Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
File: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer (raw, json)
Hash identifier: 0WZvC2flO/A73g/hWrLsXgD+4yCkrWJnT/rXAgwlejE=
Subject key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01951908F7A7C69D18D36D48FC3DF20B79E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Feb 2025 12:29:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43846
IP: 37.0.64.0/21
IP: 79.140.144.0/20
IP: 185.12.40.0/22
IP: 185.80.96.0/22
IP: 2a00:8700::/29
IP: 2a05:7b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:08:f7:a7:c6:9d:18:d3:6d:48:fc:3d:f2:0b:79:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 18 12:29:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8f239a70043734172d26378bf2106ae72552187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:d4:0c:20:17:11:1d:eb:9e:d2:61:30:d5:
ab:2b:61:d7:88:91:62:11:3b:a4:ea:4c:20:bf:ed:
5d:90:8d:f2:41:67:b8:e9:b7:30:29:b5:95:b5:84:
c6:5c:8a:2b:c8:8b:3a:79:0b:69:e5:dc:8d:5d:16:
22:e0:09:fa:cf:56:0b:f1:11:12:9b:c1:d0:2e:0b:
59:a0:f6:ea:4d:99:80:b2:91:a3:60:d7:17:a2:4d:
5d:af:7b:c2:db:7d:ca:eb:4e:1e:5d:9d:0c:29:7a:
77:f9:08:02:07:64:aa:b3:6e:fc:42:39:32:73:67:
a7:a4:74:d5:86:80:59:23:ee:4f:17:e9:74:9f:52:
d8:d8:55:b2:a1:f6:ab:f1:2a:1c:39:55:2c:b5:28:
7b:a1:0c:80:b2:47:21:c0:d2:84:d3:f8:5b:f2:f1:
22:13:fe:ce:47:37:f9:69:22:87:94:e3:ed:8c:f5:
9b:a6:1e:d0:63:35:45:bb:3a:33:96:8c:8d:77:ef:
6a:46:70:51:1b:e8:14:47:03:83:d9:83:77:55:26:
9d:7d:a7:e3:1c:c3:0a:ca:2c:b9:78:27:be:a4:10:
f3:60:99:37:5f:84:07:e4:9f:f4:b3:2b:33:c1:7e:
48:3a:98:b0:3e:fa:c2:9c:aa:d7:bc:cf:8c:91:f5:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.64.0/21
79.140.144.0/20
185.12.40.0/22
185.80.96.0/22
IPv6:
2a00:8700::/29
2a05:7b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43846
Signature Algorithm: sha256WithRSAEncryption
70:a9:98:ed:fa:48:dc:55:ea:57:0f:d6:51:13:d3:1f:e7:96:
2c:2b:3e:d4:8b:0b:97:93:2a:b6:88:6e:6c:62:d2:bd:41:32:
70:25:bb:a9:40:21:7c:58:b0:65:8b:83:d3:5e:36:48:64:7d:
eb:2e:37:07:9e:44:81:cc:02:69:c9:d2:06:25:7f:70:93:3e:
48:f9:01:b1:1b:0a:32:ce:76:15:ed:d8:c2:14:7d:fe:7b:73:
fd:f6:b1:53:a4:10:45:56:ad:ea:af:cb:94:53:58:e5:ce:96:
d4:0d:7d:7d:ea:d7:1f:27:d0:d4:23:61:a9:a5:24:e4:61:11:
fd:46:d7:47:ec:66:34:90:1c:c3:7e:7b:60:a0:4d:fc:fd:1f:
74:0f:f5:57:dc:68:4a:e2:46:c3:65:fb:ef:a4:25:54:43:1e:
12:81:8e:d0:49:6e:b6:4a:1a:b0:fc:5b:4e:b4:43:13:61:33:
79:9e:93:90:4b:28:8f:d3:fb:6b:15:95:63:0e:c4:da:44:ca:
a9:ea:38:7c:cb:1e:fd:60:ee:ad:12:b4:b8:11:5d:f5:c9:1a:
d9:66:e1:2e:cf:ea:5e:35:70:32:da:39:f0:de:85:62:4c:1c:
b1:3b:08:d5:72:b0:21:95:69:d0:be:21:d9:54:e0:95:83:48:
e5:71:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:07:28 2025 by rpki-client