Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
File: JeqXR70BpFf6K7AvzArIIxQLUY8.cer (raw, json)
Hash identifier: UOc8EP9TpP2JmqqZU/+68vc01MZRF4oZaD0/UNMNOtI=
Subject key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BEAFA2354CE8292A5C8E808BE1E17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.142.245.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ea:fa:23:54:ce:82:92:a5:c8:e8:08:be:1e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:0a:ed:e2:cc:5e:be:6a:2d:d1:e1:a8:d6:
d0:62:56:c3:33:01:e3:e0:f9:2b:f4:73:73:a9:b0:
15:56:88:e8:f5:e1:03:99:88:34:62:ad:de:54:19:
09:5c:14:76:91:3a:d2:ba:4d:d6:65:ae:81:70:08:
5e:4a:d7:d7:89:bc:0f:fa:f3:d8:03:8b:2e:0a:74:
7b:22:9e:13:0d:82:4d:0d:b4:b9:c3:bc:2f:f4:0c:
51:41:b5:6d:09:b2:7a:f6:cf:01:fd:48:c4:4d:ca:
45:e9:64:84:a5:f1:2e:15:c6:60:47:24:50:26:14:
50:95:e1:72:bd:c0:aa:dc:8e:a7:87:d0:3f:5a:43:
cc:96:92:51:c0:67:11:2d:2d:ab:a6:b0:16:20:be:
6f:1f:72:65:a5:e4:d0:f6:4b:be:61:cb:48:9b:ec:
55:56:8c:db:fc:4d:d1:24:15:43:1f:bc:ae:09:dc:
18:5b:51:55:1c:67:05:5a:f9:45:c7:d7:d3:99:2e:
8b:85:15:39:f3:c3:02:a3:0f:3b:37:0e:d9:14:98:
85:ac:cd:c8:1f:9d:eb:4f:5a:b5:aa:31:ae:6f:8b:
39:99:0f:ca:ff:96:de:96:99:d1:0b:66:a7:d9:df:
65:16:c1:c7:7e:79:98:a6:bc:1b:37:f3:14:3d:2e:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e5:a0:04:6d:93:f4:a6:fc:49:3b:ea:71:47:1c:c6:dd:d3:
eb:dd:ba:8d:5e:73:10:62:cf:13:c4:61:29:94:4c:32:a4:da:
82:42:9b:b1:55:83:ad:c4:be:3d:40:19:b1:44:45:48:98:22:
b7:fd:98:7d:f3:01:20:2f:9c:63:91:59:bf:5a:4d:1a:93:b8:
02:ef:c7:85:95:0e:fb:a6:d6:84:c2:b3:de:33:e9:0f:84:a2:
35:64:70:c2:c6:07:13:f9:42:f6:6b:68:c3:f5:01:e0:5c:3d:
86:ae:72:6d:b9:f9:b2:f9:33:3a:20:41:8e:55:3c:be:20:32:
c0:71:84:9f:29:41:c2:3d:2f:60:d9:13:22:1d:21:a9:ee:19:
1d:d6:01:e5:6f:6c:a5:d0:fb:e4:7b:26:c0:3e:33:7e:1d:e1:
83:38:25:93:e7:6e:d0:02:3e:b2:08:5a:1d:a2:9d:66:1b:a6:
49:9a:ce:5e:07:ed:7d:7b:af:0e:66:fb:95:f0:ab:5d:84:10:
ca:dc:1f:4a:87:5a:49:60:1c:9f:85:a4:f4:19:f4:8e:a6:94:
1b:a0:b9:d9:42:fd:f9:b0:17:19:5a:d5:64:f8:43:ac:86:4e:
cf:3a:53:05:ea:96:df:f9:0a:47:94:38:39:18:36:25:8e:2d:
c7:19:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:14 2025 by rpki-client