Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
File: QucVYSpqaXFPXj8uTLxI_OhKb1I.cer (raw, json)
Hash identifier: UiBGBizNEV7KRmxR5zSOtVSxYSsAiXFRvGGRHkOQ/Nk=
Subject key identifier: 42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5910F8A085C4B597EF8221268102B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.92.145.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:91:0f:8a:08:5c:4b:59:7e:f8:22:12:68:10:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:69:ef:e3:86:e0:d7:19:d1:e7:e0:2b:c1:
59:e6:22:e3:58:4f:ee:bf:b7:b4:cf:49:fe:83:4c:
c3:64:1a:77:9e:30:6d:99:1a:db:91:68:1b:84:4f:
79:97:b6:79:87:96:5a:19:61:56:41:58:8a:07:78:
84:6d:6a:75:06:82:92:f1:74:cf:10:49:cf:c7:1b:
79:31:cd:9a:c1:7f:2f:5b:f8:a4:90:6e:17:45:07:
00:ff:b9:74:8e:8b:90:21:8e:b5:20:9b:bb:85:85:
26:79:ae:fd:98:de:31:3c:ee:0d:90:16:ae:ce:54:
66:b6:3e:7a:4d:c2:e6:45:d0:79:91:db:40:e1:e9:
fa:f9:3b:a9:f1:8c:3c:d4:87:a6:57:34:78:5a:bf:
78:7a:e9:5b:0c:88:aa:47:4e:0f:20:1b:49:8b:dc:
9b:2c:82:be:59:b6:da:d8:74:fc:8b:10:05:6e:52:
06:e9:2c:8b:92:67:d9:ad:ed:67:f6:57:90:f3:0c:
85:27:3b:a2:37:61:e5:55:5b:35:fa:fa:22:5e:9f:
21:63:90:7c:28:ab:f4:bd:8f:04:df:ce:32:4d:1e:
37:bc:bd:e7:b7:51:7a:56:1d:a0:78:f5:ff:80:77:
a0:8f:d4:91:7e:da:c1:d4:81:63:43:f4:ed:a5:79:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.145.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d4:54:99:26:58:95:93:42:d4:a4:09:fc:7b:92:42:42:67:
a5:ee:2b:7a:26:b5:52:6e:67:c3:42:99:63:cf:f0:9a:d6:c3:
aa:76:ae:cf:a6:2b:f5:3a:57:c3:8f:db:f7:42:49:db:28:a0:
e5:6e:8b:43:4f:bd:73:a6:83:82:63:7a:e6:98:6e:66:54:a8:
32:8b:38:5c:fe:e9:7a:5a:ad:77:db:b4:b4:c6:36:8e:44:2c:
39:07:3a:cf:5b:8d:03:0a:28:03:59:86:1a:30:31:9d:25:81:
4c:25:8c:37:16:86:39:71:15:39:ed:89:35:b1:44:ea:3e:13:
85:27:3e:b2:d0:b9:2f:57:82:8c:09:30:e5:66:c5:b7:1f:73:
35:77:95:14:40:e2:c1:9b:cf:24:26:c5:51:44:90:6f:11:5d:
c7:ea:72:f1:63:79:35:1c:bc:5b:65:8d:7c:d5:79:f3:b5:c6:
14:c8:dd:97:08:a8:ff:5a:99:f0:a7:7a:dc:65:c3:07:e0:b7:
fd:e6:a2:e6:a5:fa:3e:ad:21:c2:1f:1d:20:5e:e6:11:b6:c2:
18:c4:78:3f:e2:53:80:3c:7f:8b:38:b6:1a:93:ae:55:af:f2:
fc:10:ea:f0:2d:08:1f:fe:2b:7e:bc:9c:06:8f:33:d2:eb:f6:
87:9b:57:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:57 2025 by rpki-client