Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
File: 4PL1Rd2yNOOD02uKjWtWo43XL4k.cer (raw, json)
Hash identifier: jVrilhqlrYGS8q9QEH/I3ZApwbDZC7mfOdwQhypH0sQ=
Subject key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01943BC6706C32E8B78C881C4203D3E3AB82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 06 Jan 2025 13:20:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.207.236.0/24
IP: 91.223.95.0/24
IP: 2a0a:64c0::/29
IP: 2a0e:9640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:c6:70:6c:32:e8:b7:8c:88:1c:42:03:d3:e3:ab:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 6 13:20:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:2a:07:7a:86:f5:ae:60:22:33:61:9c:fa:
66:df:a7:6a:7c:64:8a:34:70:29:c9:a1:76:d2:5e:
fa:34:fa:ae:4a:b3:53:24:87:2e:93:d4:14:14:b6:
e3:de:25:04:75:96:6a:75:0f:c2:05:55:64:55:2b:
4d:73:4b:b4:bb:12:62:3b:e8:18:df:59:a2:14:55:
49:0b:0c:b7:4c:36:d3:ec:4f:98:e8:f0:e3:f6:2d:
ef:d1:8d:b5:4f:be:d8:94:5a:bb:57:9c:c5:e6:41:
d9:44:37:fa:8d:88:30:33:98:9a:b2:da:36:84:20:
c1:4b:e1:7d:4d:8a:60:b9:f6:03:f2:04:7b:e7:80:
6d:81:d9:c9:0a:e8:d6:72:34:b4:7f:47:ce:7c:1e:
db:ad:74:87:04:8e:28:6c:9d:bc:e6:ac:b6:7a:4d:
5d:d8:66:53:d5:50:9c:29:f0:61:67:42:16:a3:1d:
f1:4d:59:55:ca:77:ac:7b:f8:e6:44:1a:0d:59:0d:
e0:a5:4f:c1:46:a4:55:b2:b1:79:df:b9:e3:32:dd:
9e:15:3c:0e:ed:a8:44:e5:e7:eb:5c:b2:79:bd:b9:
9b:96:32:63:6b:d6:55:d3:f1:21:6e:90:45:1d:e0:
4d:d0:0b:70:63:41:56:f7:31:0a:6c:84:33:8b:84:
31:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.236.0/24
91.223.95.0/24
IPv6:
2a0a:64c0::/29
2a0e:9640::/29
Signature Algorithm: sha256WithRSAEncryption
59:d0:ee:77:43:15:f8:e6:56:4f:f7:51:43:73:66:43:da:1e:
b3:a1:53:d1:23:d0:a4:24:0e:1f:e0:6d:32:bc:76:ba:e7:c3:
ef:4b:ac:11:5c:a2:5f:5a:65:cc:8f:66:70:2f:1f:ed:f9:9c:
3e:6b:39:8d:a5:fa:d0:40:d4:2a:66:af:ce:a8:79:65:f5:85:
a2:ec:8f:6a:3f:80:9f:90:75:cf:73:f1:cf:af:3e:84:49:ba:
16:ed:6e:fa:27:07:24:f7:18:dd:8d:c0:71:e7:cf:4c:18:5f:
92:d0:49:e2:25:40:95:f1:6f:e1:dc:87:e8:05:34:65:08:01:
2d:41:9c:8f:df:d8:6c:d2:03:20:2a:24:12:f3:df:e1:fe:7c:
ce:56:03:80:5d:1f:20:09:ef:aa:cf:77:f0:ed:90:60:68:cf:
c5:d9:76:9d:90:e6:87:a5:e4:95:09:8b:5c:14:56:b1:3f:ae:
46:60:f0:65:99:b8:e3:1f:f0:d9:96:38:26:77:7a:84:7e:0f:
9e:84:cb:9d:9d:a9:ef:d9:b3:2c:1c:a8:33:96:0c:50:ac:3a:
3d:4a:36:c5:df:2a:d0:81:0b:fc:fe:53:2d:0b:74:cc:eb:13:
53:4b:52:64:b6:1b:ac:0b:e2:1d:00:7a:14:b0:94:d1:73:36:
98:e2:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:29 2025 by rpki-client