Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
File: QxfdFbYr3XESWZuBQjNg7uegEpY.cer (raw, json)
Hash identifier: iAJOX5ruQ12MjAWhOgfer20jq90Xu+87+0TJ2Qu1vUc=
Subject key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BC40E36C61747371A58E28463E2C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.29.71.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c4:0e:36:c6:17:47:37:1a:58:e2:84:63:e2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4317dd15b62bdd7112599b81423360eee7a01296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:9c:96:e2:46:c4:97:eb:36:7e:25:d8:f9:
25:fd:c1:b0:45:17:8a:f3:61:86:b0:a0:cc:bc:4e:
91:ba:c6:1f:52:98:65:5c:89:74:c1:42:b0:7b:b6:
97:cb:2c:8c:02:27:bf:b3:f9:94:0c:2e:4c:54:ca:
fc:22:36:0f:1b:90:80:75:ca:23:93:a9:03:9b:0a:
9b:8a:91:31:58:02:36:0b:e0:34:7d:3d:ed:a4:2f:
d0:82:56:a7:07:61:46:88:6c:8b:27:78:61:5e:f8:
48:76:c0:70:4f:f9:6e:9c:43:0e:dc:e2:71:16:29:
30:1a:f3:fd:bd:1d:90:27:b3:70:5b:50:47:ab:46:
5e:25:bf:13:16:c6:b3:d2:e1:bf:04:36:7c:c6:9f:
07:bf:5c:24:be:42:19:fb:56:bf:b0:e6:c4:23:92:
f0:32:88:2a:f6:e3:dd:d4:37:fb:d7:50:d6:72:42:
5d:43:64:24:8a:bd:5b:9e:95:df:91:76:2e:45:7e:
92:80:b8:f3:d2:ad:ca:9d:c5:61:0f:c1:a8:f1:5e:
19:d8:f1:c9:32:63:27:e2:62:fa:97:9a:f9:8d:ae:
84:83:75:6f:90:86:ad:db:34:3f:f7:94:5b:0f:53:
db:b1:4a:ca:28:f0:61:7e:e6:4c:84:5c:b2:f1:82:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ba:f7:d0:9a:7d:68:2a:e3:65:85:31:8b:24:84:6c:f0:e8:
f6:5e:0f:35:e9:98:df:81:47:ed:7e:e7:00:d1:62:8e:8c:5f:
9e:50:62:87:de:54:90:b6:0d:8e:e4:bd:18:e6:85:cb:7f:02:
46:55:16:7d:0c:65:79:0f:fa:ed:56:5e:ad:14:46:1a:33:83:
71:db:b6:2b:8e:cf:b9:d9:85:a0:a1:a4:ad:7c:a9:57:36:5a:
70:9e:df:23:2e:85:41:d2:19:64:5b:76:b9:5f:26:75:95:55:
cf:a7:eb:c4:d1:c2:30:9f:ae:0c:cb:c0:50:62:79:48:d3:41:
9f:8c:f1:e7:9c:03:a0:80:d4:e1:4a:1c:86:ae:3d:f3:7a:c5:
4f:23:55:ce:ba:3a:f2:85:48:e4:dd:6c:bd:6c:26:f9:3b:c5:
4a:c9:8d:e9:da:f1:35:b9:31:d9:cf:a4:17:54:2e:97:3b:30:
94:ff:4e:e0:0a:6d:0c:51:43:57:eb:54:92:0c:e1:e2:6a:8c:
d9:61:14:08:be:2e:ac:fc:07:66:c4:2e:14:f7:b5:45:4f:4a:
67:11:a6:67:1d:f5:da:0a:5b:8a:52:6b:94:5e:dc:27:c1:de:
c8:b9:45:f1:68:84:02:d7:32:7f:84:6a:2f:49:63:97:7f:9b:
2b:7e:d6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:03 2025 by rpki-client