Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
File: ILDaIC0sNKRzptdq8JPo3gMRuVs.cer (raw, json)
Hash identifier: BBK6dLvz56sXtoLIPAkM9BbHBWvXK0lvx5bWXwh9pCQ=
Subject key identifier: 20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA535BA972747EEB9D4B93E48CF1A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 5.133.72.0/22
IP: 91.199.136.0/24
IP: 94.125.192.0/21
IP: 2a02:2ba8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:53:5b:a9:72:74:7e:eb:9d:4b:93:e4:8c:f1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:f9:72:ec:9a:69:1a:85:77:f0:34:77:04:
ec:5e:94:dc:86:db:7d:4b:c8:d4:ff:20:2f:14:16:
31:ae:f2:11:60:63:f9:75:49:54:eb:73:81:9d:cf:
2a:42:3e:25:d1:88:53:6f:72:5f:d3:c6:25:44:4e:
cb:a5:00:ba:db:e0:58:22:1c:e2:7e:29:f5:c1:fe:
6a:1d:ad:a6:38:53:4f:e5:cc:12:c1:71:d7:89:f5:
e6:61:f5:05:66:e7:26:b3:63:01:88:a0:d8:7e:fa:
ee:8e:e0:58:df:9c:1d:43:b9:43:c9:cf:00:ec:f9:
54:69:c0:7e:a3:92:27:af:56:44:94:27:51:7f:13:
8b:bf:79:67:9d:b0:7d:3e:45:4f:da:eb:c0:f2:36:
f0:ee:c7:53:96:41:5d:cf:83:be:2d:48:2e:c6:b2:
89:c7:b3:87:22:77:bc:9b:81:84:4f:68:58:84:c0:
23:62:12:b4:7b:42:6f:40:f4:e1:d1:57:85:07:2c:
31:f9:3d:75:79:57:25:3a:3b:a1:1e:11:ec:23:fc:
65:59:71:d9:e2:d0:09:78:dd:7d:fd:5b:55:2a:77:
c6:fa:e6:e7:d0:4f:8c:1f:13:ee:7c:8b:95:22:3f:
66:fa:27:25:97:15:47:c5:ea:ef:d5:68:41:d2:16:
62:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.72.0/22
91.199.136.0/24
94.125.192.0/21
IPv6:
2a02:2ba8::/32
Signature Algorithm: sha256WithRSAEncryption
04:f5:82:f7:e2:d4:2a:3b:eb:de:60:8c:0f:e8:9a:04:74:a9:
73:45:ac:0c:42:6d:3b:4d:0e:e5:47:db:c5:f0:cd:bf:5b:69:
56:b9:c7:45:03:09:8f:d3:87:5b:94:73:d9:78:a5:48:43:3b:
97:d4:dc:10:65:c5:28:1f:11:32:6b:b0:cf:b2:f5:cf:0a:71:
13:01:90:fb:2f:c0:5b:76:61:11:f2:cb:67:67:ac:21:8a:de:
5a:8b:f9:2b:2f:49:38:76:7a:19:8d:ad:92:d8:fc:d5:e3:56:
5a:97:a8:38:c9:95:68:52:ff:36:4a:98:49:85:ea:41:44:70:
84:4c:f8:21:82:5f:77:6a:0b:83:79:02:79:9a:07:b9:d2:51:
dc:75:3d:b9:22:03:1d:dc:26:cf:01:0d:b8:59:dc:02:03:0e:
1f:6f:e7:8f:7e:20:9e:71:97:88:18:48:b1:68:c4:59:7c:e4:
7b:a9:92:aa:8b:90:8f:31:27:75:07:b9:4e:4e:d3:69:52:f1:
b2:2d:02:c8:9c:77:10:e5:bc:86:45:58:a2:5f:1e:be:b7:69:
c9:03:26:f4:bb:a8:83:e7:b9:9b:1e:5a:f8:1e:20:6e:bc:61:
51:9c:5d:58:8d:66:dc:0b:fa:5c:ea:3e:aa:32:61:74:0a:54:
0d:63:3e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:14:44 2025 by rpki-client