Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
File: XqFlPhd6opVUAIBcjHW9DWhYOvw.cer (raw, json)
Hash identifier: 8Bx3WjQI2eun78ml8wBEzqLSPOqR7U8Gtfg2LQ87rx4=
Subject key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01966782B6333C8A008EF4CDC6DB67743C7A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Apr 2025 11:15:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43873
AS: 212086
IP: 46.255.232.0/21
IP: 79.140.224.0/20
IP: 146.66.16.0/21
IP: 185.231.64.0/24
IP: 2a10:b780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:82:b6:33:3c:8a:00:8e:f4:cd:c6:db:67:74:3c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 24 11:15:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:dc:32:4e:6e:07:99:aa:c6:37:c6:b8:6e:
60:60:fd:45:67:bb:a8:79:b8:69:50:d3:29:d9:93:
b9:b1:be:56:fb:e5:38:96:fe:1d:d5:c5:a1:bf:30:
27:cd:9e:5b:b6:0a:cf:18:0c:52:ef:b8:8a:e4:e4:
46:f4:ca:a6:3c:b8:57:20:6f:81:13:6c:f6:cc:af:
49:ff:37:8d:b1:2b:21:21:88:07:b8:6c:2a:9f:2c:
21:6a:c8:eb:92:55:f8:be:20:75:2d:13:30:60:95:
00:21:b2:8e:50:0c:a0:93:e7:6d:d0:33:c3:bd:a9:
ea:1d:63:6e:66:b4:80:d7:4f:60:e3:09:61:2e:45:
29:24:b6:28:97:ef:b1:8f:a7:34:9e:58:ef:dd:86:
4f:f4:bd:27:e6:72:98:6d:93:52:bf:76:51:67:c5:
2b:a5:f0:8b:3a:b4:ad:4c:8f:45:c0:97:67:65:72:
71:64:14:d8:7a:7a:33:e7:e5:f6:ce:18:a1:5b:60:
72:24:55:d1:98:60:ce:79:10:2f:b5:7b:0b:bf:c3:
0e:d0:f4:bb:f6:47:7a:eb:99:fb:4a:36:5f:3f:79:
f3:4f:21:9b:dd:cd:0f:4d:71:66:30:7e:fb:b6:36:
6b:bc:30:44:5b:a8:7c:38:1d:69:e2:2b:af:62:2f:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.232.0/21
79.140.224.0/20
146.66.16.0/21
185.231.64.0/24
IPv6:
2a10:b780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43873
212086
Signature Algorithm: sha256WithRSAEncryption
1e:e0:a4:2d:96:72:f8:22:d7:1c:b6:e8:b6:44:4c:7d:06:3b:
dc:b7:36:bf:ac:34:b4:77:62:d5:71:b6:8d:1c:2a:52:51:91:
4d:24:be:6c:d0:46:6e:9c:dc:00:87:14:f4:e3:5c:c9:02:6e:
aa:8b:db:6c:c6:f5:a7:72:43:21:1a:c3:f3:f8:1d:1e:a5:05:
29:b6:6c:1c:7f:c6:25:43:05:79:cf:49:d8:26:c5:c3:de:33:
f4:56:ed:0c:5f:d6:74:93:8a:25:fb:8b:b2:33:3a:a8:fb:4d:
35:bb:86:10:a1:9a:af:f7:52:a4:9a:e9:46:3a:6a:e8:ff:8f:
88:40:14:3f:45:ae:1b:c7:38:32:b1:41:76:39:56:cd:58:94:
e8:92:41:db:92:e0:32:45:0c:b4:bb:7f:0e:f7:ef:f9:cb:e3:
16:1c:eb:65:17:ce:b4:a8:34:f1:58:fa:86:88:5f:ea:36:84:
ff:24:8a:62:ff:a4:1d:78:9b:55:4c:eb:1c:97:1a:dc:3f:2f:
d1:0f:7f:8d:64:33:e5:01:a0:98:87:22:e7:8c:96:d4:b6:8a:
4e:b8:bf:84:d5:2a:d1:a9:b5:d6:56:6a:39:8f:84:48:8d:f8:
8c:8e:6f:b9:92:2e:0b:d9:80:f3:a8:c1:a5:d1:61:cb:a5:66:
a4:3e:6f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:22:22 2025 by rpki-client