Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.cer (raw, json)
Hash identifier: 3lRrq71uYI2TvPQEY/YaKHF0xgbwrcZNij3i1GjvuHg=
Subject key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195C87B52146889FB9C693DD04F20776674
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Mar 2025 14:08:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.95.246.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:7b:52:14:68:89:fb:9c:69:3d:d0:4f:20:77:66:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 24 14:08:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fe:32:db:11:21:59:df:8f:8f:f0:ba:de:d9:
3f:44:f6:68:be:d7:c0:2f:b6:86:e3:b4:7e:6b:8f:
74:3d:cb:f2:6f:16:79:1c:e9:25:ea:ca:43:c9:7d:
18:d5:68:da:55:ca:51:af:88:0b:c2:a4:b0:3e:47:
69:9e:97:19:7a:fd:22:9a:07:9c:ed:36:28:01:ed:
35:19:1f:ae:f0:7c:29:ec:32:1c:6b:88:33:07:ff:
bb:e7:bb:0f:f5:16:67:fd:2e:56:ac:46:63:c4:6c:
35:fa:6d:5f:24:96:83:ed:09:df:17:c2:28:a0:51:
5e:9c:84:5b:88:4e:1b:89:17:e4:60:af:e3:73:c1:
80:b8:af:a0:70:8d:56:df:08:43:fe:4b:b0:a6:2d:
4a:a1:e5:3d:6b:16:ef:98:e3:34:82:03:9b:1b:1b:
b2:d9:4b:90:cf:26:e9:2c:98:79:a1:7f:08:3c:82:
c9:88:de:db:ab:b6:18:4e:9c:5c:22:d1:29:8f:74:
39:54:05:cf:c4:85:f0:9b:3f:c7:55:87:81:de:2c:
95:f7:ad:af:68:16:e0:6c:83:3e:e9:1a:fc:ee:d1:
a1:51:a4:5d:28:10:2f:d1:61:7b:31:b2:3e:7a:11:
f6:67:91:a0:79:01:53:e9:ff:50:10:a1:dd:f5:e4:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.246.0/24
Signature Algorithm: sha256WithRSAEncryption
06:45:f0:c0:31:d3:0a:e3:da:32:61:be:4a:18:a4:48:cc:ae:
93:fd:2d:a6:72:20:7f:61:30:5d:53:6a:8d:c9:cb:92:34:78:
62:26:99:37:40:2c:22:62:8c:9b:82:7f:40:ab:17:49:ac:91:
f1:ee:c8:fa:14:98:f0:6d:21:1c:d3:17:18:a5:5f:2a:26:3f:
96:14:40:bf:ab:3c:5d:10:eb:2a:0a:1f:7d:f9:00:ad:23:c8:
a1:c0:f4:a5:07:3d:67:f3:d3:d3:bf:b9:06:f6:17:61:86:f6:
85:8c:9b:b4:4f:8f:cd:16:2c:1b:18:9e:47:27:4c:a3:71:22:
17:77:eb:93:8a:bc:4d:d9:af:8b:41:b0:0b:7c:28:83:b3:e6:
5f:1a:89:71:f7:9d:0d:3c:6c:18:f0:75:09:43:6b:1a:52:a3:
5c:95:6e:c5:ac:3d:85:76:52:ac:c9:c7:08:6e:29:dd:52:a1:
87:85:d0:e7:ff:be:43:0a:57:a8:ea:14:39:cd:ae:95:97:f7:
73:1a:09:25:2c:1d:2e:01:59:4b:04:e5:4b:47:02:93:0a:96:
0a:44:df:0a:2c:2b:e9:3f:a3:a8:c0:71:01:87:d0:3d:c5:63:
fe:95:b3:14:b1:95:95:57:3b:7a:74:7a:2b:7f:dc:2b:3c:bc:
66:52:81:b5
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZXIe1IUaIn7nGk90E8gd2Z0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzI0MTQwODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzUyZGQwNWY2OGFhMWEzMjRhZDViYzEyNDc2YzViOWE2MWViYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv4y2xEhWd+Pj/C63tk/RPZovtfA
L7aG47R+a490PcvybxZ5HOkl6spDyX0Y1WjaVcpRr4gLwqSwPkdpnpcZev0imgec
7TYoAe01GR+u8Hwp7DIca4gzB/+757sP9RZn/S5WrEZjxGw1+m1fJJaD7QnfF8Io
oFFenIRbiE4biRfkYK/jc8GAuK+gcI1W3whD/kuwpi1KoeU9axbvmOM0ggObGxuy
2UuQzybpLJh5oX8IPILJiN7bq7YYTpxcItEpj3Q5VAXPxIXwmz/HVYeB3iyV962v
aBbgbIM+6Rr87tGhUaRdKBAv0WF7MbI+ehH2Z5GgeQFT6f9QEKHd9eRIkQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAxS3QX2iqGjJK1bwSR2xbmmHrwAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzFiNGU1
Ny01ZWI0LTRiOWQtYmMyNi03MDc0OWU3YTRkOTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvMWI0ZTU3
LTVlYjQtNGI5ZC1iYzI2LTcwNzQ5ZTdhNGQ5NC8xL0RGTGRCZmFLb2FNa3JWdkJK
SGJGdWFZZXZBQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw1/2MA0GCSqGSIb3DQEBCwUAA4IBAQAGRfDA
MdMK49oyYb5KGKRIzK6T/S2mciB/YTBdU2qNycuSNHhiJpk3QCwiYoybgn9AqxdJ
rJHx7sj6FJjwbSEc0xcYpV8qJj+WFEC/qzxdEOsqCh99+QCtI8ihwPSlBz1n89PT
v7kG9hdhhvaFjJu0T4/NFiwbGJ5HJ0yjcSIXd+uTirxN2a+LQbALfCiDs+ZfGolx
950NPGwY8HUJQ2saUqNclW7FrD2FdlKsyccIbindUqGHhdDn/75DCleo6hQ5za6V
l/dzGgklLB0uAVlLBOVLRwKTCpYKRN8KLCvpP6OowHEBh9A9xWP+lbMUsZWVVzt6
dHorf9wrPLxmUoG1
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:23:25 2025 by rpki-client