Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
File: kvSd6GhPEof09ssYXVz33oDJC5Q.cer (raw, json)
Hash identifier: 7FrURds9vgYkbu+25BHli0WLQdGXH0JH0ypVKKSLWwg=
Subject key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01965C49678D64540FD2EE9E46328AB705AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 22 Apr 2025 06:57:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.139.196.0/22
IP: 45.156.52.0/22
IP: 95.214.172.0/22
IP: 95.214.180.0/22
IP: 185.115.207.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:49:67:8d:64:54:0f:d2:ee:9e:46:32:8a:b7:05:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 22 06:57:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:86:20:e8:67:02:96:93:d1:6b:10:5b:bd:
8c:d9:d7:96:2b:4a:97:e6:3d:8b:6d:a1:9d:78:52:
13:be:21:88:3b:dc:70:ce:bc:2c:cc:6b:5c:40:de:
e6:5f:44:11:14:0d:40:e8:69:f1:41:2a:c8:fb:8e:
f7:5a:22:0d:ce:14:b5:ea:a0:75:a4:d3:78:b6:81:
60:6d:fd:2f:57:c4:58:fc:fe:ca:48:33:51:a6:8b:
9f:47:67:d9:3d:92:d6:05:63:b2:25:b4:61:07:fc:
1e:36:b2:70:82:6b:83:0e:7a:11:c6:d0:27:6e:f5:
f0:59:dd:47:4b:f5:52:56:c5:0f:a1:2c:6f:53:3c:
ab:6b:1a:f9:ae:06:6b:cf:c5:cc:7d:7b:95:11:f6:
ef:88:86:3c:54:cb:ba:2e:36:ff:7a:f1:aa:f6:88:
67:8f:90:5a:28:e9:38:6a:bf:84:e1:e3:4a:15:07:
2b:c5:59:73:6d:e4:a5:ef:dc:ea:43:31:47:46:1d:
10:1d:0f:db:3f:3c:3d:7a:40:77:a2:ee:e5:61:f9:
71:15:ed:61:2d:c6:31:81:e6:c6:8c:3c:95:d7:a3:
41:4a:02:3e:1f:5f:63:ab:68:75:c1:da:d9:fd:47:
d1:c8:78:1f:65:ef:bf:62:43:68:ef:88:ed:13:c7:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.196.0/22
45.156.52.0/22
95.214.172.0/22
95.214.180.0/22
185.115.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:6f:b5:9a:45:31:e2:09:3a:e2:44:92:fe:99:a0:2e:58:9d:
2e:ad:6b:b7:56:85:16:75:46:91:ad:77:b1:73:5b:1b:5b:0d:
74:79:b3:66:93:44:e9:2d:08:b4:be:e8:32:2d:3f:f1:e4:89:
13:35:5b:27:c5:92:99:a6:80:f7:43:99:7c:2a:c9:be:d5:37:
67:23:3c:7f:8e:ba:0d:09:2d:60:89:b0:55:e6:21:33:17:32:
da:23:4e:64:59:dc:fd:38:9c:0d:15:5d:b4:9d:9f:35:bd:26:
08:a3:37:31:3b:d1:f2:72:e1:23:5c:66:5f:03:18:0b:f7:25:
bd:76:ac:d9:20:6d:f7:08:bf:69:61:e6:27:a7:31:19:df:7b:
ed:0e:e0:16:db:d6:0f:1a:91:95:de:bb:d9:98:53:1c:24:f6:
5a:4f:fe:66:88:b8:8a:34:33:22:58:a8:8c:ac:f0:d9:57:0d:
a4:df:3c:d2:e1:a5:cf:f1:b4:10:e5:34:80:ac:7b:cc:ae:7a:
e4:e2:06:58:c0:a5:e3:0e:86:fb:39:6c:c9:bf:05:01:06:91:
09:8b:ab:c8:d2:5f:b3:67:68:0f:f1:6f:3d:9f:e1:23:d8:18:
cb:bf:bc:c6:5c:8e:2a:fa:4f:52:f9:cd:73:e8:3e:03:4a:e9:
33:9c:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:57:00 2025 by rpki-client