Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
File: vZC8PjcRQLQqIdaX2DANlBCiSao.cer (raw, json)
Hash identifier: dNTMiIao7dtngbN3UGaOEnseeEEw8xGEARNyQEEnYyE=
Subject key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C071CC2AB3F920F938875C1DEA553
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.234.41.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:07:1c:c2:ab:3f:92:0f:93:88:75:c1:de:a5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:6e:d1:cb:6b:9d:0e:ed:33:b4:63:85:56:
bf:c8:55:c5:87:4d:cc:54:49:23:60:ee:aa:aa:5b:
51:ff:f4:35:0a:d4:93:03:67:cc:1b:5f:26:3c:16:
a7:7f:02:5b:4a:fe:e3:39:00:79:56:4d:e6:a6:77:
d6:4a:6d:bc:7a:6a:14:0a:4a:a9:15:e3:4d:0d:07:
73:04:b4:cc:31:a8:a4:c2:4f:f6:3a:25:d5:5f:39:
34:0a:7b:e8:bf:da:d8:f5:e1:e7:03:a7:22:79:98:
4b:cb:60:0d:f3:76:a3:1a:c4:67:37:dd:4e:ec:96:
6c:dd:4b:d0:14:66:2f:6c:97:d3:5b:5b:d7:03:14:
ef:7d:40:66:cb:c4:a8:12:e3:83:ba:e1:61:ce:31:
9a:f9:07:81:00:84:16:2c:62:7f:2c:03:f6:c5:2f:
70:1b:5f:06:d5:00:a2:c2:50:82:42:2f:39:0b:2b:
67:46:20:ce:f4:f1:72:5a:3c:07:a2:74:2c:0e:e9:
30:38:9e:29:69:05:0a:91:dd:4b:44:2f:4f:56:79:
5e:be:46:c0:0e:e8:69:f0:59:b0:62:3e:09:d0:c5:
ed:85:d7:b3:37:d8:eb:7d:29:5f:9e:3c:b3:46:ba:
ea:9d:bd:94:8a:fb:1c:db:37:b3:81:a6:61:0f:11:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.41.0/24
Signature Algorithm: sha256WithRSAEncryption
03:57:c9:ad:cb:29:34:4e:7e:b7:a5:b9:b6:95:ea:b5:94:47:
6b:aa:74:aa:1c:23:13:24:57:f2:e3:ac:f9:c2:e0:b1:ec:ca:
9c:86:91:79:ac:75:5a:d8:a5:f8:e2:b7:52:fe:7a:9e:7b:46:
db:e1:3c:81:66:49:b1:b3:9c:df:bf:59:be:f6:1f:8e:47:e2:
c7:ba:d0:cc:3e:2c:43:7b:25:81:e6:2b:46:11:9b:31:ba:a2:
01:64:08:bf:90:71:2d:23:cd:7a:2a:ed:50:a8:28:9a:36:55:
26:c9:fd:38:d2:cc:aa:af:a6:33:7f:78:0e:29:09:17:71:8f:
ba:5e:42:36:66:0a:55:78:69:cb:c8:cb:9c:e6:d6:7b:7b:68:
d0:d9:dd:9f:83:bd:7e:1c:53:83:29:92:68:0f:71:f6:26:48:
89:d7:05:0a:c8:26:49:89:fd:a0:bc:e5:0d:51:f1:42:af:61:
09:09:9f:c9:d9:1b:61:a7:34:fb:4f:9d:32:6f:a6:6e:ce:4a:
48:52:d1:45:4f:94:36:5f:e0:f4:f6:fd:71:3d:73:11:86:9d:
90:51:74:d9:80:df:6e:b5:72:87:2f:56:89:c1:00:5a:e6:a1:
ec:9f:6c:e6:5f:6c:5a:f4:75:16:ca:e0:c9:cb:10:b6:7b:d3:
65:1a:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:06:22 2025 by rpki-client