Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer (raw, json)
Hash identifier: nLbedrBTJHIL63hh90ZFxSiXw6mavPjWztKp8hqlqfo=
Subject key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC4B6A1AB3C17D0025886479795483
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.177.254.0/24
IP: 2a02:c480::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4b:6a:1a:b3:c1:7d:00:25:88:64:79:79:54:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:a3:05:36:09:13:7c:40:84:16:5a:7b:30:
bc:23:13:4f:67:e1:c3:ea:71:e4:60:ea:86:49:6c:
e8:28:51:c3:01:6f:d0:c2:41:56:c6:00:85:63:c3:
75:34:96:c2:c0:ed:60:52:03:fc:da:74:96:8a:3e:
85:6f:42:4d:27:c3:3c:ac:72:c8:d0:dd:49:09:e7:
97:2d:59:ce:01:1c:b9:03:35:8a:cc:3e:e0:e2:9f:
fd:94:d4:33:e2:3a:a6:d8:23:d1:a6:a6:15:66:a1:
b1:d8:ba:e1:fc:52:78:ae:d2:8b:02:fa:60:2a:ff:
bc:01:70:a1:cc:b9:46:64:0d:89:5a:7e:d0:00:dd:
2e:ed:df:f9:08:d2:8c:e3:3c:99:b0:79:d8:e5:6d:
b5:bb:e3:4f:9c:bd:e3:d3:2f:2f:97:0e:d1:b8:3c:
4b:fe:86:3b:16:65:bd:9c:a6:83:82:e8:40:40:37:
5a:b4:4d:dd:a8:8a:30:fc:e6:f3:11:70:95:61:fc:
e6:92:c7:33:0b:70:43:86:6e:20:c8:42:2e:23:67:
a0:ce:80:67:4e:4c:7a:e6:eb:d0:c5:18:a0:29:e1:
c1:04:3b:b9:95:eb:ea:80:e5:74:d6:c3:5e:81:c8:
ae:82:66:fa:8a:d3:b4:89:b1:22:fd:72:a9:38:87:
f2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.254.0/24
IPv6:
2a02:c480::/32
Signature Algorithm: sha256WithRSAEncryption
30:ac:1f:81:44:a7:fd:5e:cc:82:6e:94:b2:9a:5c:d7:08:68:
32:1e:24:b2:4d:1b:a0:79:99:54:3f:17:d5:ac:88:f8:e4:07:
4a:fb:be:92:29:ad:c1:d1:f9:e1:ef:0c:f3:0e:27:f4:70:b1:
a3:37:bd:11:da:48:28:ea:f6:90:35:b7:89:da:e2:48:0d:d9:
28:b5:8e:c0:f8:a4:68:44:f8:1d:28:ab:20:2f:86:b0:5e:4f:
1b:5b:9e:d2:bd:a8:d3:f3:95:9a:c4:6a:d5:7e:50:c6:9a:04:
f7:9b:af:18:f0:76:80:1b:88:f8:78:ab:3f:11:70:0d:a0:72:
c8:df:41:00:33:71:ff:7f:76:b5:98:d2:92:b6:ea:19:cf:e1:
86:ff:55:b1:df:7b:27:60:71:2c:05:92:7f:27:e1:70:3f:e3:
35:74:ca:f5:d4:ed:51:9d:5a:5d:09:79:97:58:02:68:08:86:
79:ea:ec:d8:0f:c4:bf:49:82:94:5b:d5:ac:37:95:64:3c:89:
9b:18:09:32:a6:0a:03:ad:0e:27:88:94:a3:07:a7:d4:90:a9:
17:e4:1c:36:4e:ce:87:9b:f3:03:db:48:f3:d1:7a:bc:3a:00:
60:c1:14:16:5c:2c:98:52:70:10:62:38:1e:9a:b4:1a:d8:61:
f4:79:1d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:41:21 2025 by rpki-client