Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.cer (raw, json)
Hash identifier: riSToDavsrHRJBshuXYs6wk0Gvysd45I7H5AwtdZ/Lg=
Subject key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C1CB59F09F3139E1B83C733E5D945
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:678:d4c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1c:b5:9f:09:f3:13:9e:1b:83:c7:33:e5:d9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:0a:03:5d:92:9b:66:77:4e:08:b4:5b:c0:
24:ed:84:fa:f8:e8:d7:8b:2e:84:13:75:d6:54:bd:
93:bc:29:ef:ea:f0:4d:ab:cb:a1:72:1a:cf:f8:9c:
2a:4e:27:f7:e2:db:03:54:a4:14:b2:67:07:28:ba:
03:d2:87:fe:71:c7:d4:de:24:70:6e:bf:9c:f4:f6:
fb:1c:89:e6:9f:ac:55:fd:9a:b3:3c:7a:c5:0c:82:
dd:72:99:c3:22:fc:27:50:79:77:70:9c:b9:1f:0f:
42:e5:7a:e3:fc:a4:c0:d9:e8:92:41:7e:ed:e8:5d:
e7:d4:be:86:ff:bd:a0:66:ce:20:b8:45:c4:17:e5:
43:4d:50:8f:be:b6:ec:ff:7a:55:7d:3f:3b:42:17:
5a:31:e6:2d:ac:87:2c:73:c0:05:2c:91:f4:93:4a:
67:1b:40:85:1b:96:f4:cd:10:82:5f:74:63:ba:90:
2d:40:93:a6:13:45:11:3e:cd:74:9a:13:a7:cf:63:
2c:d9:74:f9:39:16:35:15:69:19:9d:2e:69:ac:dd:
28:bb:83:2c:07:bd:72:4e:3b:41:f9:5f:60:e7:27:
62:7e:02:c9:2c:3d:dc:e3:9f:f9:c4:07:b2:93:12:
a6:4b:80:a7:a7:5f:04:82:bc:14:63:0b:0a:08:ed:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d4c::/48
Signature Algorithm: sha256WithRSAEncryption
0a:bc:ba:d5:63:c6:3c:61:18:1e:c7:f2:7a:1f:b0:55:bf:79:
33:6d:d2:62:db:2e:e6:d9:31:7a:ab:00:d9:a8:d1:dc:ab:cd:
59:87:3c:12:eb:1e:60:ee:7c:7b:44:30:55:b5:a8:ea:1b:b7:
10:12:01:50:8d:32:d1:f2:7a:8b:74:ef:98:68:0f:be:e7:60:
46:3e:85:28:b4:6a:c4:b7:a5:c7:3a:e2:b1:24:95:f3:dd:c1:
22:96:cc:bd:36:3c:d0:2d:86:15:8d:41:45:10:9a:27:c0:7c:
cc:d9:08:3e:6c:06:f8:98:42:04:99:fc:d7:0d:bf:b6:1c:08:
b7:06:89:28:c3:f7:04:15:80:6d:9a:d6:8b:82:0c:eb:4c:41:
3b:df:57:0e:ec:da:90:21:d9:f6:fd:bb:d0:0c:b8:3e:6d:8d:
69:43:37:9d:35:9a:ba:83:59:5d:42:76:d4:b4:ad:da:5b:e6:
4e:a3:31:d8:d8:27:95:93:c0:d6:43:11:99:b9:37:79:ad:bf:
49:0b:63:5e:43:a9:3e:1f:c7:7a:93:8f:e8:bd:de:81:d1:c1:
09:34:f6:15:33:b4:1a:d9:c9:0b:02:f3:17:0d:07:9f:7b:13:
95:8e:da:11:bc:61:e2:e7:bf:f5:53:96:f6:f4:eb:44:86:7b:
27:13:13:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 21:59:21 2025 by rpki-client