Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PteWKLWmD_FIn0c74S1s797hNeY.cer
File: PteWKLWmD_FIn0c74S1s797hNeY.cer (raw, json)
Hash identifier: LMHAlN0AmvWE9gXDlYvU/TT4qINnekt8J9WnKu+JcMk=
Subject key identifier: 3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDA463E1C969ADF21C19615DC65D5B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.225.76.0/22
IP: 2a0c:3200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a4:63:e1:c9:69:ad:f2:1c:19:61:5d:c6:5d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ed79628b5a60ff1489f473be12d6cefdee135e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:95:9a:5f:52:b3:f2:15:c1:7b:95:18:05:
bc:16:f8:fd:47:39:33:04:ac:09:df:cb:39:78:45:
4b:80:cb:cf:89:40:2f:44:e4:7a:25:64:5e:88:fc:
2a:84:d5:a4:55:1b:22:3c:3f:63:97:61:98:59:69:
9c:ea:d2:7c:ca:d1:e6:c2:af:4c:30:0c:a2:97:e0:
72:76:99:9b:c8:42:68:e0:44:cc:d7:93:98:ca:64:
ab:1f:6e:e7:af:18:38:e8:fc:d4:2b:cb:d7:84:79:
9a:34:98:04:b4:92:be:b9:67:d3:91:f9:bf:e0:76:
49:fe:bc:18:b3:08:61:1d:b8:d4:32:7c:bd:a4:1c:
e0:5d:8c:05:0e:bd:80:8f:6c:29:5e:7c:77:97:05:
74:d1:6c:9a:00:be:d0:7c:d6:43:58:de:50:97:fc:
bc:96:01:20:ff:c3:e9:73:a6:3c:1f:6a:77:45:e2:
e8:f3:0e:c5:42:16:fb:1a:46:93:66:2e:a7:a6:10:
d9:4d:bc:be:f3:a3:e7:38:b4:71:68:db:c9:9a:74:
16:94:57:79:a1:f5:cb:b1:c7:68:24:06:bc:e8:b0:
f9:2c:c3:20:dd:9c:b7:1d:81:64:ab:8a:69:c9:9a:
92:0b:55:d4:8f:3f:74:ed:bf:26:fc:08:82:d3:dd:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.76.0/22
IPv6:
2a0c:3200::/29
Signature Algorithm: sha256WithRSAEncryption
93:fa:65:d4:52:3b:ac:55:4b:05:21:ab:89:7d:74:b3:70:94:
5c:e7:23:bb:08:82:79:f1:47:79:17:40:b1:50:fc:80:b4:2b:
be:80:5a:16:96:cb:db:78:a6:4c:a7:0c:33:0a:82:e1:bc:af:
27:37:db:f9:c5:0d:eb:54:b3:74:ba:4d:2a:ec:57:ce:39:4c:
c5:86:fa:d1:d5:75:11:d7:01:28:47:32:d1:f8:a5:f5:df:8e:
75:14:87:41:92:e9:89:8e:c1:e3:9b:32:66:d4:e8:01:4e:2a:
bd:7f:de:ee:95:1c:3d:58:40:50:a1:d4:f2:b2:fb:6b:75:f0:
00:93:7c:7c:ec:09:cd:7a:1d:5b:2a:28:a0:89:ee:67:47:9f:
47:b4:96:bd:fd:d5:51:43:d5:66:e3:f9:b0:29:8c:84:ac:9e:
ae:a7:42:bb:b7:48:44:64:b8:4d:5d:1a:97:d4:c9:87:ad:64:
de:f6:be:26:b0:1a:ca:0b:d5:cd:8c:e3:bd:96:14:9f:28:21:
4d:06:91:2e:02:f5:0f:fa:2c:dc:59:03:ae:e2:5e:1d:84:e7:
c5:30:ae:d6:29:c4:aa:ba:53:ee:8d:4a:04:21:5f:11:b1:de:
09:5e:c5:9d:96:0a:c6:6c:51:4c:27:0e:4e:fb:c6:d5:d3:80:
e1:cd:83:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:42:39 2025 by rpki-client