Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
File: IxG6LbhgGYJqsQLhnyyoogkxaFI.cer (raw, json)
Hash identifier: cDPU69df62BZNStbJtisdBt37rj1cbUL+mwJk2FNMyE=
Subject key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196623EC06CF5CF1E55CC8EC714326075B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Apr 2025 10:43:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.213.46.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:3e:c0:6c:f5:cf:1e:55:cc:8e:c7:14:32:60:75:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 10:43:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2311ba2db86019826ab102e19f2ca8a209316852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:e3:46:c8:bb:d9:c5:d6:93:42:ad:1a:88:
7e:ce:66:f6:30:b5:ef:08:89:48:87:81:41:aa:b8:
cc:57:2e:1e:af:50:2a:af:11:96:d9:06:6d:8d:f0:
51:2b:07:f6:76:b3:c7:9d:c0:a9:c9:98:57:3c:6b:
e9:c6:e4:0e:ff:f1:27:70:9c:e1:b8:f3:5f:cc:b7:
51:9c:20:4e:18:d5:1b:84:de:1c:07:25:4e:fb:3c:
9b:7f:27:f5:21:05:89:78:cb:b8:be:60:df:63:9e:
ed:ec:0d:2b:3f:0b:35:5a:3d:85:cc:36:22:4e:14:
9d:31:a1:f5:2b:91:98:9b:d3:c0:73:5a:a1:8d:45:
70:cb:4d:ac:ef:21:86:48:2d:cd:12:22:10:b4:69:
8a:77:b6:c8:33:b4:bd:2a:3b:88:4c:17:a2:73:5c:
88:9e:34:65:82:50:af:0b:72:55:83:ac:ee:d2:46:
2a:fd:e8:9c:05:a0:de:88:15:8b:b0:c8:45:7b:93:
6a:81:54:c1:fd:79:b2:a4:15:e6:77:b9:27:ac:53:
17:5b:ef:90:50:a7:da:24:93:b9:be:b1:1a:3d:d8:
21:fa:67:93:24:51:93:a9:a8:cc:51:5b:40:af:43:
cf:13:c4:42:b9:d6:53:b1:d9:74:9a:5a:b1:bf:6a:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:56:2e:c4:e9:14:9c:07:7e:c6:3f:f8:0f:46:da:07:ad:cb:
e6:df:79:7c:4d:73:25:89:e8:22:fb:6c:03:1a:ff:be:5c:7a:
3c:13:ec:65:2c:40:b4:91:d6:0c:23:fa:c6:b5:db:fe:2a:b9:
a9:2f:9f:ae:f9:a0:64:a9:c3:de:2b:fa:a9:79:f0:de:23:44:
ef:c7:47:45:00:da:79:d3:69:e1:55:77:94:d1:0e:43:d5:22:
7e:9b:93:a2:10:94:c1:57:f1:aa:66:12:58:f2:9e:2c:bc:7c:
bc:25:8b:bb:38:9f:a4:b1:c7:f7:99:df:0a:ec:ba:6b:e6:b9:
5c:32:5b:ba:e8:3c:d0:9c:50:41:2a:a7:b5:5d:46:13:59:07:
b5:79:fb:74:17:33:e2:69:b7:2d:ed:c1:ea:0a:87:c2:b5:20:
01:ab:5f:c8:43:9d:8d:2d:65:77:5c:06:13:20:1a:87:2c:86:
ea:dd:9c:34:c8:3a:2f:b3:94:53:13:21:d6:bb:06:51:5b:e4:
93:79:e8:49:36:58:50:da:b7:c7:fc:59:01:7c:f5:06:90:de:
01:05:4f:a3:fb:99:bd:59:10:ed:73:4c:b3:95:5f:35:50:61:
2c:b2:76:f9:99:7e:9a:23:13:6d:4c:6e:c1:a5:fd:84:3a:ef:
1b:b1:ff:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 00:49:02 2025 by rpki-client