Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
File: s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer (raw, json)
Hash identifier: Bo3UqmAu0sl2U6iJxSyKmzbf9un/AKEY8o53xaUDxiE=
Subject key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421446254F19E171FE3F7B2DEC8AD5BA3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 153.92.42.0/24
IP: 155.133.195.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:62:54:f1:9e:17:1f:e3:f7:b2:de:c8:ad:5b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3e064e17335fdeb83a09862a735a6e97762d973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:b5:99:1e:a5:26:92:0f:2f:7b:68:66:3d:
b4:c9:59:d6:39:26:90:30:4c:80:ae:08:1c:5e:b6:
08:40:ed:b7:f9:67:2e:51:a1:70:e4:08:13:2d:4c:
0e:ae:27:3e:5f:f0:8b:76:98:96:5d:fb:a9:43:c5:
b2:65:81:d2:1e:e9:7a:0f:31:32:f9:d4:a2:aa:d6:
fe:58:93:34:46:f2:a4:6d:97:7f:35:37:71:00:14:
54:0e:d3:b0:f7:2b:97:db:ec:8e:fe:46:3d:0a:65:
b0:db:c1:74:c8:a7:31:51:81:24:1c:ec:d3:a8:94:
30:2b:66:eb:ee:38:46:e0:5f:cf:f1:89:13:ed:61:
cc:5b:c0:f9:f3:a4:2e:da:6a:72:5a:68:5e:f7:ee:
a8:48:72:ac:b0:c9:bd:97:47:92:c2:41:eb:24:7c:
6d:3f:02:d2:48:52:93:dd:91:3c:3c:38:b7:05:1f:
dc:26:80:8d:b2:64:8f:7f:5c:6b:04:88:6c:64:03:
60:3e:0a:50:48:8a:25:36:b9:3a:e8:9d:55:aa:81:
33:20:bd:19:5e:e0:af:59:36:e1:bf:e3:40:85:75:
fc:41:43:1f:98:6a:9c:16:89:f3:80:fd:dd:e9:5f:
3b:c4:3d:b6:f7:b9:95:55:bf:93:ca:18:e5:8f:0d:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.42.0/24
155.133.195.0/24
Signature Algorithm: sha256WithRSAEncryption
35:50:3a:3a:ec:7d:56:be:4e:04:4f:3a:8e:ed:cc:68:41:c2:
fc:eb:7d:cb:00:6c:1b:93:05:dd:de:90:91:d0:8f:5f:52:0d:
e0:c9:6f:46:da:97:af:ea:57:e7:68:6f:f5:78:a8:ff:60:8a:
87:8d:24:c4:c7:12:75:28:7e:7c:32:4a:bc:6d:72:d6:0f:1e:
3a:ca:f9:8f:c8:af:42:8f:33:e7:e2:e0:2b:f1:3f:41:6c:a3:
03:ec:5c:68:2b:e1:23:d8:44:90:74:f8:a9:85:be:17:42:c4:
59:21:ea:5e:e4:da:04:bb:4f:69:df:24:5e:86:e1:45:4c:b9:
a5:14:79:61:af:c6:e0:f7:0e:af:41:1c:8a:5f:ee:cb:35:75:
08:d5:93:7b:62:d5:26:fc:8a:62:0d:51:fc:1c:1f:63:1e:d0:
19:79:73:87:6f:17:c2:ec:4a:ee:b0:03:de:0f:64:d9:aa:e2:
ab:ab:f4:ed:ed:93:4f:7b:18:75:77:b5:9d:2c:aa:e1:ec:78:
10:19:7f:74:bc:d9:a3:61:f7:60:e0:b0:2d:eb:c3:d1:72:43:
8d:1c:3d:7b:dd:63:8b:7f:92:f7:95:eb:76:dc:26:60:36:aa:
cc:fd:59:61:5d:11:14:ab:98:a2:b9:2c:2a:cd:2b:54:82:38:
ba:71:59:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:15:09 2025 by rpki-client