Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer (raw, json)
Hash identifier: PjIxCfGOpqu9RT9CqYGRAgvt8U3aODPD6jM2KdErnAQ=
Subject key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D666C955B298A2F288BC9B8D541708
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 37.1.168.0/21
IP: 37.252.200.0/21
IP: 185.15.32.0/22
IP: 2a03:b7c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:66:c9:55:b2:98:a2:f2:88:bc:9b:8d:54:17:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8d335041718b18830b1f58c15d3518510fe6118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:14:20:7f:05:13:e2:17:24:4a:f6:07:a9:
0e:cd:0c:70:07:1c:50:da:f1:81:f5:62:3e:04:ef:
12:25:59:4e:c3:f2:b5:04:97:a9:49:7d:d6:25:28:
22:aa:a4:67:1f:56:ad:6b:65:9b:b2:00:5f:84:00:
5a:42:e1:57:69:54:39:16:3a:8f:b0:fc:17:1d:30:
ad:a8:6e:bb:b5:83:c1:86:13:64:e8:4a:db:11:fe:
05:8a:6b:06:d9:83:79:a5:3d:7c:3d:bc:2a:75:ca:
2c:ea:26:ca:64:65:ff:4d:e2:c6:3b:7d:c7:a7:a7:
49:8b:13:d4:c6:99:83:11:e0:19:21:74:0e:0e:86:
b4:a7:ce:56:3e:b3:19:88:11:c8:e6:98:30:31:80:
0f:1d:cd:2d:9d:5c:0c:61:11:c0:7d:01:c6:7f:fc:
c0:6c:31:f1:a0:60:46:b7:2d:f0:b9:19:d6:a2:f4:
5e:a5:b7:6e:ad:77:c9:b4:3d:f5:e5:54:09:aa:7f:
dd:ae:ad:c7:4a:50:00:09:f7:cd:70:1b:68:3a:bc:
ab:36:03:e5:1c:0c:e9:bf:60:a1:f3:6c:5e:c9:e6:
c6:35:21:10:cd:c8:4b:11:05:c1:bb:0c:0d:f6:f4:
b6:22:a8:30:44:ab:10:88:27:0b:22:79:0d:39:bd:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.168.0/21
37.252.200.0/21
185.15.32.0/22
IPv6:
2a03:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:0b:94:cc:40:8e:51:1c:b8:16:08:b9:ca:43:21:5c:93:7b:
8f:81:9e:fb:1d:10:6c:2f:d4:53:03:5e:f8:73:d5:a0:59:47:
11:59:e5:60:ee:eb:e9:46:2f:0c:d3:06:db:f5:24:38:c6:c0:
c4:72:e7:8e:f1:96:53:c3:5d:57:54:d2:e5:35:d3:7e:2a:a7:
b7:5a:44:08:18:40:62:36:5f:63:ac:98:8d:a3:78:f0:4c:21:
bd:16:af:81:e2:07:45:05:35:ed:96:03:83:83:32:85:fc:8d:
15:fa:d9:aa:59:31:88:38:c8:e4:18:b3:68:a2:f5:64:45:6d:
2d:c7:4d:41:64:7a:3f:61:a6:97:0f:67:cf:9e:ff:fa:6a:9c:
84:f3:14:f7:6a:05:aa:02:ef:9f:d1:81:a2:fd:a8:c6:27:2d:
4d:57:f6:cb:99:ea:f1:f1:38:35:45:61:b1:8f:f2:b9:af:9b:
f4:f2:29:ba:78:71:23:8c:b8:0a:4a:af:6a:e8:cc:fc:24:36:
65:d0:4e:11:2d:57:55:26:3a:3f:1f:89:94:e2:e0:b8:c9:ce:
76:9f:59:4c:fe:8f:b9:3f:42:5a:76:56:c5:7d:69:27:d1:7e:
a5:a9:ed:85:25:0d:fa:01:2e:79:9b:44:6c:72:e1:27:e6:71:
0e:45:c2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:35:14 2025 by rpki-client