Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
File: JkQpgYmVnJWm1KdLdU9JlqWltlw.cer (raw, json)
Hash identifier: MQGgn13Rr29WemtZj4CA+b0jXK5zwbnBfVQ6Im7KRlY=
Subject key identifier: 26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9AE0AE7BD73607DE188D7D4DEB104
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.236.183.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ae:0a:e7:bd:73:60:7d:e1:88:d7:d4:de:b1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c3:51:ac:81:78:e8:34:21:87:94:b8:8b:d1:
e1:3d:28:33:4d:a2:c1:92:cf:8d:20:94:14:ac:1b:
d9:d7:85:35:9d:5b:4a:7c:87:a3:2b:34:b2:f8:31:
85:ad:db:4b:6a:02:90:cc:b4:8a:91:aa:9a:f4:21:
fa:e5:03:8b:7b:a4:be:44:5c:35:77:50:5a:4e:c3:
f7:38:56:df:0c:8f:1d:ed:e5:7b:a8:d1:2a:97:3a:
b6:7c:e3:f7:15:5a:52:c8:62:11:8a:3c:d1:51:3a:
9f:bc:43:07:d3:11:99:26:29:4a:e6:c7:20:c6:8e:
e7:fd:d7:2f:a1:7d:a6:c4:b2:80:55:fb:5f:cb:88:
c0:3c:b1:c3:26:38:71:71:71:cb:b8:93:cb:29:da:
3b:6a:63:06:fd:fe:7e:79:ed:d3:df:bf:13:8b:cb:
31:df:c0:b9:da:b9:ba:bb:7f:bb:cf:89:7f:85:bc:
c6:ad:d3:43:a1:d9:c9:cf:7c:63:25:dd:0c:3d:91:
a7:f7:fd:1c:d4:1f:f5:40:11:b0:75:72:20:57:b8:
31:fd:6d:dc:f1:0e:9e:88:9c:cc:94:d5:80:53:28:
be:f9:fa:18:be:36:78:34:14:dc:7d:7a:9f:4c:9c:
a3:31:d6:38:63:be:73:af:2e:04:8a:64:b0:f6:14:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.183.0/24
Signature Algorithm: sha256WithRSAEncryption
35:dc:95:1b:3b:0c:34:d1:b2:f1:2c:c5:1f:89:8e:d4:bd:2e:
a8:25:6f:5c:89:40:6b:0b:f7:21:60:cb:ab:11:3a:fb:72:9f:
e7:a4:d0:97:d3:0e:07:a5:14:bf:91:ed:f2:93:0b:91:56:b9:
89:5f:0b:58:36:4e:6e:f2:02:65:19:69:39:40:5c:51:bb:fa:
c3:1d:3c:dc:df:e6:d5:29:33:f0:1a:78:3c:33:a7:d8:a7:22:
25:92:78:36:8f:df:0f:fe:03:d4:a0:81:44:41:6e:e4:ea:cf:
a9:a7:23:a9:80:f2:a8:07:64:a5:8f:a5:9b:5c:96:2b:01:00:
e5:ba:bf:e6:8b:61:d0:67:8b:38:ca:92:62:b1:70:10:b7:cd:
1c:c5:a0:be:85:c2:39:34:cb:40:b3:71:79:cc:d6:24:fd:a2:
a9:5e:49:7f:c3:cf:1e:8d:a7:4d:99:81:18:f8:86:62:27:a3:
da:93:75:ba:c8:f7:b8:c2:83:5b:54:38:a6:37:3a:f0:0e:fc:
14:02:39:40:45:0e:6d:7a:eb:8e:bd:fe:1e:7b:cc:0f:54:f6:
40:59:17:1d:7b:41:5f:1c:8a:90:e6:99:ff:45:f5:ed:4e:73:
41:7e:b5:6c:c9:22:5d:ba:05:6b:57:dd:de:fc:15:91:34:1e:
84:ce:b1:f3
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQm2a4K571zYH3hiNfU3rEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjQ0Mjk4MTg5OTU5Yzk1YTZkNGE3NGI3NTRmNDk5NmE1YTViNjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cNRrIF46DQhh5S4i9HhPSgzTaLB
ks+NIJQUrBvZ14U1nVtKfIejKzSy+DGFrdtLagKQzLSKkaqa9CH65QOLe6S+RFw1
d1BaTsP3OFbfDI8d7eV7qNEqlzq2fOP3FVpSyGIRijzRUTqfvEMH0xGZJilK5scg
xo7n/dcvoX2mxLKAVftfy4jAPLHDJjhxcXHLuJPLKdo7amMG/f5+ee3T378Ti8sx
38C52rm6u3+7z4l/hbzGrdNDodnJz3xjJd0MPZGn9/0c1B/1QBGwdXIgV7gx/W3c
8Q6eiJzMlNWAUyi++foYvjZ4NBTcfXqfTJyjMdY4Y75zry4EimSw9hSiPQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCZEKYGJlZyVptSnS3VPSZalpbZcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmLzBkMTRk
MC1iZThiLTQxNzAtOWZkOC0wN2NkNGEwNjFjODAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvMGQxNGQw
LWJlOGItNDE3MC05ZmQ4LTA3Y2Q0YTA2MWM4MC8xL0prUXBnWW1WbkpXbTFLZExk
VTlKbHFXbHRsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+y3MA0GCSqGSIb3DQEBCwUAA4IBAQA13JUb
Oww00bLxLMUfiY7UvS6oJW9ciUBrC/chYMurETr7cp/npNCX0w4HpRS/ke3ykwuR
VrmJXwtYNk5u8gJlGWk5QFxRu/rDHTzc3+bVKTPwGng8M6fYpyIlkng2j98P/gPU
oIFEQW7k6s+ppyOpgPKoB2Slj6WbXJYrAQDlur/mi2HQZ4s4ypJisXAQt80cxaC+
hcI5NMtAs3F5zNYk/aKpXkl/w88ejadNmYEY+IZiJ6Pak3W6yPe4woNbVDimNzrw
DvwUAjlARQ5teuuOvf4ee8wPVPZAWRcde0FfHIqQ5pn/RfXtTnNBfrVsySJdugVr
V93e/BWRNB6EzrHz
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:53 2025 by rpki-client