Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
File: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer (raw, json)
Hash identifier: 0xdJFfkKCnpC8u+1edDYRleFJTvm2vqXo59xlBd169E=
Subject key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942C2E850F54861936B621959C98B654EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 Jan 2025 12:40:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.146.69.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:2e:85:0f:54:86:19:36:b6:21:95:9c:98:b6:54:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 3 12:40:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:7c:98:2a:c6:7b:01:3c:43:3c:14:95:90:
b0:40:af:13:06:ea:74:ed:fd:d9:49:94:69:9e:8b:
3e:dd:e2:de:41:9c:dd:ff:e9:2d:c0:f2:d9:1d:ae:
a1:e8:45:27:19:f5:a0:63:28:50:dd:99:4c:7e:e5:
06:fe:52:04:96:58:2e:ac:6a:4a:20:11:02:3e:aa:
89:98:7b:97:38:95:e1:c2:ff:69:be:7f:36:a1:fa:
78:86:ce:a7:90:1f:e4:a0:00:58:29:cc:21:58:28:
35:76:ca:ca:df:95:75:68:01:07:6e:f1:7e:93:30:
7a:47:59:81:6e:1d:39:4a:a2:a0:97:c3:d6:a5:6e:
7b:b3:51:e8:f6:bf:02:79:ed:c5:1d:15:bb:18:70:
33:21:94:5a:4c:b7:44:73:17:00:90:5e:b5:8e:a1:
f3:2e:52:c7:8b:3a:2f:1b:01:48:20:6e:87:9b:8a:
a4:a7:41:87:77:99:ad:a8:8c:c7:b0:f3:4b:9b:72:
01:3e:11:e4:62:d4:cd:48:a5:0c:39:41:69:7d:47:
ea:d7:5c:37:da:f8:7c:d7:e9:b5:a0:29:b7:ac:0d:
1b:0a:49:e6:e3:fc:fb:e4:6a:f6:cf:f1:fa:6b:e5:
e2:6d:80:71:41:8e:e2:ee:74:47:3f:d1:65:c9:c5:
d9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.69.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:1d:d1:1c:99:de:2a:ee:91:de:58:24:10:dd:94:89:b8:a6:
ed:9a:88:ac:7f:c6:9c:02:ea:c1:d3:1c:d2:4b:60:6d:8b:9e:
8e:24:0e:0d:46:92:8b:d0:1f:a2:e5:71:f3:8b:6d:e6:8c:fc:
1b:32:7c:7b:23:e2:ff:4c:29:7a:a1:56:99:1c:dd:b0:a8:3c:
19:ab:db:3b:80:80:66:a5:79:3f:58:82:2c:e8:32:61:12:ef:
7c:82:4a:54:f4:4a:82:a7:1a:f2:ec:b3:75:29:84:66:40:5a:
de:25:0b:f3:75:58:64:d0:6e:68:aa:aa:a3:d4:b0:78:31:62:
3d:8a:62:53:01:d9:fb:e4:0e:4c:05:57:ff:b1:af:a7:87:ab:
95:fe:69:11:6c:e6:58:86:e5:6b:3c:e7:c4:30:f9:b9:90:c2:
b0:3e:1d:b2:03:57:b6:af:f8:af:c0:e7:b8:6f:58:9a:7e:e8:
a8:78:da:d1:1a:d5:15:70:e1:cc:bf:ab:1e:8b:62:32:ae:8d:
63:9d:ea:10:02:60:72:6c:a8:77:d9:4a:4e:6c:cc:0e:d2:43:
c0:f8:43:b7:87:0d:32:b9:23:3e:8e:3c:e7:bf:9a:d6:ce:6c:
4f:7d:bf:c1:74:b6:6f:54:5a:e3:25:59:b1:7e:e8:a3:7a:42:
ff:c3:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:47 2025 by rpki-client