Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
File: u_s2ccn8dGocpjRJVGVXyp6afW0.cer (raw, json)
Hash identifier: viKEtjEA0bIBRymZKpGFDeDyjKVe6U07YEXsDVa5l6U=
Subject key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424453B4CB81F3644FE3173AD058AC07A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.46.85.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3b:4c:b8:1f:36:44:fe:31:73:ad:05:8a:c0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:da:68:a2:ca:4d:99:49:b5:56:0f:6d:73:
7a:d5:85:5b:b6:40:35:e2:86:6f:1e:af:b3:2a:7b:
4c:f0:54:b3:26:02:b7:e7:19:3d:26:5b:34:12:a4:
d6:17:12:31:09:85:f3:39:b0:63:42:a0:96:ac:0f:
1c:64:b2:ae:5f:e0:6a:c8:b6:bc:84:7d:ec:8b:52:
0f:56:df:f4:97:29:99:71:81:ec:d1:d9:4c:c2:da:
51:a7:fb:c2:da:1d:2f:7f:7c:e4:bf:bc:dc:51:57:
2d:57:79:21:01:44:d2:f6:68:dd:09:2f:77:b5:c2:
c3:df:9b:27:59:3a:22:dd:01:f8:3e:65:04:01:64:
d0:73:9a:09:f0:d4:32:cb:0b:4b:f0:56:36:62:4b:
ce:72:e2:1f:88:62:f8:78:4e:ca:91:9e:d1:48:7f:
8a:df:4c:76:62:80:30:bf:f7:08:a5:7c:9d:43:50:
07:98:71:85:25:58:08:66:93:d4:a8:e2:8c:ce:7f:
5a:73:1a:88:e0:e3:21:e2:94:41:eb:c6:c1:a3:f6:
cf:48:fd:55:4a:8d:f2:59:f2:bb:87:e7:74:3c:3f:
8c:63:9d:c3:6d:a6:e5:48:59:d1:90:32:28:99:76:
44:ec:cd:40:80:f2:41:0f:50:e0:8c:15:bf:3d:51:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.85.0/24
Signature Algorithm: sha256WithRSAEncryption
32:2e:d5:10:a3:ce:6c:cc:20:2c:3d:67:ed:93:d4:9d:e2:cf:
e3:73:c2:8a:1f:cb:04:61:80:fb:8e:6e:ac:e9:c5:8b:dd:36:
f7:f5:12:df:35:7e:e2:4a:a2:cc:bf:9f:52:2e:7c:40:0c:c5:
7a:53:0e:d8:1e:aa:cd:26:2d:82:7b:97:47:1b:c7:fe:a9:f8:
d0:3d:40:b6:42:54:61:01:fd:8c:94:f6:db:92:80:f2:c9:ed:
67:4d:d1:14:b3:20:6f:1d:6d:3f:3d:91:96:39:ad:60:70:44:
5e:20:eb:8c:a6:2c:87:68:a7:74:26:2b:28:9a:b5:56:00:a6:
1a:ab:a7:35:c4:43:2b:9b:9f:9b:a2:75:91:3a:60:cf:70:90:
8b:e5:e8:4d:e1:13:4b:e8:10:68:6c:8e:1b:6f:4f:77:c6:f6:
dd:6c:9a:d4:4c:d6:41:d5:7c:be:6e:b3:4d:bb:de:c2:b1:0f:
32:a3:ec:87:ff:27:cf:93:87:54:a3:97:b5:a0:79:68:e4:99:
de:c8:f9:f8:97:09:ab:07:67:4e:94:3b:53:72:90:1a:07:17:
15:12:47:e3:7e:cc:da:7c:21:e1:ff:da:81:9e:11:fe:49:0e:
93:aa:4e:03:4f:77:af:3b:8c:aa:56:1c:5c:c7:e2:78:2b:83:
e9:8f:07:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:23:43 2025 by rpki-client