Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.cer (raw, json)
Hash identifier: 4cs7AHt6dDEYp7O/dvtMVgSYmv7Bp+m28dm4VkJY93E=
Subject key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425204A82EA10B6693F6610F35A0089E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209828
IP: 91.241.48.0/22
IP: 194.5.236.0/23
IP: 2a00:7540::/29
IP: 2a0c:8dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:4a:82:ea:10:b6:69:3f:66:10:f3:5a:00:89:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7733e9de9485b44671c8e511da221e4153c711b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:a0:db:5b:d2:78:42:33:9f:2b:0f:f3:98:
6c:e4:43:81:96:1a:68:b8:b1:9c:17:e3:a6:3a:83:
33:c3:d3:0a:9f:51:03:a0:fb:44:b1:e5:86:13:a1:
08:ff:67:9c:d0:72:a5:1a:2d:63:4c:37:9a:ac:6a:
54:c7:5a:60:64:0d:35:8e:2d:4b:86:df:9b:7a:87:
fc:f5:55:0a:cf:c7:df:00:bb:9e:31:32:6b:e5:bb:
22:7b:3f:e0:77:af:f4:29:52:3b:57:d0:d5:10:f4:
ce:c2:0c:ec:55:38:43:b4:bd:28:83:90:d6:1f:75:
fd:26:1b:dd:7a:5d:78:be:94:e9:00:c5:0c:e2:bd:
32:61:b5:ea:58:8e:eb:3a:21:d0:ec:a4:7e:03:39:
37:34:69:55:6e:ef:bf:bd:43:e9:fa:d0:58:44:a0:
e0:3d:5c:87:82:1d:54:ee:7a:96:e1:cb:1e:d0:62:
81:07:fa:16:b9:fb:95:3f:4d:18:c6:72:9e:0a:e5:
a4:57:bd:12:ae:f4:1b:53:e4:30:29:a5:cc:59:a9:
e7:59:c3:de:2e:16:18:42:da:d6:f9:42:79:b1:89:
40:f6:c6:85:17:a0:0e:46:66:97:29:07:8d:da:b0:
25:e4:07:49:1a:43:1c:e5:43:49:8e:72:36:b7:28:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.48.0/22
194.5.236.0/23
IPv6:
2a00:7540::/29
2a0c:8dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209828
Signature Algorithm: sha256WithRSAEncryption
79:53:57:c3:dd:0e:47:2b:28:ab:7d:de:41:56:c6:6f:d6:d7:
ef:dd:30:d9:5b:31:69:eb:cd:ce:bb:ed:bd:75:74:af:0e:d1:
e7:4c:38:a4:63:57:b9:8d:c7:ac:e9:e3:1b:53:84:dd:98:6f:
cf:03:5b:fd:1e:17:e6:ae:16:d8:9f:9c:d5:d5:46:36:0d:17:
57:2c:56:b8:2b:4a:41:ba:68:71:c5:db:db:67:9b:71:8b:ba:
ea:dd:47:0f:b6:73:f5:73:6a:4a:7e:e5:5d:21:fe:1e:71:71:
9f:33:ea:20:9c:f5:aa:62:61:2f:7e:d0:50:70:8b:4e:26:47:
31:c6:06:b9:98:0e:3e:1d:5a:2f:6e:56:d1:5c:84:2a:b8:68:
b7:2a:cd:34:40:fd:60:dd:0b:d7:4d:37:35:22:e2:e5:1e:79:
44:f4:f4:53:74:41:66:89:3e:18:3d:11:55:ad:54:0a:2d:a8:
33:27:ea:75:41:93:29:43:87:84:9b:63:12:0e:14:32:0b:b3:
a4:fc:45:38:1a:17:f9:04:c2:1e:9f:ec:83:6e:a7:10:5d:77:
60:5e:f1:26:d4:e6:d7:9a:56:7f:5c:b1:54:b3:5f:10:cc:89:
6f:3e:89:67:58:1e:0f:3a:5e:11:28:6e:63:51:fd:fc:2a:88:
cf:a8:a4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:39:15 2025 by rpki-client