Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
File: sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer (raw, json)
Hash identifier: TeRVmgol1/QBYPqs2ngQxrQDlFfuuVQCTJVUbshcmGU=
Subject key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274801CADBDE6B84E194BBBCF3E0BCAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.152.134.0/23
IP: 94.140.0.0/24
IP: 185.180.84.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:01:ca:db:de:6b:84:e1:94:bb:bc:f3:e0:bc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:4d:cc:b8:16:b6:9e:b8:0d:ed:81:59:8e:
cd:56:8c:5c:7a:31:f6:a1:6c:25:23:e9:4d:bb:78:
8b:7e:e4:50:5c:54:26:05:c8:13:1d:7b:65:06:06:
9d:84:73:cd:c3:c1:ea:23:6e:c7:c1:4c:d1:8c:59:
4a:ca:2e:d9:2e:6e:5a:b4:9d:8a:ba:33:cd:63:c8:
1f:8d:0f:df:35:b3:a7:e7:74:61:aa:17:96:58:81:
79:1b:8b:d5:7f:c8:a0:25:be:4a:cf:7f:b3:9c:58:
4e:36:1d:f1:bf:26:88:5b:aa:7d:cd:f9:70:1d:c1:
84:4b:dd:57:a5:9c:9d:11:c3:f6:84:39:30:be:72:
93:30:eb:0a:71:5a:d9:3e:ec:ad:7d:0e:ea:e3:15:
94:6f:27:b0:8c:5c:88:6b:b9:dc:e7:0a:b3:e0:58:
26:2c:45:31:44:ef:96:ff:1c:e3:54:6c:54:da:8a:
8b:ed:15:7b:de:ac:2a:0d:4f:ef:c1:ac:47:1f:15:
51:1c:ab:52:ae:55:0c:b7:e5:c7:45:ab:74:35:74:
85:99:44:21:02:e5:2c:a9:ab:21:be:be:b5:89:b3:
6d:7b:e3:97:bf:f7:04:8b:ae:79:c9:32:fe:2a:60:
a5:57:b6:2f:a9:f2:48:d4:98:9d:c4:70:b9:a7:8c:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.134.0/23
94.140.0.0/24
185.180.84.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:01:f3:73:b0:c8:98:b8:fd:b2:08:60:46:36:76:59:ae:4e:
a2:8f:fc:0a:97:5c:da:47:3a:e3:45:26:e0:f0:bc:ba:df:f3:
e7:a8:e1:90:41:e0:2d:9f:d7:5d:94:c8:95:e2:e0:0f:19:6f:
54:d3:41:f9:4c:20:02:a4:42:8b:ec:71:be:69:6e:1f:de:ea:
fc:6d:d4:44:38:37:ae:41:fb:8b:07:51:1a:f6:a3:62:90:2f:
30:82:04:ec:42:19:2b:d5:f1:27:f4:91:ba:3f:32:c2:22:c7:
59:64:cf:d1:9a:d5:6c:0c:93:7a:e8:a3:85:61:eb:5d:a3:a2:
2e:05:c4:73:21:87:04:c2:ac:2c:29:52:71:af:ed:67:72:49:
e8:74:73:3b:7a:da:5a:61:ac:0b:4b:f8:f4:89:bb:9d:78:aa:
35:14:a6:8d:2f:96:42:ca:f2:f4:f8:42:fa:91:54:5b:7a:dd:
36:7e:71:64:a9:f2:32:88:e3:8b:af:ae:28:c4:02:f0:4a:56:
95:75:2b:25:25:d9:b7:a7:8b:51:81:ee:2a:2d:04:70:ba:e4:
33:40:62:37:99:12:a0:e5:d0:5e:c7:b2:21:53:57:89:28:35:
61:2f:22:e5:af:4c:7b:9f:41:4b:2c:95:61:04:df:c5:c4:b7:
1e:e4:4d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:26:22 2025 by rpki-client