Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.cer (raw, json)
Hash identifier: ez9Q8ypcq2Ie+KB0pJIpHTsnSZmYV6Ty27cRxfLuxVc=
Subject key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A309E8A6C162D5D26EF058359A30E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.40.64.0/22
IP: 2a04:82c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:30:9e:8a:6c:16:2d:5d:26:ef:05:83:59:a3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:c9:b2:ff:a5:b1:30:e2:7c:fd:ff:e5:0f:
c9:eb:57:66:cc:48:16:c5:e1:aa:ee:85:17:2e:c3:
d0:1d:05:31:26:bf:73:58:34:a6:bb:57:04:49:d7:
0f:a0:2c:e1:df:6f:32:35:55:d8:e3:01:5e:99:0a:
79:a9:55:bf:5e:9a:7c:40:80:ee:61:6f:32:3a:26:
c7:39:16:84:94:8e:c5:43:06:c4:59:33:9e:76:54:
a4:6e:d6:1e:a7:e4:51:5d:c6:22:f6:0a:fe:42:75:
d9:27:6c:f3:a0:6b:36:83:35:25:57:04:0b:65:99:
8d:7c:e2:5a:07:c0:5f:89:14:94:ff:b3:e7:5a:8d:
80:49:9c:2c:2e:08:72:d7:1d:cd:36:c5:2f:6f:ef:
2a:10:99:b8:45:17:f4:f6:03:93:cc:d3:9d:77:53:
ca:2a:a5:43:25:d9:f0:48:5d:da:83:6d:33:c6:0d:
e3:29:e3:d8:6d:8b:26:4f:ce:06:ee:19:e7:1b:d4:
c9:ef:f9:78:1f:a6:91:b7:b3:9b:cb:28:f1:81:46:
c1:81:44:61:fa:73:db:48:7c:45:38:19:c4:9d:ef:
9d:0c:5c:d7:dd:f0:9c:b7:a7:cb:1e:55:6e:5a:f7:
03:67:72:33:5f:a9:ea:e6:5b:6f:4c:42:6c:72:d7:
4b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.64.0/22
IPv6:
2a04:82c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:ef:4d:e0:d0:5a:90:ed:a7:bb:97:01:de:ec:f6:4c:e4:3a:
ba:9b:0f:1e:f6:7a:1f:a8:aa:ae:4f:67:eb:1c:b1:4e:cc:ee:
31:3e:8f:6d:bb:62:a0:8e:75:71:b4:1c:0b:3b:df:fa:4b:d2:
1d:f7:fb:d0:04:73:bc:75:4d:03:14:6d:b6:e0:32:bd:71:7f:
85:2e:cc:ea:e4:12:7f:d6:5e:5c:cf:a9:a5:95:db:79:3b:39:
5a:33:66:54:a3:7d:b1:79:a8:97:47:cb:3d:86:e7:a4:a9:fc:
43:69:2c:75:12:23:1a:0c:2c:c1:01:cf:71:65:94:f4:6f:cb:
4f:4d:e4:b5:7f:c9:13:b1:9f:32:84:d7:a5:77:1e:dd:e4:e6:
18:ef:f0:50:4f:56:81:a7:95:ae:54:d7:d0:e1:1f:0c:84:7d:
b9:98:75:e7:11:a1:36:19:b0:bc:be:2f:b1:9e:1a:d5:06:e7:
cf:54:b2:07:b5:21:d6:6e:4c:1f:f3:c6:c9:af:77:71:68:ab:
85:dd:ba:28:d4:e3:d3:a3:a1:a4:c9:58:f5:e1:c8:4a:20:07:
a5:ac:f0:95:ce:5b:e1:7c:65:49:14:61:a2:bc:c3:f3:bf:64:
2a:3b:c3:e4:e5:40:f6:3c:bd:53:f6:8f:b0:f4:70:1c:cb:b1:
c7:6b:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:50:54 2025 by rpki-client