Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
File: i7AWzMBcV2V0az92QtBD6BEgNwU.cer (raw, json)
Hash identifier: JUn+2Wcnx1yk0CAneAHnNMNECKBY5TCkK7oti02eQyM=
Subject key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019685EAC6FF491611ADADBE725584683E59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 30 Apr 2025 08:57:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 213.157.124.0/22
IP: 2a14:c580::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ea:c6:ff:49:16:11:ad:ad:be:72:55:84:68:3e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 30 08:57:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bb016ccc05c5765746b3f7642d043e811203705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:dd:38:f1:25:28:66:0a:5e:c5:ee:51:36:
09:b9:83:58:69:36:b6:b0:44:c6:5f:80:b1:18:60:
03:2f:a7:8d:3c:d8:65:4d:df:5d:14:9a:52:d7:95:
79:e6:d1:cc:fa:2e:c7:d6:89:e1:5d:6c:6c:d4:f3:
95:67:c3:92:5c:f7:d3:e1:f1:6a:90:f5:7b:05:67:
88:81:dc:c7:9c:bf:1b:82:62:05:c0:0d:4c:44:93:
e9:bb:ce:5a:15:83:83:ad:24:79:31:e6:50:08:7e:
00:69:b7:76:cf:c2:18:a6:0b:bd:79:b4:cc:53:1f:
6e:a9:55:49:e9:6c:d6:75:07:91:f3:c3:d3:53:21:
77:0e:0c:35:2e:c6:21:96:cf:2c:4d:ca:5f:59:1d:
55:95:c2:f4:99:da:ad:f4:73:03:ad:39:3a:ba:b7:
0d:b2:14:1f:b8:70:9d:f8:f1:c1:73:ec:eb:39:d2:
32:70:fe:91:1a:95:b3:e7:dd:4f:3f:ba:56:b5:d6:
0f:32:a0:6e:21:6a:dd:cf:fd:c0:10:44:1a:db:f1:
d8:8b:b5:5b:2f:04:a0:7c:2f:9c:9f:d1:3c:d7:ea:
bf:13:c4:c8:5f:9c:fe:d5:e1:f8:85:14:3d:21:0f:
ac:a1:93:cd:52:6b:0b:94:58:50:4a:bd:5b:61:c6:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.157.124.0/22
IPv6:
2a14:c580::/32
Signature Algorithm: sha256WithRSAEncryption
6a:76:54:71:43:8e:82:d6:e0:b1:81:e5:76:39:4d:40:c2:a8:
32:dc:81:81:83:1b:3e:8e:71:21:70:87:ab:91:bc:ab:23:02:
ab:91:52:06:eb:b9:54:46:e8:65:dc:11:7f:25:dc:ad:e3:7e:
aa:14:e9:d3:ef:14:83:b8:ea:37:f0:2d:4f:af:ea:66:6b:2b:
c9:59:97:0d:f8:ba:fa:28:0a:76:13:95:4d:7a:c3:10:f8:79:
d4:53:5d:19:be:86:11:76:58:39:bd:b1:8f:33:01:42:64:8d:
e2:65:d5:4e:9f:cf:c0:0e:f2:51:be:eb:80:5d:34:76:68:1f:
e8:99:8f:b3:3e:8f:8b:92:63:6a:b0:c1:6d:48:72:8e:f2:ac:
56:ac:f4:27:75:ad:cd:28:e6:26:0b:2b:53:3f:57:6b:47:cb:
0b:c9:54:d4:9d:9b:45:8c:15:74:7f:51:67:e6:72:e0:7f:de:
89:f3:04:83:d9:58:ec:11:84:46:01:d9:b3:be:e8:93:8f:76:
10:7f:95:db:4a:9e:4a:10:fe:84:c4:f8:65:63:d7:b1:56:a2:
8f:62:c9:06:d7:10:55:46:6e:be:c8:ed:9b:01:f3:09:13:0e:
74:77:ec:4e:93:2c:4f:cf:ca:57:99:81:15:4e:9c:6e:3e:6f:
e4:18:55:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:39:18 2025 by rpki-client