Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
File: WyUo3AddUec-4NCQ4dKh9c-uj_s.cer (raw, json)
Hash identifier: MDFDFT/6YPZbFfLf13snjvaV8BGtAZgkCXMFdW611FE=
Subject key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019652FA3F028B1D1F58CFA579D9A32EB1DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 20 Apr 2025 11:34:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.94.181.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:fa:3f:02:8b:1d:1f:58:cf:a5:79:d9:a3:2e:b1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 20 11:34:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:31:58:5f:bd:55:e3:97:fd:d8:a8:5e:f6:
cd:10:3b:1b:f6:12:1e:99:0d:a6:7c:8a:63:03:51:
4c:76:93:e5:ce:d6:b9:da:c2:61:32:6d:5f:66:b6:
5a:7a:59:c4:42:6a:95:a2:d6:bb:82:32:58:52:39:
f3:0f:49:4b:f0:65:58:d6:f1:54:9f:f3:85:2a:93:
0a:ee:75:81:ce:d1:e6:fd:f6:de:08:a5:32:6b:bc:
18:7f:b3:ce:e1:11:92:f2:44:26:12:fc:90:6d:48:
f6:bd:a4:56:b8:ef:eb:0e:82:7e:7c:90:18:0e:e5:
a6:fc:8b:80:50:fb:64:2f:29:d7:c9:4b:c5:61:25:
72:0d:84:05:75:c8:bf:88:e9:ba:40:87:ca:cf:c4:
cf:06:db:5e:ea:60:84:db:f1:aa:47:28:a9:6c:03:
e6:f5:57:e9:a3:6f:18:49:aa:47:a4:6c:b6:c7:d3:
ff:69:1c:fb:a0:53:c0:5c:79:77:35:6f:ee:0b:64:
ad:19:f5:3f:00:7d:41:5f:9d:b8:75:fe:74:f5:f9:
f8:31:50:70:76:2b:7c:04:af:10:07:db:dd:c6:64:
e2:32:69:e7:a0:df:15:ff:c3:de:49:bf:66:7b:27:
92:f4:83:9f:a8:80:db:3b:4d:98:ee:9f:40:85:d2:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.181.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ce:83:02:83:59:18:30:40:e3:bc:f3:24:f3:d1:c0:48:a1:
32:cf:c2:07:0d:71:ba:72:7c:41:c0:86:e2:f1:e9:18:31:d8:
18:17:65:56:73:42:32:87:ee:bc:6f:68:4b:f6:1b:e0:05:a4:
dc:96:72:1f:b9:75:f0:68:a2:8f:d1:a8:68:5a:14:f7:d0:48:
e6:de:26:a7:5a:e0:6f:e6:9a:45:ed:49:67:dd:01:24:a1:39:
d3:63:e9:07:7f:6d:b0:3b:c9:10:77:2b:87:c1:f5:56:52:ad:
88:88:0d:27:be:7d:68:a2:fb:6f:84:49:a0:79:3e:69:65:12:
d0:c6:18:3f:f0:b1:63:06:8a:fa:87:d9:ca:46:38:9d:99:79:
a6:0c:6d:e7:a6:c6:c9:da:7b:54:24:d7:dc:7e:f7:0f:83:b9:
3f:ee:d9:b3:70:91:f8:a9:dc:10:98:5f:bf:0d:1f:e4:a0:be:
92:c7:fd:8e:a2:d1:b5:e3:82:01:7b:7a:45:78:e0:b7:cc:84:
f5:b2:04:dc:9a:bc:a7:34:c1:0c:4c:62:d2:7d:b7:31:0e:95:
55:f8:16:aa:3c:d2:34:c9:80:43:88:ab:94:04:da:ae:15:de:
79:4e:8f:c0:06:d8:2d:ac:33:b4:80:be:9b:2f:cc:58:3d:26:
86:e5:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:55:02 2025 by rpki-client