Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
File: 58NBW98cAUrhwY58_TPFbwGP7ug.cer (raw, json)
Hash identifier: A8gxspAASUkeDJFl+ckxDDfd0zTVKrF+mv9N+DfKTYM=
Subject key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C8978A8B7FFC9AF40375D8D5E60B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.34.4.0/22
IP: 2001:67c:2b60::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:89:78:a8:b7:ff:c9:af:40:37:5d:8d:5e:60:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:25:c2:0d:6b:bc:6b:5c:c6:e3:d4:38:1c:
c1:9f:64:a3:43:11:33:68:b4:cb:c0:0d:ed:7d:35:
db:23:fe:64:71:3f:a3:ae:43:8a:69:45:de:1a:c0:
80:b9:d6:95:3b:71:38:43:33:fe:e1:06:20:2d:23:
7d:6f:82:5e:4c:93:7b:84:0a:17:c5:6d:16:d9:7b:
bd:8f:99:73:ea:7c:bf:29:46:3a:1b:2c:0c:0b:bc:
e1:70:95:0c:5e:3f:66:13:50:a5:a4:37:2b:8f:2f:
54:ae:85:b3:1e:99:9d:e0:fd:d1:26:c9:f4:1f:03:
c1:32:ae:4f:90:3f:18:48:66:a1:36:85:aa:8a:27:
b4:19:94:74:d2:61:da:44:93:65:e2:45:4d:90:83:
ab:3e:97:9b:52:95:2e:4e:96:13:35:8d:f1:7f:b4:
fe:aa:80:61:97:28:0c:91:0b:f3:24:51:cf:48:2a:
c8:61:61:16:e1:7c:ae:60:00:4e:01:39:0d:58:6e:
3a:95:30:f2:26:fc:37:1f:ee:6a:87:28:b3:6d:7b:
2e:be:5c:74:eb:99:d0:48:d9:ae:b7:52:ba:c6:74:
d7:5c:04:06:9f:77:bf:2b:02:d9:66:18:05:9a:37:
49:db:5b:7f:9a:ae:24:78:69:b8:08:9d:00:ba:f1:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.4.0/22
IPv6:
2001:67c:2b60::/48
Signature Algorithm: sha256WithRSAEncryption
66:b8:d4:12:6b:19:8d:59:90:b0:93:d5:d5:b7:ce:94:3e:8e:
68:19:32:b0:54:98:f0:9b:34:cc:24:f7:12:4c:11:aa:18:91:
fe:05:af:53:04:b5:67:1e:5b:55:c8:cf:28:4f:92:65:0b:fe:
68:ba:c5:33:3b:ca:95:38:6b:45:6a:8b:c5:af:88:80:85:f7:
cf:21:92:b5:0a:a8:c5:d5:5e:c6:bd:3b:22:d0:79:b2:7d:d1:
30:a0:95:ea:df:f9:32:20:d9:37:47:d7:65:0c:3f:74:b0:26:
e9:8b:c1:40:48:48:89:df:53:3a:63:5e:11:d4:44:5d:5f:b9:
12:b3:5a:f3:e9:10:50:9c:98:ef:54:96:62:b5:bf:34:91:92:
92:e8:d4:a5:e8:5e:c9:d6:8c:fa:f2:1b:84:e4:25:b5:69:7d:
07:13:3d:ec:07:d6:14:14:4e:6b:c9:bf:c2:7e:3a:48:61:32:
74:aa:cc:90:fe:a7:82:09:85:f9:68:aa:d2:00:d3:db:a8:36:
eb:ba:35:80:3c:10:96:fc:10:99:2d:61:3a:08:63:a6:a1:93:
2f:82:6b:3d:39:e6:8d:c2:2e:eb:67:85:f1:55:c0:25:c9:11:
73:e6:fc:47:2c:2e:97:86:8a:3e:a5:d5:d3:cf:f9:75:2a:a9:
b8:a9:41:8a
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAZQfjIl4qLf/ya9AN12NXmC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2MzNDE1YmRmMWMwMTRhZTFjMThlN2NmZDMzYzU2ZjAxOGZlZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkQlwg1rvGtcxuPUOBzBn2SjQxEz
aLTLwA3tfTXbI/5kcT+jrkOKaUXeGsCAudaVO3E4QzP+4QYgLSN9b4JeTJN7hAoX
xW0W2Xu9j5lz6ny/KUY6GywMC7zhcJUMXj9mE1ClpDcrjy9UroWzHpmd4P3RJsn0
HwPBMq5PkD8YSGahNoWqiie0GZR00mHaRJNl4kVNkIOrPpebUpUuTpYTNY3xf7T+
qoBhlygMkQvzJFHPSCrIYWEW4XyuYABOATkNWG46lTDyJvw3H+5qhyizbXsuvlx0
65nQSNmut1K6xnTXXAQGn3e/KwLZZhgFmjdJ21t/mq4keGm4CJ0AuvFjPwIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFOfDQVvfHAFK4cGOfP0zxW8Bj+7oMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiL2NjYjU2
Zi1kZDA1LTQ2MTYtYTVmMS01NjMyNDY2OGE5NjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvY2NiNTZm
LWRkMDUtNDYxNi1hNWYxLTU2MzI0NjY4YTk2NC8xLzU4TkJXOThjQVVyaHdZNThf
VFBGYndHUDd1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQCwSIEMA8EAgACMAkDBwAgAQZ8K2AwDQYJKoZI
hvcNAQELBQADggEBAGa41BJrGY1ZkLCT1dW3zpQ+jmgZMrBUmPCbNMwk9xJMEaoY
kf4Fr1MEtWceW1XIzyhPkmUL/mi6xTM7ypU4a0Vqi8WviICF988hkrUKqMXVXsa9
OyLQebJ90TCglerf+TIg2TdH12UMP3SwJumLwUBISInfUzpjXhHURF1fuRKzWvPp
EFCcmO9UlmK1vzSRkpLo1KXoXsnWjPryG4TkJbVpfQcTPewH1hQUTmvJv8J+Okhh
MnSqzJD+p4IJhfloqtIA09uoNuu6NYA8EJb8EJktYToIY6ahky+Caz055o3CLutn
hfFVwCXJEXPm/EcsLpeGij6l1dPP+XUqqbipQYo=
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:48:38 2025 by rpki-client