Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
File: GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer (raw, json)
Hash identifier: ABZ71wovSG+1lK41MrGofsu+ir6x41j/0qcZW+K9ERs=
Subject key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143FBF99190E9DD953C0686F20244E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.49.76.0/22
IP: 2a01:9fa0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fb:f9:91:90:e9:dd:95:3c:06:86:f2:02:44:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:48:52:08:ba:e0:04:8d:d5:0b:34:d0:af:
07:f3:86:cc:01:1d:a0:5a:fc:17:ac:ce:ff:bf:02:
1c:cd:fc:cd:e7:db:30:21:4c:fa:e2:94:76:67:de:
58:be:fd:60:54:43:32:17:c6:d2:cd:b9:a3:69:49:
5f:7b:12:a7:7c:f8:61:60:71:46:f7:62:4e:95:71:
ca:01:af:fb:e4:a5:a8:aa:62:3a:34:53:a9:60:82:
d8:0f:1f:a8:ab:5b:2c:ac:0d:a4:a1:60:1e:50:79:
42:fd:c2:6a:dc:b5:83:14:f5:05:36:bc:38:64:60:
9d:c0:4c:f5:d2:12:76:3b:ce:ae:34:8b:35:e4:d0:
63:93:49:55:f6:4d:2f:0d:e7:2d:90:10:15:59:0e:
2b:ad:ca:56:ce:20:f9:b3:85:ea:01:99:13:7d:1f:
c6:ca:ca:b6:a7:ab:0b:a6:c5:ea:91:6e:f8:db:99:
56:d2:b5:fe:65:02:87:1b:29:6b:a4:b6:47:e6:e1:
b7:c0:7b:42:3e:2c:17:82:9c:fd:05:46:0e:09:98:
9f:3d:6c:7f:ed:16:71:bb:67:b1:57:d8:13:05:bc:
0d:08:b0:ec:71:6c:85:90:ef:f9:af:6f:8d:c2:11:
c8:67:36:46:d1:53:71:2c:b9:7a:36:d5:54:33:90:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.76.0/22
IPv6:
2a01:9fa0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:00:d1:85:32:6d:60:d0:7e:8d:ff:62:7c:0f:50:0c:92:3e:
a7:0e:34:01:e9:9f:43:e0:08:d7:3c:2c:b6:38:67:31:31:f0:
cf:f9:9a:d8:ca:f9:73:de:97:90:d1:b6:0b:50:54:6f:c9:d1:
bc:6d:ca:0a:24:1e:c2:57:c0:fd:bb:52:7b:ee:ed:04:c4:22:
1a:f2:41:85:c6:53:3e:19:d5:71:a8:82:97:33:91:92:2c:34:
5b:9b:b0:a9:cc:56:1b:9b:cb:e8:0a:99:9c:b7:46:4e:06:0b:
d1:79:f6:0d:4c:c9:bf:65:a0:54:c0:20:10:94:cc:c3:c1:43:
c3:83:97:39:f2:a3:63:24:35:67:44:d6:3e:b9:6f:05:60:9e:
0c:0b:ff:74:89:5f:16:9b:05:97:65:62:c5:9c:c2:4d:88:d6:
77:e9:e0:c1:69:1e:a9:d2:aa:22:33:e3:b5:f8:47:c5:23:6c:
7d:b5:c1:ed:e3:8e:7c:b5:b8:df:e9:5b:f7:8b:fa:7a:09:46:
22:95:ef:83:0c:4b:ea:be:7c:7f:31:4a:12:e1:cd:3a:6c:67:
82:d4:33:e3:21:97:bf:e9:4c:6a:00:5d:1f:73:d7:50:20:8a:
62:bb:42:38:fb:18:ca:0d:65:49:4f:7c:b9:ae:1c:c7:49:7f:
9d:7a:fe:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:50:37 2025 by rpki-client