Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.cer (raw, json)
Hash identifier: D+/sydy9bV08w0fkytZ7FWeCH186RHU9WjaNHjusLyI=
Subject key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01977871B06F4E81E91699A15486203A5DB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 16 Jun 2025 11:13:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 94.156.176.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:71:b0:6f:4e:81:e9:16:99:a1:54:86:20:3a:5d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 16 11:13:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:16:dc:91:5c:a0:30:1d:bd:13:98:f1:74:
f6:ea:5d:81:b4:c8:2f:31:c3:eb:be:d8:83:03:7b:
bb:05:21:e2:12:19:d9:f1:45:11:a1:72:c3:41:5d:
ea:11:e3:31:e5:e2:ba:88:50:a8:62:1d:d3:21:4a:
58:8e:ab:3b:5c:78:b8:39:54:df:05:b0:6f:fd:92:
12:27:46:11:6a:fc:3b:9e:77:72:08:fe:7b:c5:d6:
b7:bd:36:dc:f7:30:b1:f8:bb:44:d9:10:08:f4:ff:
be:4d:75:94:75:22:4a:c5:0e:98:28:be:f3:5a:68:
0a:44:85:72:6b:3a:a9:91:21:94:5a:1d:8f:dd:a1:
03:8b:87:88:7c:06:0a:ec:9d:87:02:15:a4:32:46:
ad:ca:1c:b0:2e:b8:be:75:88:6d:0b:7a:87:6d:a7:
88:12:e7:c5:5e:4f:90:05:33:60:fd:3b:7e:54:14:
f3:6d:9b:e7:94:91:85:bd:69:3a:d5:d3:10:45:9f:
7a:1e:a5:6f:c8:1c:8c:c9:a7:bc:ab:60:b0:17:6c:
32:af:40:f7:a2:14:a3:d1:42:3c:bf:46:61:75:f1:
e3:ab:76:4d:f9:b4:c3:82:1c:bb:1c:fe:04:56:a6:
61:f5:81:7b:85:bb:3f:ae:3e:7f:c9:ed:35:2d:72:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.176.0/24
Signature Algorithm: sha256WithRSAEncryption
66:73:4d:7c:cd:69:59:24:18:b6:59:7c:b3:14:30:9a:19:e8:
9b:4f:a3:8e:2f:f3:d3:ee:98:4e:ed:ad:8e:67:71:e0:c4:c0:
ab:26:3b:6b:02:c5:e4:85:f9:ff:e0:fe:0c:33:a2:f7:5a:aa:
22:15:53:91:0e:aa:05:f8:2a:3d:64:45:63:2c:81:f3:e3:42:
d3:b5:3e:d9:bf:69:ab:2f:37:ab:d2:d0:7a:54:d2:66:4c:f8:
82:69:0f:ad:6a:4b:e7:2f:4f:f8:b6:22:4c:ed:a9:bc:29:60:
b8:e8:36:ad:ee:ba:24:a7:6d:6b:d6:23:0f:14:32:0b:d6:4b:
4d:1c:9d:75:d3:91:cf:ab:b2:c7:ac:88:15:19:22:e2:29:3c:
8e:23:89:96:6f:99:d8:1c:99:73:66:49:e7:d2:74:b7:5b:f6:
38:71:e0:da:cd:9c:87:15:fc:5c:20:cb:2e:9a:8d:24:d2:32:
4d:9b:fa:65:32:37:3a:3a:59:47:af:62:52:e1:91:a6:3c:8d:
fb:1d:87:9d:0e:47:3e:12:8e:dd:a2:33:1d:a6:a9:66:c6:48:
20:82:e7:95:55:47:bf:dc:d6:bb:e5:d8:78:24:a0:36:bd:e1:
19:cb:07:cb:86:bd:30:79:ef:77:f6:09:af:f3:2b:9a:e5:2b:
4b:e4:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 16:01:06 2025 by rpki-client