Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
File: urIywdctwcq72hbIcOyUHUWKn9w.cer (raw, json)
Hash identifier: +oi1axyvSPF+u//WygYzdvoWMLQPAJJEFxqgtaOsSqY=
Subject key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BBC73E0E411DE47FBA709834EF6B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.214.82.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bc:73:e0:e4:11:de:47:fb:a7:09:83:4e:f6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:74:bc:84:89:37:d5:e9:ba:65:b8:32:9b:
70:91:95:74:de:3b:74:15:62:fc:ca:b3:60:aa:be:
86:60:11:0a:58:77:9b:34:44:79:b8:ac:03:ec:ee:
4e:ad:19:cf:b1:82:4e:96:a8:90:d5:77:2d:59:ab:
9c:78:18:68:d9:d7:ed:1b:7d:1f:b9:57:97:2b:36:
46:bd:7b:c1:23:9a:07:02:4f:26:ee:28:01:e3:47:
da:bc:ae:69:f6:7b:95:d5:ff:e7:48:7b:60:e4:95:
18:ba:21:3a:6f:00:fe:25:55:29:b8:eb:c8:72:a3:
25:b1:85:ba:7e:33:77:dc:88:01:7d:05:6b:02:23:
65:86:2f:17:31:c0:c5:45:a2:e5:ee:b0:b8:ba:a9:
3c:5d:f5:17:3b:68:29:fa:80:f7:9e:95:c6:ca:89:
86:08:07:5b:4c:a3:06:8e:59:52:0a:d9:af:1d:b1:
8c:85:77:17:88:99:64:d9:b6:fd:4b:eb:ca:89:6d:
26:f3:64:54:44:57:b0:39:e9:4a:23:e4:b2:69:ae:
53:09:74:33:2d:f9:45:c1:5d:16:72:fd:f1:a5:18:
e8:8a:9a:1c:b4:3c:41:02:04:38:85:da:19:0e:5e:
21:be:83:d6:98:7e:da:53:dc:38:0e:82:b5:00:19:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.82.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:a3:a9:81:fc:5e:d7:45:69:95:0e:6d:0d:0e:57:34:e9:dd:
28:d3:91:83:99:9e:13:8e:a1:70:3d:d1:6c:21:7f:bf:41:75:
53:74:64:6a:9b:67:3c:53:38:bd:19:ba:6a:d6:7e:55:85:f3:
35:fa:f7:55:d7:64:7c:dd:e9:82:a3:6f:72:26:88:4e:a7:c7:
47:ff:7c:9e:a9:ce:2c:4c:e4:a9:f7:dd:94:15:51:28:41:6f:
2d:f0:04:44:03:f6:c5:ff:95:e4:97:4d:25:5a:2a:a3:0b:31:
4d:97:94:e1:37:d1:54:73:49:4a:3f:78:fc:69:0a:38:4a:08:
bd:2f:5e:76:d7:d3:61:71:ca:84:bc:b8:6d:3f:7f:5c:57:ce:
bb:44:1a:bf:ba:f5:2c:84:93:6c:63:8d:20:5c:cd:f4:b5:cf:
45:08:26:01:5f:d3:52:f1:8e:2b:e7:85:68:f5:d3:35:79:e7:
b0:87:8f:05:90:f2:76:7c:41:38:b3:07:f4:04:7a:02:40:14:
4b:1e:85:e1:d1:ba:eb:21:18:7f:a2:52:1a:da:bf:f0:ff:52:
2a:89:ea:7e:1b:0c:08:1e:59:07:9b:86:82:c8:ec:f8:00:b9:
2d:42:21:f6:62:d3:ce:02:ce:99:74:17:e3:51:3c:69:0a:37:
77:89:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:04 2025 by rpki-client