Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer (raw, json)
Hash identifier: RdUs/Je6yKCuoWx6WD9uhnhhYJF89RbW7As+dXgIizA=
Subject key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A217E4B3600BD813AFA665D8D83CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.227.160.0/22
IP: 2a0c:ba00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:21:7e:4b:36:00:bd:81:3a:fa:66:5d:8d:83:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:0c:06:18:75:a4:f5:ff:68:2e:8f:20:ef:
14:a9:6a:4e:4b:fd:a1:ec:03:72:1c:e4:6c:6d:09:
d1:41:95:6b:52:99:01:a6:24:ff:88:81:4e:c5:79:
38:e3:0d:fc:29:7b:1b:c9:c9:a9:99:61:54:90:af:
47:c1:cb:bf:0b:3a:cf:1a:9b:86:25:b9:52:96:68:
e5:97:8b:1f:ed:e5:cf:78:3c:f5:91:9b:ea:75:85:
b8:76:a1:c6:ce:78:03:12:e3:11:13:48:ef:7f:07:
b3:1d:6f:6f:90:d7:14:89:fa:94:4a:6a:4f:0f:96:
3e:06:98:3a:3c:3a:e8:e4:9c:d1:6e:ee:65:5a:c0:
b4:e8:4c:5c:fc:13:ed:94:2f:2c:c2:51:38:d2:b0:
f9:e0:a5:97:f0:6e:57:21:37:5b:43:a7:cd:67:c9:
b4:bf:93:29:92:7a:1c:62:e1:ec:4c:54:6e:c0:de:
a9:8b:0f:2f:14:e5:ca:cc:9c:d9:57:ec:0b:a9:97:
48:49:d7:5e:42:92:cc:ad:52:42:17:1d:04:d0:a7:
64:09:61:cb:75:42:f3:94:f1:98:e1:6d:e7:bc:ab:
74:56:55:52:c1:3b:01:d7:0b:84:77:ba:21:48:e2:
5a:fe:1c:fa:6d:0a:95:60:4e:46:0e:44:0e:da:ce:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.160.0/22
IPv6:
2a0c:ba00::/29
Signature Algorithm: sha256WithRSAEncryption
30:0e:a3:05:73:24:d8:a3:19:1f:5f:88:f6:9e:36:4e:c1:22:
21:5a:eb:39:b4:fa:d1:ef:a4:3a:a2:8c:72:e7:61:eb:4a:1a:
7b:44:d8:af:48:c3:6d:84:0a:20:30:73:cf:1f:88:f9:bf:11:
4b:bd:fc:22:f6:7c:63:68:45:61:05:88:c4:fc:8e:ff:2b:eb:
50:e8:4a:67:99:97:88:c7:da:57:cc:53:31:ed:dd:43:ad:28:
a9:f4:e2:95:d0:70:de:ee:88:20:8e:86:f9:77:02:f6:e7:5f:
f7:4b:c5:01:06:a7:09:2c:fe:fe:65:25:c5:a8:97:76:69:9a:
8c:7a:fd:df:6b:34:49:fc:94:5c:9e:34:d1:aa:aa:b1:85:4e:
67:17:8f:38:28:bd:e5:61:ea:cd:4c:5a:f7:96:91:63:8a:32:
bd:83:dd:b7:eb:dd:a9:72:7d:9f:42:1d:56:85:18:7c:4c:d2:
03:64:88:d8:8b:69:d1:28:51:28:ba:a3:a7:16:47:f4:3e:10:
51:79:c4:bf:17:75:9f:38:d6:68:be:96:30:60:97:9b:85:81:
7c:d5:81:90:d3:73:0e:75:75:4f:08:7b:fd:2c:62:f6:b1:4a:
ac:7c:17:5e:d2:9d:5d:f7:12:f0:55:6f:a7:b5:c9:06:59:03:
0e:d1:87:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:15 2025 by rpki-client