Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
File: B2X29feTbbg1Ggo5PPBppRjldEU.cer (raw, json)
Hash identifier: 6qeT4fHHQFJODmI4mBkUwdfeToHdzjiDOPfJL7AUQ7c=
Subject key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E3A0A263B34306839C6582A4CE4EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.33.180.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3a:0a:26:3b:34:30:68:39:c6:58:2a:4c:e4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:a3:eb:6d:6f:f0:8f:72:4c:c3:58:f4:9e:
93:0c:17:f0:1b:71:b3:e8:1c:aa:d7:50:5e:35:6c:
da:99:f6:ee:bc:48:f2:0e:b8:50:a2:3d:ab:42:f9:
85:63:9d:d0:2d:00:c5:27:15:6d:37:44:ce:3e:33:
33:db:2a:04:82:63:53:b6:aa:32:9a:bf:ff:e2:b9:
f0:80:6e:63:9d:f2:2a:4a:6f:23:0b:65:b0:e0:0f:
ef:44:f0:42:2e:92:a4:64:f9:14:8c:22:54:16:9e:
69:91:af:f7:2d:21:20:b0:9a:49:bb:e0:a1:bf:b6:
62:3d:1b:cc:41:20:b3:63:19:b8:3f:1e:45:89:74:
be:7e:73:5c:2d:6d:e8:47:6d:cd:7c:da:bd:80:d3:
11:4b:a2:70:43:fe:34:f7:be:94:7d:e7:72:4e:f0:
86:6b:82:f2:c7:c2:f4:9b:95:10:e5:24:62:42:38:
e7:41:be:38:2f:71:a9:90:83:66:28:30:37:3c:af:
70:e8:48:79:8d:08:41:1f:60:78:9a:82:eb:4c:a2:
a3:68:48:80:de:10:ab:5e:a0:27:73:7f:84:28:f6:
57:6d:6c:58:a1:cd:83:fb:45:ba:1c:96:40:f2:98:
4c:16:77:5d:b3:c9:ef:9d:a6:0b:5c:ef:0d:47:d9:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.180.0/23
Signature Algorithm: sha256WithRSAEncryption
06:fc:f5:99:0b:29:24:c8:db:09:be:fb:f1:50:16:1e:5a:7d:
bd:32:fc:1e:55:f1:d7:27:93:2c:e8:66:db:0e:8f:57:ce:b8:
4b:28:f1:c2:1b:af:eb:32:e6:66:39:9a:02:a3:20:6b:77:a6:
cc:90:67:06:0e:5a:17:a0:af:62:1f:2e:43:75:b5:24:b6:bb:
9e:8e:33:c6:02:19:0c:8a:02:59:f5:56:c9:a9:55:b4:c7:e6:
27:49:4e:ba:be:95:df:f2:fe:60:97:20:4c:69:17:eb:22:10:
52:8c:ae:b3:a7:b4:13:13:ee:ca:c2:c5:31:8e:ab:99:17:e0:
65:9f:25:ca:a5:01:03:32:27:10:0a:45:76:f9:26:3e:b0:08:
f1:a4:2a:ad:99:71:17:b4:45:fb:68:86:9d:44:d0:d6:bf:4b:
55:26:c7:af:fc:e1:1e:98:88:0d:fa:c8:a0:51:29:70:f1:66:
28:04:1a:52:4b:a5:47:1b:12:53:ee:10:e3:b5:d9:50:fb:fe:
dd:1b:f6:86:f3:92:ab:f3:b3:5e:02:df:05:09:e9:9d:de:79:
a3:c3:60:40:d7:4b:34:a9:5d:7d:99:8b:3b:3f:73:32:19:e0:
19:63:eb:4e:0b:ff:b7:e6:8c:09:fb:1c:30:d0:8e:78:43:09:
bb:d8:00:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:46:25 2025 by rpki-client