Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer (raw, json)
Hash identifier: t3uoyL6u/og4GwoGcIhPx2+rwIx5oYEpWGCMF3LQNDs=
Subject key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196AA77EF621C4CC72AAEAC26FB92FC37E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 May 2025 11:18:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.5.44.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:77:ef:62:1c:4c:c7:2a:ae:ac:26:fb:92:fc:37:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 7 11:18:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d97a77930122879a766470df8d660c98442a9932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ec:3e:b1:89:0f:b8:1b:23:99:e1:09:82:84:
7a:7d:08:e2:32:2c:8e:40:e1:12:25:a6:df:ee:9a:
64:6c:74:da:a1:38:30:98:4f:1d:d4:db:c3:d0:49:
da:a5:da:19:e0:01:5a:d5:4a:88:69:5f:90:db:86:
2a:fa:51:e7:85:bc:eb:b9:c7:cb:5e:d9:2f:41:6b:
00:62:fe:0c:a8:c3:d6:9a:6d:0b:dd:84:58:f1:93:
30:e9:ae:5e:1e:18:0e:f4:77:60:43:e0:28:32:3d:
c5:12:ae:40:6d:86:7e:77:97:e2:d2:46:3b:49:3f:
64:59:0a:1e:b3:cb:5a:2f:d0:3a:50:89:77:b2:fb:
ab:9b:eb:1a:21:e1:89:20:e4:f7:71:79:93:01:7b:
7b:a5:89:2a:1c:9b:07:7a:76:2d:3f:58:e0:9f:8d:
68:ff:19:09:71:18:8b:a7:ed:d6:b9:b1:ed:99:0c:
4b:7f:87:df:32:43:f0:88:29:37:b0:a7:91:79:ad:
15:19:b7:59:15:a1:7e:60:e2:37:98:36:f0:15:da:
e8:a1:63:65:bc:08:95:a4:7d:38:c2:54:a5:68:87:
23:f4:49:74:43:11:37:c2:ca:59:d8:4b:54:cf:80:
7b:14:ea:1f:86:dd:e7:88:3e:a1:4f:56:ea:1a:6b:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d8:9f:22:b1:d8:3d:05:24:b0:90:9a:ac:94:b3:59:3c:e1:
e2:1f:33:c9:a5:b5:83:55:d9:1b:de:cd:75:6c:8f:57:b5:c0:
0d:1c:36:a1:36:d0:b8:31:cf:fe:06:1b:12:d3:9c:b7:be:72:
55:9c:f3:4b:01:26:51:54:4f:06:9b:07:1b:51:23:e3:8d:36:
69:1d:89:27:95:72:5c:bd:1c:32:58:54:a2:66:1d:18:72:22:
5d:77:06:73:4d:ae:f8:56:3c:08:b8:b9:f2:41:7c:9c:9e:be:
c3:3e:7e:c4:77:80:32:49:24:de:b4:ea:fe:fb:97:25:0d:21:
1a:8f:23:b7:fb:09:b4:56:5a:44:15:d3:ee:2c:82:85:4c:cc:
58:34:6e:e4:97:b7:61:b4:91:4f:99:24:22:40:f8:84:bd:88:
ff:6d:9f:e1:80:77:5b:90:d9:e3:71:88:ac:d5:fb:57:ba:16:
d2:40:0b:3a:7d:c5:ac:bd:b0:ee:53:0e:9f:7a:e5:47:b7:d6:
6a:01:b5:3b:84:70:43:57:7d:78:10:8b:99:6b:af:9a:5c:51:
27:49:a4:7e:19:0f:19:1a:cd:fd:b6:bf:70:79:6d:a8:37:92:
18:8b:29:ce:28:dc:95:ff:1e:b6:bc:b0:a5:e6:df:5e:47:6f:
18:2d:68:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:40:16 2025 by rpki-client