Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer
File: JxyaxSXAuEK79l0-xnaJcDzKMls.cer (raw, json)
Hash identifier: Yhtq1HgPdiAdvJcERcHfzVI+jVqh2z7uktVspGsTu2c=
Subject key identifier: 27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252135ACB21169287C6707591C1A1A78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 64413
IP: 2a06:2ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:35:ac:b2:11:69:28:7c:67:07:59:1c:1a:1a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=271c9ac525c0b842bbf65d3ec67689703cca325b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:60:3f:f9:b4:97:7e:4d:89:71:b9:33:6f:
4c:9c:da:31:d7:19:0f:82:36:9c:d6:7c:51:82:9c:
77:96:c0:a8:15:15:45:10:2a:4e:9d:2a:ad:ae:8e:
05:09:9f:12:8c:c9:a3:22:33:be:06:bd:99:d8:ef:
d4:40:8f:6c:8e:a9:61:bf:2d:b2:32:8b:f4:af:64:
51:61:9e:d9:39:41:5b:a4:dc:83:2c:75:8a:13:ba:
12:df:a9:69:61:20:ca:c8:3c:66:64:97:f4:bd:88:
2f:84:35:48:44:7e:8b:f6:f7:1a:2a:3b:0f:1c:5d:
0d:7c:74:10:6a:ea:bf:d7:26:32:b3:13:4b:71:2f:
91:53:f1:fb:c1:87:12:09:19:ee:6e:f9:5b:2b:cc:
2c:41:0c:da:99:07:f8:dd:c7:66:8a:e9:89:f2:1c:
33:55:c0:3b:6f:7e:c3:79:fe:f5:81:71:f6:6c:94:
fd:85:61:8a:f3:f9:1e:32:5e:09:21:2c:4d:ca:04:
8e:46:43:e5:eb:b9:b5:0b:5e:97:bd:06:1c:b0:32:
ca:d2:ec:bd:9f:f7:76:75:86:14:9e:09:ca:23:9e:
0d:3d:cd:38:f1:60:8d:2f:34:2a:35:d8:4a:15:22:
0c:ea:99:72:32:27:e9:85:83:08:0a:e5:06:90:2c:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:2ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64413
Signature Algorithm: sha256WithRSAEncryption
10:6c:26:81:b6:97:52:d2:62:2e:e2:2c:e8:98:b9:c0:0e:12:
57:88:1f:66:64:02:a9:39:97:55:96:5f:b5:ba:1a:f8:e2:79:
ca:4b:7d:6f:d5:fe:ce:79:04:81:a0:ea:ca:bc:85:57:ac:23:
94:54:ee:68:0c:6e:4a:84:46:48:b1:d8:94:15:c5:f9:b2:8b:
d6:f7:74:61:d2:ad:7e:d3:92:8e:49:bc:18:45:88:e3:e7:13:
c8:4f:9e:e2:bb:f5:9c:97:f6:c2:e5:aa:45:d9:a7:07:3f:5b:
0b:da:14:ba:33:e1:53:cf:fa:87:ac:69:3c:e6:2a:71:c8:54:
60:c4:68:60:52:b2:6d:2a:e1:66:d0:95:01:e1:80:95:5f:73:
29:ff:e6:13:ff:71:a5:d4:8d:fb:19:3e:39:42:ad:fd:96:ac:
26:53:70:38:f3:44:95:71:b6:54:a3:07:0b:52:3a:23:88:35:
9a:b3:f7:96:ee:f5:02:e2:61:02:86:ec:44:38:80:97:27:0a:
87:aa:ea:e4:a6:9b:18:8a:23:ae:04:84:50:44:eb:3f:8e:1d:
5f:4a:bc:8f:61:13:d1:31:32:05:9f:97:47:bd:73:9b:25:a4:
ef:b9:98:29:b4:19:c8:ae:ce:bf:3c:b4:49:d8:43:44:de:56:
fb:2b:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:28 2025 by rpki-client