Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
File: WCXq-3jz1WkmUXwqPNUzmqUTht4.cer (raw, json)
Hash identifier: zh0QCpEA9/ovqv3mMUqnBkeCZhcE/uWBfNqub3RHcx4=
Subject key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019519044E80ABEE39CE55A54D98A7BCD79B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Feb 2025 12:24:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211706
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:04:4e:80:ab:ee:39:ce:55:a5:4d:98:a7:bc:d7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 18 12:24:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:3b:c8:e8:bc:56:ac:88:05:49:a7:1f:20:
35:8d:9f:90:41:00:f9:fa:85:f6:dd:ca:1c:c2:4c:
60:1a:d6:5c:01:e9:aa:1e:75:45:a2:98:7c:35:99:
e5:20:68:2f:c2:1c:2d:d9:63:f8:08:48:f9:f5:b7:
41:69:f8:f1:c8:6d:f0:a4:8b:8c:01:21:21:df:c7:
0b:d4:56:5c:0d:09:04:43:79:27:f5:30:4e:4f:b4:
0c:91:0d:1f:ad:d1:8d:bb:f3:65:8b:16:09:e8:5a:
3c:99:80:53:21:13:81:ec:9e:da:c6:63:f1:5c:f3:
1e:8f:ba:1e:ea:b5:e4:61:fd:dd:e3:dc:31:f6:2a:
30:ec:40:19:e1:00:3f:ac:b2:c7:e8:94:c8:58:20:
3d:e5:b6:a0:c5:81:c6:2b:90:53:c8:ce:25:90:af:
4b:09:d8:be:ee:2c:2e:db:6e:2e:45:5e:d6:ed:12:
41:87:06:d2:25:1c:5e:86:cf:79:a9:b7:ff:88:ce:
10:cb:c2:35:15:a5:81:0c:76:d6:00:8d:1f:e1:77:
42:94:fb:0a:f0:a1:2d:f4:02:4e:8d:14:c1:04:dc:
14:06:8d:00:95:dc:70:5a:e5:07:ae:57:c6:30:9c:
b2:68:ae:cd:30:27:4e:4b:63:23:74:fe:d3:17:77:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211706
Signature Algorithm: sha256WithRSAEncryption
47:a4:2c:3b:55:c8:97:2a:9c:c0:58:dd:0c:b4:bd:14:73:da:
62:92:b5:0d:d3:f5:08:d7:b4:98:9c:c4:4d:6b:84:6b:26:4e:
0f:e3:83:99:bd:9f:34:13:a7:ad:0a:ca:26:ec:fa:48:ac:4e:
6a:02:09:a1:e7:39:aa:ab:cd:f3:37:05:7f:96:34:6d:0a:fd:
02:e7:64:94:1a:4d:54:3a:87:80:78:b5:dd:c6:76:1b:87:a0:
7f:d8:f8:03:af:8a:06:f2:89:08:1e:1e:fc:fe:42:fe:e9:24:
35:c9:a5:d5:ff:bb:d5:fc:e6:25:6f:e7:e3:55:c7:09:0f:61:
30:91:3d:9d:c3:b6:d6:80:28:65:a4:02:94:80:2e:47:ec:ff:
85:06:3c:80:af:1a:30:dc:5a:9e:0f:99:c2:4d:8c:0d:69:c9:
d8:71:e9:1a:8f:11:0c:3e:c6:29:27:9a:1d:3a:09:02:cb:45:
ae:ae:80:05:95:60:05:17:da:cf:66:92:11:f7:c0:fe:b8:fc:
65:fa:0e:14:3c:d4:b4:f3:a4:b4:73:9f:62:9b:2e:07:68:98:
8e:6c:b8:0d:6c:ca:4d:07:c3:18:e3:38:c6:cb:80:da:05:cc:
d2:db:86:f6:6a:31:4f:32:71:2e:89:19:d7:33:1f:5f:8a:17:
58:b5:fb:ce
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZUZBE6Aq+45zlWlTZinvNebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjE4MTIyNDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODI1ZWFmYjc4ZjNkNTY5MjY1MTdjMmEzY2Q1MzM5YWE1MTM4NmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslI7yOi8VqyIBUmnHyA1jZ+QQQD5
+oX23cocwkxgGtZcAemqHnVFoph8NZnlIGgvwhwt2WP4CEj59bdBafjxyG3wpIuM
ASEh38cL1FZcDQkEQ3kn9TBOT7QMkQ0frdGNu/NlixYJ6Fo8mYBTIROB7J7axmPx
XPMej7oe6rXkYf3d49wx9iow7EAZ4QA/rLLH6JTIWCA95bagxYHGK5BTyM4lkK9L
Cdi+7iwu224uRV7W7RJBhwbSJRxehs95qbf/iM4Qy8I1FaWBDHbWAI0f4XdClPsK
8KEt9AJOjRTBBNwUBo0AldxwWuUHrlfGMJyyaK7NMCdOS2MjdP7TF3c5FQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFFgl6vt489VpJlF8KjzVM5qlE4beMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2ZhODI1
Yi1jYWU2LTQ3N2ItYWJmYy1kNWM2YWUyNjI1YWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvZmE4MjVi
LWNhZTYtNDc3Yi1hYmZjLWQ1YzZhZTI2MjVhYS8xL1dDWHEtM2p6MVdrbVVYd3FQ
TlV6bXFVVGh0NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM6+jANBgkqhkiG9w0BAQsFAAOCAQEAR6QsO1XIlyqc
wFjdDLS9FHPaYpK1DdP1CNe0mJzETWuEayZOD+ODmb2fNBOnrQrKJuz6SKxOagIJ
oec5qqvN8zcFf5Y0bQr9AudklBpNVDqHgHi13cZ2G4egf9j4A6+KBvKJCB4e/P5C
/ukkNcml1f+71fzmJW/n41XHCQ9hMJE9ncO21oAoZaQClIAuR+z/hQY8gK8aMNxa
ng+Zwk2MDWnJ2HHpGo8RDD7GKSeaHToJAstFrq6ABZVgBRfaz2aSEffA/rj8ZfoO
FDzUtPOktHOfYpsuB2iYjmy4DWzKTQfDGOM4xsuA2gXM0tuG9moxTzJxLokZ1zMf
X4oXWLX7zg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:10 2025 by rpki-client