Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
File: wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer (raw, json)
Hash identifier: JhmRyQ9EZvZtTQrjEyk/Ce/jZfcO2pAbSS74oP0oYYE=
Subject key identifier: C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422202E62ABC59679AE66B88F309939A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43259
IP: 89.145.168.0/21
IP: 185.177.64.0/22
IP: 2a00:a2c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2e:62:ab:c5:96:79:ae:66:b8:8f:30:99:39:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:86:5e:59:a1:16:60:58:ae:a8:b1:ef:98:
c6:f9:7e:f7:33:e0:c7:a1:b3:64:46:5a:a8:94:c5:
c4:bd:43:84:70:bc:16:cf:41:2e:a8:3b:5f:3b:ea:
92:ab:c8:37:6c:70:fc:c6:2e:01:7b:a8:e6:37:1b:
a3:e3:5e:cc:3f:cf:b8:29:ee:d8:51:0e:06:55:33:
cc:df:85:b2:9f:04:02:6a:a5:26:68:1e:59:5b:2a:
71:b8:b8:2d:c5:46:8f:0e:f6:f2:4e:e8:0d:6e:18:
33:bd:dc:fa:6a:c2:22:d4:dd:41:84:eb:03:06:8f:
46:b3:65:40:ad:ac:e4:93:cb:29:bc:c6:76:a0:55:
fa:5c:e7:33:ca:67:ef:ce:d2:7d:29:d9:33:86:67:
70:57:fb:bd:f2:d7:52:52:f3:62:e6:82:10:42:74:
d1:35:00:b9:ee:a9:29:7c:fb:dc:12:cc:49:46:7b:
82:d3:dc:37:85:93:d1:c8:02:a6:7f:c9:dd:b5:41:
a6:d2:cf:a0:5d:d6:67:3e:97:c5:71:85:14:ef:06:
da:a9:4b:d9:08:56:a0:12:2d:f5:89:97:d6:40:cc:
40:86:31:16:6e:e8:a6:f0:a7:b1:cf:e1:76:b7:3f:
c3:c7:78:eb:e4:13:11:d5:09:cd:24:53:65:66:99:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.145.168.0/21
185.177.64.0/22
IPv6:
2a00:a2c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43259
Signature Algorithm: sha256WithRSAEncryption
23:96:a9:04:f6:d4:87:40:ef:ed:55:34:f4:be:ea:4d:9a:42:
51:dd:90:07:06:1f:b7:2c:f5:75:86:ee:23:bf:e5:35:7f:09:
12:79:30:fc:86:53:5d:6a:23:0b:0c:54:0f:45:94:a3:a0:a8:
44:58:d0:ca:66:4b:90:78:cd:a4:b5:c5:4e:77:72:75:5d:ad:
13:ca:14:dc:62:bc:0d:3b:8f:88:b9:88:5c:1a:30:94:28:0d:
0f:08:e4:9f:d8:20:07:6c:94:4b:e9:c6:32:f2:bb:3e:03:03:
6d:8c:62:68:6c:ae:35:53:de:fc:40:a2:8b:85:20:4e:bb:25:
67:87:2e:7e:cc:1b:66:ab:ef:69:6c:60:da:c6:ad:41:fa:86:
83:13:da:50:e4:4e:06:80:5a:58:9d:76:12:bb:1b:a4:81:30:
f8:9b:c2:13:41:97:80:3b:7e:aa:4e:8c:c9:9a:55:a6:e1:c3:
b2:49:e6:52:2b:d9:e7:cc:95:09:75:b1:e7:bf:19:19:86:e1:
be:f3:12:49:f6:9e:f6:00:8a:ea:d9:76:85:7f:b9:9f:60:85:
cb:9f:8f:d5:3f:15:c2:17:6f:b3:98:1b:27:4a:36:41:d0:13:
ff:5a:4b:4c:74:5f:a1:c3:86:78:be:32:ce:af:ff:f7:df:d2:
72:85:4e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:33:44 2025 by rpki-client