Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
File: JpildU3unu9vIkViy4I5rIvbBbg.cer (raw, json)
Hash identifier: lgJSyoSHEJEO6jQMnAAarKZJTwvo+7u+4jE1CZFsJB4=
Subject key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C44E93227937C89E56BD5B3D3D2EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.167.80.0/22
IP: 2a0b:5200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:44:e9:32:27:93:7c:89:e5:6b:d5:b3:d3:d2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:f1:4a:ab:9a:46:71:e3:7e:e1:3b:41:4c:
5f:7e:7a:92:e1:9e:03:b4:54:99:ed:bd:67:1d:84:
65:85:6a:24:51:6b:07:cf:8d:02:0f:6f:54:f5:72:
98:01:63:0a:76:ef:c8:34:c2:69:df:7e:44:60:62:
92:be:8a:96:78:d2:4b:ec:17:3e:65:19:a6:b6:17:
0b:f3:38:d2:8f:bd:41:66:a4:06:29:03:1b:6c:a2:
48:99:38:9c:e9:be:77:68:15:2b:aa:85:da:6a:44:
7c:85:d6:e2:0a:4a:84:90:ee:bd:4d:24:01:5b:b8:
20:3a:2b:be:70:85:ed:bd:93:22:47:d6:0b:c8:cf:
d7:1b:88:f6:67:37:14:25:1f:e2:21:77:d2:39:bc:
93:4b:82:51:a7:ef:97:55:11:99:ae:f4:f4:c1:77:
ae:bc:8d:a8:ef:d4:33:ec:af:57:67:c1:d4:76:66:
03:53:77:a7:46:ef:d3:96:24:aa:c0:07:b3:0a:77:
3e:45:59:31:94:7e:a2:ad:10:1b:f8:81:20:c2:88:
fd:63:20:6c:ac:66:73:c4:a5:df:22:e7:50:ff:e8:
c0:c5:38:22:31:d9:94:c0:77:aa:df:89:fa:a9:c1:
12:80:de:82:bc:31:dc:a4:73:12:e9:02:a5:01:ba:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.80.0/22
IPv6:
2a0b:5200::/29
Signature Algorithm: sha256WithRSAEncryption
95:ae:dc:93:b0:5d:f3:89:f7:dd:db:69:d7:8d:3c:17:f7:a3:
f2:1a:86:8a:ba:fe:2c:09:ec:52:01:35:36:5f:25:53:12:87:
f6:84:73:5f:ae:cc:5e:70:d6:f4:82:3d:0c:29:bc:14:53:58:
03:4d:1d:2d:6f:83:18:54:d8:9b:4c:42:02:d2:e9:ed:23:c6:
d0:11:c4:b9:2d:59:ea:6b:84:cd:db:1b:fb:2a:ac:4b:f9:06:
9d:ed:e6:8c:b6:b5:7a:2e:a6:6c:ba:57:08:45:c2:bc:10:02:
fb:44:26:31:fd:7d:3a:53:01:1b:fc:21:12:26:5b:a5:9a:2d:
14:e6:43:be:4f:e8:44:d7:24:c5:4e:ca:5c:75:22:0c:8f:00:
28:53:ef:5d:57:7d:4a:af:3d:f0:9c:7f:c4:15:39:21:9a:ae:
4b:f3:ab:ee:6f:c7:47:b8:4b:90:0f:4f:ad:f3:2b:10:0a:92:
a5:4d:a6:42:19:2d:39:ff:8f:65:07:54:f3:21:d0:4e:02:0c:
ef:01:83:cf:f4:64:c8:0b:73:d9:1c:be:40:ec:82:1f:8e:af:
b3:58:db:5c:21:25:ac:7b:92:24:4f:49:80:53:d7:ca:0a:fb:
f5:5b:31:55:60:47:61:de:06:7e:42:25:8e:4b:52:37:84:45:
95:83:86:03
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQmbETpMieTfInla9Wz09LuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk1MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjk4YTU3NTRkZWU5ZWVmNmYyMjQ1NjJjYjgyMzlhYzhiZGIwNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAfxSquaRnHjfuE7QUxffnqS4Z4D
tFSZ7b1nHYRlhWokUWsHz40CD29U9XKYAWMKdu/INMJp335EYGKSvoqWeNJL7Bc+
ZRmmthcL8zjSj71BZqQGKQMbbKJImTic6b53aBUrqoXaakR8hdbiCkqEkO69TSQB
W7ggOiu+cIXtvZMiR9YLyM/XG4j2ZzcUJR/iIXfSObyTS4JRp++XVRGZrvT0wXeu
vI2o79Qz7K9XZ8HUdmYDU3enRu/TliSqwAezCnc+RVkxlH6irRAb+IEgwoj9YyBs
rGZzxKXfIudQ/+jAxTgiMdmUwHeq34n6qcESgN6CvDHcpHMS6QKlAbqylwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFCaYpXVN7p7vbyJFYsuCOayL2wW4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzdiOGI2
Zi1lNDRjLTQ5Y2ItOGM5My0wZjA4NTU5ZDdkMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvN2I4YjZm
LWU0NGMtNDljYi04YzkzLTBmMDg1NTlkN2QxOC8xL0pwaWxkVTN1bnU5dklrVml5
NEk1ckl2YkJiZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuadQMA0EAgACMAcDBQMqC1IAMA0GCSqGSIb3
DQEBCwUAA4IBAQCVrtyTsF3ziffd22nXjTwX96PyGoaKuv4sCexSATU2XyVTEof2
hHNfrsxecNb0gj0MKbwUU1gDTR0tb4MYVNibTEIC0untI8bQEcS5LVnqa4TN2xv7
KqxL+Qad7eaMtrV6LqZsulcIRcK8EAL7RCYx/X06UwEb/CESJlulmi0U5kO+T+hE
1yTFTspcdSIMjwAoU+9dV31Krz3wnH/EFTkhmq5L86vub8dHuEuQD0+t8ysQCpKl
TaZCGS05/49lB1TzIdBOAgzvAYPP9GTIC3PZHL5A7IIfjq+zWNtcISWse5IkT0mA
U9fKCvv1WzFVYEdh3gZ+QiWOS1I3hEWVg4YD
-----END CERTIFICATE-----
Generated at Tue Apr 15 09:56:42 2025 by rpki-client