Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer (raw, json)
Hash identifier: yje+5wwd6MiQvfnOQsWhf9+/kYTAFsVmbP+4ooEPn/s=
Subject key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D61131685AB6BD2FB4D23EC4CBDE3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.254.184.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:11:31:68:5a:b6:bd:2f:b4:d2:3e:c4:cb:de:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24d906b90c1d856673e414f39805be583d230ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:9d:23:ed:5d:b8:1a:c8:bc:41:fd:62:e6:
25:94:b4:f4:ee:16:e3:91:78:4e:9c:34:c8:99:e5:
f3:e2:51:6d:e6:6c:f9:bd:59:fb:6b:b5:be:ad:12:
da:1f:a5:bc:3a:b1:16:11:78:bf:fe:1c:c3:15:0d:
29:1c:6c:be:77:1b:ea:78:7c:45:48:99:5f:d6:db:
a6:95:da:0d:c1:11:64:ea:01:c8:ba:74:6b:16:fe:
e3:63:19:6a:d7:2e:8b:31:30:8d:6b:36:90:07:de:
91:64:8c:b5:0f:80:e3:17:bb:14:36:9a:33:27:c4:
5e:00:c4:c2:93:96:c0:63:b9:85:19:af:5e:0c:d4:
59:64:74:70:33:1c:aa:d3:c3:9e:b1:ed:99:21:d8:
40:df:79:f9:96:c9:fe:16:ae:b9:ee:4c:25:4e:40:
9b:b4:a9:13:69:b8:a4:08:3e:bd:17:42:96:f5:57:
bb:ee:e2:db:0b:ca:0e:c1:62:a6:f9:cf:a3:fa:7a:
3f:33:26:a3:9e:e3:a1:9b:53:ba:35:6e:1c:45:54:
d1:ed:49:3e:43:9d:08:be:01:82:fd:aa:9c:cf:af:
1a:c5:86:e6:7a:cc:e5:4a:5f:60:e9:1d:59:e8:d0:
37:37:ed:86:3b:3f:f3:c8:b5:bc:a8:36:98:75:e5:
a2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.184.0/23
Signature Algorithm: sha256WithRSAEncryption
67:e7:a6:31:f5:2d:cb:cb:f1:f2:49:54:26:28:1c:7d:6d:26:
7e:8b:40:a3:8e:6b:1c:8a:92:78:e1:4d:1f:8e:a6:d3:fa:ba:
e8:23:bc:72:73:27:ea:1e:fc:d0:a6:e9:02:3d:3a:56:a4:1c:
2c:d4:4e:20:a6:fc:35:85:74:9b:3e:29:e8:8a:c5:a1:51:17:
6d:74:22:5a:0f:ad:8a:0d:71:70:a0:42:d9:0b:3a:73:33:ac:
45:a6:d5:f4:fa:8c:46:45:12:d7:a3:fb:53:89:97:61:f7:d3:
fd:2b:b1:cc:d2:1d:c4:00:9e:ce:e3:85:53:80:13:47:ec:09:
df:cd:95:fa:53:bc:11:12:fa:04:ca:c1:21:0a:9c:71:44:a9:
b8:f1:44:63:a0:9b:e6:12:9e:b1:36:e2:df:83:63:03:20:59:
a7:a3:ce:c4:58:f5:3a:50:9d:93:88:f5:65:f1:79:08:e3:90:
ae:ac:8e:06:09:de:36:7d:3f:bd:b0:35:d1:ac:8b:43:57:b4:
51:27:eb:81:65:18:e3:e4:90:df:a9:be:12:d0:56:74:50:36:
cc:85:59:2a:66:ad:a9:53:51:f7:62:ae:d3:b9:3b:1e:1c:07:
b1:3f:3f:cb:a1:19:36:f1:b2:cf:3c:26:7f:b7:8b:7a:97:79:
62:04:8a:95
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQg1hExaFq2vS+00j7Ey949MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGQ5MDZiOTBjMWQ4NTY2NzNlNDE0ZjM5ODA1YmU1ODNkMjMwYmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkWdI+1duBrIvEH9YuYllLT07hbj
kXhOnDTImeXz4lFt5mz5vVn7a7W+rRLaH6W8OrEWEXi//hzDFQ0pHGy+dxvqeHxF
SJlf1tumldoNwRFk6gHIunRrFv7jYxlq1y6LMTCNazaQB96RZIy1D4DjF7sUNpoz
J8ReAMTCk5bAY7mFGa9eDNRZZHRwMxyq08Oese2ZIdhA33n5lsn+Fq657kwlTkCb
tKkTabikCD69F0KW9Ve77uLbC8oOwWKm+c+j+no/MyajnuOhm1O6NW4cRVTR7Uk+
Q50IvgGC/aqcz68axYbmeszlSl9g6R1Z6NA3N+2GOz/zyLW8qDaYdeWi/wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCTZBrkMHYVmc+QU85gFvlg9IwunMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2I1M2Ri
MS0xZTBlLTQ0ZDAtYTEzMS00ZmMyOGU1MDk4YzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvYjUzZGIx
LTFlMGUtNDRkMC1hMTMxLTRmYzI4ZTUwOThjNy8xL0pOa0d1UXdkaFdaejVCVHpt
QVctV0QwakM2Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBw/64MA0GCSqGSIb3DQEBCwUAA4IBAQBn56Yx
9S3Ly/HySVQmKBx9bSZ+i0CjjmscipJ44U0fjqbT+rroI7xycyfqHvzQpukCPTpW
pBws1E4gpvw1hXSbPinoisWhURdtdCJaD62KDXFwoELZCzpzM6xFptX0+oxGRRLX
o/tTiZdh99P9K7HM0h3EAJ7O44VTgBNH7AnfzZX6U7wREvoEysEhCpxxRKm48URj
oJvmEp6xNuLfg2MDIFmno87EWPU6UJ2TiPVl8XkI45CurI4GCd42fT+9sDXRrItD
V7RRJ+uBZRjj5JDfqb4S0FZ0UDbMhVkqZq2pU1H3Yq7TuTseHAexPz/LoRk28bLP
PCZ/t4t6l3liBIqV
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:27 2025 by rpki-client