Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
File: LTDDBwxuYe3FimTzIz-pf8X1c5s.cer (raw, json)
Hash identifier: NPQ64KDRRPedhfis6lFQtYuqOOYpBI7O2EV7r+Ob+y0=
Subject key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D73CB7BB974B7D427C3D895CA555FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.223.139.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3c:b7:bb:97:4b:7d:42:7c:3d:89:5c:a5:55:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:43:8d:00:04:5f:84:c4:db:47:98:60:aa:
29:b0:41:c0:e9:71:72:ae:f3:eb:bf:19:ed:fc:7b:
ce:3e:65:40:66:11:af:b3:27:0b:5a:8b:ac:a8:8b:
62:63:33:b1:f4:c5:2d:65:f2:d3:04:6e:6a:09:f2:
fb:fb:26:3f:dc:3b:12:51:a0:5e:3a:ee:3d:3e:8e:
82:09:07:70:01:c7:a8:74:77:08:02:a1:3e:06:9e:
03:28:0e:bf:43:49:cc:e2:9f:ca:35:4e:cb:c3:4b:
53:bc:c6:03:9d:27:15:a3:42:94:d9:37:67:e5:66:
14:a7:15:34:f1:5f:32:07:00:17:92:b7:84:f6:2e:
81:15:a2:b8:2b:dd:22:8b:23:a8:db:5b:14:42:26:
07:27:a9:57:f8:11:93:cf:e3:61:dd:1e:34:08:58:
51:44:ab:40:5e:6b:6f:b7:e2:d5:ea:ef:3d:b4:f5:
fe:15:cb:d1:c6:d7:4f:fd:82:a7:72:c8:62:3c:f5:
e0:26:da:a4:94:d7:e8:18:be:ce:0e:1e:88:b6:f3:
3f:05:09:e8:6a:5c:2a:f7:b2:81:0c:04:99:34:8e:
da:16:df:54:ab:a7:b7:2f:6c:87:23:e7:bb:53:2c:
99:79:4b:21:66:81:4d:5f:9c:0d:09:1a:4d:55:e9:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.139.0/24
Signature Algorithm: sha256WithRSAEncryption
98:98:de:78:4b:66:64:8e:f4:0d:fb:a5:4d:c6:20:b0:f8:b1:
d4:f2:13:18:7f:5c:ff:a6:8b:8a:50:d7:20:3d:49:75:3d:bf:
e5:3d:8f:34:12:69:ee:96:c1:d1:9d:1c:5d:4f:85:51:18:ba:
32:ac:33:a4:3d:99:15:78:62:c8:a4:69:34:94:d4:13:85:42:
93:6d:4a:69:e8:28:f7:1a:20:f1:e3:79:81:54:4f:c5:c8:45:
a9:63:61:1a:fc:66:b0:a8:76:74:f7:9a:1a:a7:2b:86:a8:16:
f5:86:4a:c5:1a:ff:eb:7a:26:18:76:a6:ca:7f:08:a0:c8:01:
ef:1c:2c:1b:ac:4c:69:88:cb:47:35:17:20:f4:ae:89:f4:3d:
75:e8:8b:0a:b2:30:c0:51:f6:e0:fd:99:e1:b1:4a:d9:65:f1:
c8:ee:5e:25:0a:a0:0d:a6:44:83:9a:c2:a7:b6:29:3d:d1:a5:
70:11:22:d4:29:37:27:c8:2e:d7:01:c4:d2:65:b0:6d:bf:0d:
8e:bd:87:48:72:05:5f:0f:4a:10:a0:60:95:21:8a:44:f3:fc:
ea:dd:63:16:a0:e7:96:1a:01:42:e5:d0:99:1d:89:17:97:26:
af:e4:bc:ac:99:5a:0f:30:ee:5b:2b:8d:46:fb:dc:cf:fc:d6:
93:b2:99:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:54:42 2025 by rpki-client