Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.cer (raw, json)
Hash identifier: rf7SJFk2KPYdZNlB1POF9kh+W1vWhQAu5vrVRUBETRE=
Subject key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B363E0412BB45172F64336802331ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.222.192.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:63:e0:41:2b:b4:51:72:f6:43:36:80:23:31:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:5f:67:51:1d:49:47:43:ee:85:80:33:4f:
89:fa:09:86:3f:02:d1:cd:d0:c0:97:13:24:2d:3e:
a5:9e:5a:1c:92:32:9f:76:8f:07:a3:66:a3:3a:06:
47:8e:25:34:c8:39:fd:c3:4c:7e:1f:b6:44:81:65:
82:b1:dd:6b:c4:6a:36:6a:f6:ed:b8:4a:e5:0c:57:
89:ce:5e:c4:e7:bc:cf:62:e6:92:b3:7e:07:23:fe:
be:f0:7f:59:90:2b:ac:8f:01:d7:8e:fe:62:f2:99:
8d:d3:f6:25:7a:62:2d:3b:35:93:10:be:c4:e1:f8:
c3:5d:d1:56:0f:0e:ff:98:f2:f7:3e:82:b3:05:87:
e3:55:58:16:fd:cc:4a:f1:bb:62:4b:f8:6a:b5:58:
62:c4:37:f3:af:13:96:62:ed:c5:17:68:24:f3:6f:
4f:ae:4f:b8:04:80:60:87:ac:15:7b:db:2f:4c:ff:
ff:60:08:6e:cc:07:76:59:b5:41:57:73:34:6f:66:
08:2c:e9:aa:8f:81:58:89:10:ec:90:3e:0e:f4:12:
d4:29:2d:11:37:61:b7:ea:28:93:3c:1b:a2:c6:1c:
1e:b9:39:80:ed:5f:aa:5f:8e:e0:7b:cd:8a:9e:85:
fa:d1:22:e1:c7:ad:89:8a:88:14:58:07:3f:80:cf:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.192.0/19
Signature Algorithm: sha256WithRSAEncryption
55:2e:c7:be:1b:ce:74:b1:5f:4b:16:0a:52:c6:68:3c:aa:22:
54:84:a7:f2:8f:a2:51:cb:59:c8:2d:d3:c1:2c:d7:cf:8c:b0:
22:bc:6c:63:7a:8d:df:23:1a:b8:ba:63:f0:c1:4f:91:81:bd:
c4:f7:25:83:f4:a7:bb:3d:07:71:37:81:b6:0b:aa:2c:5b:a3:
70:40:10:b3:bd:47:ba:70:12:0b:a1:3f:10:fe:24:63:be:eb:
c0:02:25:4c:9a:fa:35:ab:68:d7:48:6d:db:55:f6:c3:cd:42:
51:34:7f:7c:23:e5:94:88:30:23:bf:f5:72:e8:af:5e:e9:5a:
5a:35:21:54:34:08:2f:fb:c5:32:9a:b0:42:3d:6c:c9:9d:89:
45:f2:96:36:93:64:61:ac:8d:85:f2:d8:e9:dd:68:0c:e9:52:
5d:4d:ce:13:ca:a3:66:7f:9f:48:47:07:dd:4c:e6:a8:cf:66:
ba:d7:27:51:52:b5:d6:bf:81:67:92:03:29:85:e2:06:fb:23:
d3:a6:e8:55:6b:af:5a:b9:a9:8c:ce:ec:fe:a5:79:1c:3b:9d:
fd:15:f8:05:5f:bb:f9:ad:67:3b:32:40:5e:1f:d9:67:8c:55:
d4:e0:13:89:0c:a6:79:9f:24:5c:04:c2:91:bc:9a:8c:c9:df:
60:70:89:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:29 2025 by rpki-client