Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
File: LkJv6Qhstq8B85H_T2nACDZNbu0.cer (raw, json)
Hash identifier: AP2bxSMkcT7UmLha+aC0J0Nx/6MMRfwV6r8vCBzTJog=
Subject key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01968B2F17068B9A17ABB467A5B52D00D88D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 May 2025 09:30:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.235.232.0/24
IP: 185.145.247.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:2f:17:06:8b:9a:17:ab:b4:67:a5:b5:2d:00:d8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 1 09:30:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:53:5a:c8:4a:cf:ba:3b:71:8a:4a:4e:e0:
19:55:da:d3:0f:89:01:6a:3f:45:a9:75:83:1c:70:
89:71:57:e5:ad:26:b4:fd:c8:0c:e6:d1:76:fb:ce:
4e:bf:81:08:61:dc:26:fd:6a:f1:f9:fb:98:c7:15:
4b:59:8a:9d:5c:50:0c:0a:04:5b:5e:6c:b9:54:30:
20:b9:83:0f:18:0a:22:97:f1:14:39:00:45:41:b5:
74:f6:c6:07:31:d0:15:23:92:fc:ea:bb:b4:d4:a5:
ae:90:34:83:05:df:59:bf:84:f9:e3:85:c1:24:4a:
1d:f5:5f:fc:a0:d3:b8:df:cc:45:70:4a:6a:81:8b:
1f:b6:a5:87:47:57:15:0a:f6:1f:be:5d:a3:56:e3:
cc:27:69:f4:d9:17:a1:46:64:81:72:8a:2f:fe:01:
28:7c:5b:d3:96:49:b2:1d:51:b9:e6:97:56:9f:ce:
39:60:f0:65:0e:e6:16:40:e3:44:31:c4:24:d8:07:
15:a9:18:5d:20:b9:88:16:f4:8c:d3:8f:74:f9:58:
d2:14:d4:b7:59:63:af:bd:7a:a4:78:d4:6b:9e:22:
ca:7f:26:69:b7:98:a5:36:79:0f:3b:83:25:4d:d2:
97:5b:72:32:5d:35:19:ca:e3:3e:75:b0:81:30:50:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.232.0/24
185.145.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:7d:3b:28:9d:ec:ae:7e:ac:90:c1:74:f2:36:1d:d8:18:ba:
f6:cb:8c:28:9a:b3:64:69:05:da:96:4c:bc:d9:05:04:68:38:
cd:0d:d4:a5:c0:3b:16:e3:4b:db:e9:63:90:5f:48:77:42:93:
a9:6c:a8:2c:88:bc:ee:73:a9:e0:73:b5:b5:5a:b7:a0:94:ab:
95:06:e3:df:60:e6:24:e9:35:3f:57:52:38:af:71:9a:b2:12:
2d:ab:be:53:d5:7b:a7:b1:71:a8:48:12:a9:00:13:e4:eb:1e:
83:5b:12:e6:ce:87:4d:84:ac:24:2d:5a:35:95:0a:3a:48:6a:
7c:7d:b7:ac:9e:00:dc:56:8f:4b:08:c4:cc:36:4d:c9:4f:90:
00:b3:5a:d9:83:e8:1f:94:52:38:0c:37:94:13:47:10:ea:f6:
28:13:76:c6:5e:10:62:29:d5:db:f0:d2:09:7e:6c:a5:4a:a5:
7a:37:b3:d6:86:6b:fa:ec:d0:dd:69:6b:32:98:db:46:5d:30:
6f:94:cb:37:07:e1:ca:dd:b8:65:22:4e:e8:81:01:8f:2b:7a:
d3:aa:4f:ea:d4:bb:b3:29:13:48:e5:01:12:ec:5d:e4:26:fd:
47:dc:51:57:a9:7b:5b:2f:16:e6:0b:a6:66:6d:01:ed:11:51:
f0:0f:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:43:34 2025 by rpki-client