Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
File: J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer (raw, json)
Hash identifier: 8KsYq1rym+zNdkSIGcSrymTXNQ7KE1UtKJ1/M2GCXvA=
Subject key identifier: 27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3FC8BF9FBEB89E4590DD420A76B09
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 95.128.196.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fc:8b:f9:fb:eb:89:e4:59:0d:d4:20:a7:6b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:ca:78:fa:ae:36:b3:38:31:33:b5:88:c7:
66:ba:35:f2:f2:fb:fc:e2:86:20:35:92:47:e7:ba:
43:da:53:40:66:ca:d2:95:72:1b:58:c5:4b:ef:ce:
46:2d:dc:3d:10:08:58:46:3d:e3:06:a2:56:ec:a5:
7d:ec:9f:aa:fe:5f:e6:35:0c:4f:e0:50:08:a9:25:
e9:3b:f6:a2:69:91:63:fd:ca:8c:b9:eb:be:20:27:
13:68:a8:6f:af:fd:d2:3d:f7:48:46:39:d6:1a:b3:
7b:62:61:10:44:95:10:e7:cc:86:4c:fc:ac:0c:05:
7f:98:1e:c5:99:b5:09:05:b5:21:e9:1a:b9:1d:c1:
35:98:68:8a:2c:e3:27:fc:52:bc:1c:59:0b:98:b3:
14:dc:8f:56:c2:97:f3:1e:22:3f:44:c0:1c:41:fc:
fb:51:0f:1e:61:cf:bc:48:4f:00:26:aa:6a:55:10:
94:5b:df:48:29:e9:c2:27:4c:f7:05:5e:8f:1b:2b:
e6:32:9f:cb:78:6a:c4:23:d2:e0:da:4d:1f:37:76:
6e:57:56:0e:84:af:41:ed:e1:7d:73:8a:36:f6:96:
9f:b3:d3:45:4b:f8:2c:67:3f:fc:a8:23:ff:05:02:
4f:26:ba:69:9f:a4:09:84:03:79:de:d4:4f:db:9c:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.196.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e0:57:f7:26:2c:05:54:9a:67:b9:a2:80:81:54:80:f1:cf:
aa:19:7f:7f:85:0d:9f:34:3a:2d:1f:9a:90:9a:fc:94:30:d6:
9c:92:6a:73:10:c1:85:95:4a:fa:29:6a:cf:5a:e2:70:ac:6e:
03:66:53:32:46:fd:52:d8:9f:9d:10:1b:21:b8:55:04:c8:10:
05:a5:16:49:4a:92:33:8b:1a:29:92:2d:e5:e2:d0:27:cd:0e:
a6:b5:2a:1a:01:44:fd:0d:d8:c8:8f:73:28:3b:8f:ba:d3:4e:
1e:33:28:0f:38:93:ba:78:b3:24:17:dc:70:b0:e7:6e:59:2f:
15:a7:84:36:56:ce:cc:6b:d1:74:b0:ab:b8:d7:cb:61:e2:57:
92:c1:a5:69:f2:3a:1e:ff:3d:f6:6f:84:7f:58:86:59:d5:a7:
5e:3b:97:ba:11:ac:41:3e:ba:c5:aa:f4:9b:25:00:4d:7d:f3:
6a:ed:be:b9:3c:65:82:4a:0e:cb:e5:42:8c:ad:b1:b9:d1:3d:
0d:e9:fe:1b:d8:fe:2f:5d:fa:cb:be:15:c1:61:b1:9b:96:99:
fc:26:b8:db:c6:a8:e1:16:1e:40:13:73:14:5a:8a:ff:d0:a6:
5f:fc:05:76:6b:8c:6b:c9:e4:e9:4d:33:09:96:ab:0f:f0:88:
69:d5:ce:8e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQks/yL+fvrieRZDdQgp2sJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzkxYTdiOGVlODQ0MDUyMmIwYjU1MzBjODVkY2UxZDczZjk2N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjjKePquNrM4MTO1iMdmujXy8vv8
4oYgNZJH57pD2lNAZsrSlXIbWMVL785GLdw9EAhYRj3jBqJW7KV97J+q/l/mNQxP
4FAIqSXpO/aiaZFj/cqMueu+ICcTaKhvr/3SPfdIRjnWGrN7YmEQRJUQ58yGTPys
DAV/mB7FmbUJBbUh6Rq5HcE1mGiKLOMn/FK8HFkLmLMU3I9WwpfzHiI/RMAcQfz7
UQ8eYc+8SE8AJqpqVRCUW99IKenCJ0z3BV6PGyvmMp/LeGrEI9Lg2k0fN3ZuV1YO
hK9B7eF9c4o29pafs9NFS/gsZz/8qCP/BQJPJrppn6QJhAN53tRP25yuQwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCeRp7juhEBSKwtVMMhdzh1z+We3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzEzYjRi
Yy0xOTdlLTQwYTYtYjg0NS05ZWNkOGNjNTBhODgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvMTNiNGJj
LTE5N2UtNDBhNi1iODQ1LTllY2Q4Y2M1MGE4OC8xL0o1R251TzZFUUZJckMxVXd5
RjNPSFhQNVo3Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAX4DEMA0GCSqGSIb3DQEBCwUAA4IBAQBN4Ff3
JiwFVJpnuaKAgVSA8c+qGX9/hQ2fNDotH5qQmvyUMNackmpzEMGFlUr6KWrPWuJw
rG4DZlMyRv1S2J+dEBshuFUEyBAFpRZJSpIzixopki3l4tAnzQ6mtSoaAUT9DdjI
j3MoO4+6004eMygPOJO6eLMkF9xwsOduWS8Vp4Q2Vs7Ma9F0sKu418th4leSwaVp
8joe/z32b4R/WIZZ1adeO5e6EaxBPrrFqvSbJQBNffNq7b65PGWCSg7L5UKMrbG5
0T0N6f4b2P4vXfrLvhXBYbGblpn8JrjbxqjhFh5AE3MUWor/0KZf/AV2a4xryeTp
TTMJlqsP8Ihp1c6O
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:36:53 2025 by rpki-client