Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
File: Jo9QG7-eE83S64mdlxIfZpqikTU.cer (raw, json)
Hash identifier: WL2GIR9tWaFlwiwskpPt9uvrBVT+L+9w+QjMpzo0ECk=
Subject key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258EE1D7343CB2939901DF8F153E5621
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.234.36.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e1:d7:34:3c:b2:93:99:01:df:8f:15:3e:56:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:20:11:e9:31:0d:75:62:88:e4:33:4b:42:
4e:41:8f:f7:e8:cf:9a:fc:8c:c3:0e:dc:27:06:53:
b0:4e:0d:25:03:5b:cf:3c:d0:08:3a:34:5d:7c:e5:
97:d4:5d:a2:94:93:94:7d:42:cc:d3:4b:bd:20:b1:
9d:53:d1:b6:53:a0:ba:3a:c9:08:21:09:27:f7:81:
bd:59:8c:e8:3b:7a:01:a7:b0:2d:db:31:c7:1a:18:
9d:2b:31:26:67:0f:16:e9:ee:20:c9:c0:0d:6e:65:
02:36:cd:c8:bc:26:ea:e8:65:aa:cc:4d:92:85:28:
d0:ed:36:60:76:a9:37:73:15:c9:d4:ce:ab:d3:aa:
6e:91:73:07:94:22:d7:33:b8:b1:f0:f2:f5:47:9e:
43:1a:70:76:44:12:b3:2f:65:e0:fd:41:55:b4:0b:
48:e9:d0:8d:84:86:3f:f0:8b:89:2c:08:fa:f3:a6:
d4:f0:45:e7:be:d9:7d:4d:6b:6e:e8:4b:05:7c:ad:
1a:26:56:ce:94:4c:6d:5a:8b:48:a9:cd:62:59:38:
18:e5:9e:79:aa:7d:14:1a:ae:13:12:30:b9:b7:d2:
ce:61:7b:20:de:b5:bd:14:46:3b:de:ef:f7:ad:73:
6a:7c:03:8b:96:36:bc:3a:ee:44:66:1b:39:f7:23:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.36.0/24
Signature Algorithm: sha256WithRSAEncryption
48:09:de:1d:86:2d:c7:af:a5:11:76:27:2e:81:52:a6:63:48:
81:7f:da:40:3f:c9:26:2e:62:f7:4b:c1:3a:75:72:1f:38:91:
10:53:97:03:9a:19:e5:12:33:4e:e6:6b:de:90:43:f6:24:ae:
0c:43:a9:63:fc:5c:64:10:4b:6b:c1:88:2b:d8:9b:03:24:8b:
7a:f2:69:f1:d8:77:5a:35:8d:fd:3b:af:16:52:0e:ee:bb:1b:
d5:ba:df:c6:a2:e3:1d:ea:0e:f5:8c:c2:9b:51:a8:2f:ab:55:
15:ec:a6:ac:8c:02:59:b2:6d:5c:db:1e:13:85:0d:41:7a:7d:
3b:79:6b:af:78:42:f3:64:49:01:3b:16:28:ab:bf:2a:bd:a5:
cd:61:db:64:b5:dc:04:81:85:b8:3e:c6:9d:29:d3:92:7a:5d:
fd:dc:ab:58:1b:22:6c:c0:c4:b8:b9:20:d1:1f:83:cf:45:79:
24:1f:cf:8c:63:b2:3f:22:a1:cf:b7:71:54:7d:e2:12:82:c2:
df:52:96:56:ae:32:ad:2a:15:ba:ba:69:dc:7c:5f:38:66:06:
6f:2a:0e:4b:f5:c8:f7:6d:2f:c1:4e:fa:8c:a5:b9:96:47:65:
10:1c:5c:a9:2d:08:32:b3:6a:8f:41:9f:cd:2d:5b:f2:ef:53:
77:06:82:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:18 2025 by rpki-client