:dd:d1:01:13:4c:21:37:00:ec:87:28:f9:c5:2e:
12:7f:1f:0a:66:ab:f0:28:e5:71:f2:0d:b6:0b:5b:28:0c:08:
90:17:c3:58:f8:d9:28:3f:08:94:2e:b0:e0:43:ec:3e:4c:ab:
87:31:a1:02:0a:22:36:88:ee:b4:86:da:00:3b:b4:79:0b:5d:
37:ee:66:31:03:ec:d1:bf:fa:fa:d6:70:e5:32:ac:30:16:2e:
9f:81:94:94:8b:b0:ea:0c:3f:38:67:7d:05:72:f5:18:7e:94:
cd:c6:2d:a9:ed:59:10:0a:ba:74:1f:4b:c3:ed:04:65:b2:15:
69:4e:ba:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:32:31 2025 by rpki-client