Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
File: Fjndvg_zoYcM20VQmNxC-s_VSfU.cer (raw, json)
Hash identifier: WEuIWVCtXY3itaXqyEuJljheNdXugv74JHB3a6M3low=
Subject key identifier: 16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C2FB7D217CE5CD7E578151B31B315
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 188.93.142.0/24
IP: 2a12:f800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2f:b7:d2:17:ce:5c:d7:e5:78:15:1b:31:b3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:87:59:4e:60:34:b1:64:6f:21:0e:4f:29:
80:d4:90:93:39:c8:3c:75:12:35:6f:ec:6e:0d:04:
a8:83:24:8e:84:6f:0c:1e:ed:b9:1d:b3:1d:47:b3:
37:10:7a:88:30:6e:2b:5e:cd:b6:ca:28:9a:d3:31:
fc:5e:a5:90:8f:e8:ca:91:3e:b8:a8:bc:49:fa:ba:
92:62:36:18:ec:31:0f:fd:45:b5:4c:44:8b:f7:74:
cc:31:d5:ff:f4:c1:f0:e0:53:66:a8:42:09:c6:18:
c5:ea:fe:1e:25:5f:a9:b4:29:e5:d2:4d:b7:42:5e:
f8:89:08:3a:06:7d:73:38:28:6a:df:35:43:07:9a:
08:5c:1b:27:2e:5a:46:51:8c:3b:ff:a8:f7:f1:6b:
e3:a1:2f:19:1b:ec:29:bb:9e:87:18:89:c5:18:d6:
eb:21:e9:d4:62:99:84:9c:89:32:51:5a:dd:0a:22:
48:22:4f:cc:42:df:76:ce:02:b9:65:5c:bb:bf:65:
04:9f:f1:c3:fc:62:79:a5:3d:cf:58:ec:da:3d:98:
87:d0:c9:71:2c:b5:d6:25:43:c5:64:af:a7:bd:6b:
1e:34:74:2c:b5:7f:06:00:0d:97:a1:d5:37:42:57:
c7:ef:8f:ed:e5:1e:af:63:7f:1a:02:d7:46:2c:52:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.142.0/24
IPv6:
2a12:f800::/29
Signature Algorithm: sha256WithRSAEncryption
2e:14:41:fd:65:6c:43:c8:8f:6b:78:db:47:9c:a1:89:d8:da:
2f:36:a9:57:7e:d8:76:c4:5b:ba:a0:8e:b9:00:3f:35:e0:e4:
56:ec:46:87:aa:0c:59:69:2a:83:f5:34:24:a9:b7:7c:fd:aa:
e3:e1:8d:bc:93:b2:fa:78:d6:01:dc:81:51:b1:5c:af:71:26:
7d:36:4c:f2:3b:ab:c5:60:87:5c:c2:86:29:48:7f:e7:05:6b:
29:dc:2d:81:96:77:83:0a:f1:d1:a8:01:1f:cb:66:4f:c8:bf:
cb:9f:e4:a1:dc:e2:fc:10:d5:a1:58:16:58:99:34:80:af:20:
5b:6b:c7:2d:0b:ab:f8:5c:6b:fd:f4:5b:6d:8e:84:66:46:76:
e4:06:92:df:85:13:54:00:d4:cf:d2:cf:06:1a:40:69:f4:c6:
3b:71:11:12:93:f4:6a:b5:96:e4:98:b8:03:0e:b4:3e:f6:32:
c5:02:03:1a:fd:51:88:93:9f:6f:d5:a5:1a:55:2e:19:12:cf:
b6:da:8f:a8:89:ea:5f:47:05:b0:8f:11:2a:cc:29:11:67:ee:
24:0f:60:7d:2f:75:53:b6:bd:85:e8:c4:18:88:bc:18:4f:cc:
36:fe:68:8f:84:3a:1b:50:d6:b7:44:e2:22:dc:15:2f:25:50:
ff:c5:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:29:21 2025 by rpki-client