Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
File: iloI9Bw3MCfggbXByoqAC_GFXZ8.cer (raw, json)
Hash identifier: C0JzBFruarl6hmx6RymwEo9MDaz5YMOjkyjGPg22vPo=
Subject key identifier: 8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1A8065103245D1A29512FA86E6342
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.207.183.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a8:06:51:03:24:5d:1a:29:51:2f:a8:6e:63:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:26:67:b7:b6:9e:25:dd:b3:5c:d6:71:0d:
64:2e:1a:dc:8a:17:83:c8:95:18:84:07:c1:65:9d:
99:81:82:e4:d7:77:3c:b7:1b:80:37:6f:54:69:63:
46:ec:d3:15:b4:58:57:c5:24:ee:c4:9c:47:d8:4c:
c9:2a:b1:96:38:97:07:78:6e:00:b0:c1:3c:f1:18:
cb:b8:cf:26:6e:9e:0c:2a:d6:f5:20:8d:a2:7f:3c:
65:bc:e7:06:d6:f2:77:e4:ca:3c:ff:a4:71:c1:5f:
16:08:e9:7f:fb:06:f1:32:aa:c7:e3:db:ee:89:6c:
09:c0:58:3d:fb:6b:71:49:9e:c1:40:36:c4:bf:d8:
18:70:b1:c4:5c:60:49:69:6a:e2:c6:99:c8:c5:bc:
bb:11:7a:37:ce:bd:8e:d7:dd:46:b7:84:14:cb:f3:
40:dd:b6:32:d4:f7:b2:40:4c:a4:a4:cb:61:8f:0b:
ef:ce:ce:e5:11:2a:c0:d5:4e:fc:fb:e4:c8:a6:4f:
bc:49:bd:bd:47:04:19:ab:f2:a8:fc:bc:fb:db:11:
86:9d:bc:71:b0:02:71:c9:fc:d7:a3:61:24:3a:21:
bf:5d:0b:0b:0a:dd:ea:5d:05:57:fb:d9:75:38:13:
76:1c:59:3e:92:bc:a7:69:fe:d6:5b:d2:f8:e7:e7:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:9a:08:cb:8f:60:43:4f:51:22:ac:a4:f0:39:2a:04:59:db:
7f:9a:21:80:bc:ca:75:3c:8b:f5:88:ab:a9:3f:d8:c1:75:15:
bf:5d:72:9e:51:2f:de:f5:7f:c7:5f:67:74:cb:a6:be:39:d3:
04:41:f9:ac:87:1a:86:44:55:8f:e0:37:15:b5:9b:5b:ef:53:
cb:15:4b:c2:27:2e:b9:bf:8b:de:09:fe:1c:4e:a8:3f:81:88:
66:ac:77:93:30:2b:7d:e7:76:8d:be:68:49:b6:e5:2a:18:6e:
ef:9e:52:77:a4:7c:bc:b3:69:ae:b7:45:19:77:19:46:5b:bb:
17:de:ca:df:51:89:37:b1:83:0a:91:eb:f2:28:75:90:5b:e4:
bc:9e:4c:e2:7b:78:70:41:a5:d1:5f:cd:41:cf:65:56:60:a7:
7f:c4:ac:c3:7f:01:d8:b5:08:10:ef:3c:c1:2b:78:b4:8a:ee:
79:90:33:f3:0e:04:16:2d:b8:ab:43:16:54:3b:13:cb:ea:d9:
d0:94:e2:ae:d6:79:9b:d7:75:db:f7:dc:e9:71:ad:d7:3a:1c:
b4:f2:ef:b6:d8:d4:b2:cd:09:9a:80:fa:af:6b:59:6d:f1:16:
01:9c:c9:73:73:b5:68:89:9e:eb:95:1b:55:84:28:e4:81:fe:
a8:74:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:23 2025 by rpki-client