Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
File: vB0gk2YmtVdDxllFEt5C75-OkF8.cer (raw, json)
Hash identifier: 7XvCXdTEzB0hoyIfArl1ZK/9vzFgLx67dGXcLfAv4y0=
Subject key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB821BA87A70158BDEED9A6EE4711E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2.56.104.0/22
IP: 2a09:c240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:82:1b:a8:7a:70:15:8b:de:ed:9a:6e:e4:71:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:74:87:ba:4a:0f:c7:71:02:16:81:4d:8f:
67:be:86:29:3a:4a:f0:a7:f9:d8:78:63:0e:81:41:
82:25:cc:1d:82:c4:41:d1:c8:7a:54:e4:28:a8:fb:
1b:f4:53:db:f4:0f:48:b5:60:b6:2c:e6:47:3d:a3:
a2:0a:a1:cb:d4:a3:36:0a:60:28:20:05:d5:8f:53:
8c:a4:66:74:f7:7b:19:d9:81:e5:44:91:00:07:0d:
29:44:b1:56:9f:19:03:a4:f9:2b:c1:50:99:bd:40:
f7:b1:82:6c:59:20:31:08:ee:d1:08:3d:1f:55:07:
ff:c0:bc:ef:37:02:31:97:6a:15:e7:48:bf:41:ab:
3b:9f:e9:df:52:b1:57:fe:7a:3c:fb:84:a1:54:bb:
96:28:03:c7:e0:e0:88:d4:35:1f:04:0a:8f:a6:28:
b6:8a:dc:24:e6:bf:35:bb:c4:0e:3e:86:0d:ce:f1:
d7:1b:2d:ce:a6:53:f7:a9:d0:e0:ec:db:3f:d0:51:
ae:1f:ba:92:a1:da:c5:12:a7:70:2d:2f:2d:53:ad:
3f:07:79:bd:e5:c5:3e:c0:f2:85:33:9c:f0:22:45:
1b:ac:88:81:6c:26:40:d8:0e:55:c6:f2:23:e0:ab:
af:54:91:48:ce:27:ee:18:4c:55:dc:a3:84:12:ff:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.104.0/22
IPv6:
2a09:c240::/29
Signature Algorithm: sha256WithRSAEncryption
a2:00:d0:2c:7f:09:02:81:71:cf:45:d8:2e:91:ec:e5:ba:24:
f7:a1:96:f5:6b:bb:35:ba:56:a0:c4:9b:ea:d7:68:86:8a:d0:
d4:36:8f:00:63:83:ea:13:f5:b7:75:a5:30:c9:01:bb:3e:14:
00:2e:47:f0:35:9c:71:ca:65:78:6a:89:48:d3:58:63:47:54:
bb:02:bb:08:82:af:64:7b:92:c1:8c:66:a4:ee:f3:3a:30:4e:
95:46:70:7d:63:9d:5c:9c:89:db:79:5e:4c:ff:a1:f5:69:11:
7b:f0:9d:fd:0c:cb:92:30:28:4b:86:1f:a1:51:80:0c:c7:81:
bc:8e:a0:f5:e1:f7:a6:a4:00:af:ec:61:a5:74:55:fc:99:ec:
e6:93:01:c2:04:dc:29:89:44:ba:8b:d7:67:1e:82:c0:61:b9:
fd:34:fc:bb:71:ac:ef:21:51:6a:cd:77:9e:19:d6:13:69:df:
28:d3:2e:34:09:cd:56:04:e5:91:15:92:d0:fc:1f:1f:0c:66:
d1:77:06:c8:2a:55:68:4e:fa:d0:7f:03:9a:59:8b:97:36:3b:
f9:ab:27:13:ea:b2:93:8e:79:00:30:54:df:a1:6a:7d:cc:d4:
c0:21:a3:d3:ee:c3:86:b2:d5:a4:c4:4c:c8:57:95:91:e6:bb:
af:75:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 22:08:23 2025 by rpki-client