Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
File: R01HT5RpSoEE9eQTqyucCVWbefA.cer (raw, json)
Hash identifier: Q8J/u4SKJT+n+TlpUSM+cdlb8/VIpUupiKjKCxNvryE=
Subject key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942C0A295816276BCD6325AA0A6C40B818
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 Jan 2025 12:00:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.234.38.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:0a:29:58:16:27:6b:cd:63:25:aa:0a:6c:40:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 3 12:00:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:20:17:61:1a:0e:ab:ab:be:88:0e:ed:6c:
54:c0:e3:6e:c4:44:21:ab:d1:ff:04:ae:80:d3:a8:
26:f0:9e:7b:f6:ab:08:0b:1d:d0:a0:b6:b4:8e:2a:
65:00:7c:cf:3d:da:3e:ab:09:9a:23:8f:0a:5a:da:
e0:69:41:dc:65:79:b2:f0:7a:fd:f1:cf:d8:ba:ba:
4b:00:c2:35:5f:47:8a:62:af:67:a1:c1:18:2f:10:
f9:dd:04:b1:30:56:a8:28:24:2f:27:80:8c:25:8d:
c0:75:d9:fc:a5:f8:d3:37:40:9f:9e:10:c0:1c:29:
2d:b5:22:b8:26:c7:8a:1a:b2:b0:8f:ba:b1:87:4f:
c3:c7:10:be:f8:18:6e:fe:a0:e7:e2:bc:38:a0:19:
ad:e3:09:42:4a:74:d2:3d:80:5f:a3:37:f9:86:d8:
ef:25:52:67:06:2c:a6:43:04:6f:27:fa:f6:35:3e:
75:19:74:0c:6a:69:2b:bb:7d:09:44:3c:02:d7:ef:
8a:1e:d0:5b:83:c1:92:24:44:59:94:17:65:87:9f:
f8:e5:9a:a2:a3:e3:59:41:77:ce:bd:b3:c8:49:8f:
1c:3d:f0:04:1e:cb:04:af:b3:b5:cf:ec:f3:43:c7:
90:7a:fc:6d:5f:91:3e:28:80:b3:38:07:7a:03:16:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:bb:41:e5:03:4b:b4:38:f0:a3:66:1c:67:87:ea:95:6c:8a:
e1:4e:93:7f:cb:26:ce:af:58:53:40:9a:a1:17:56:f0:ae:b0:
a5:c5:ff:e1:04:27:d1:e5:ef:b5:59:b5:2a:0a:4e:31:ea:9a:
a9:63:36:38:1f:22:df:03:8b:26:ec:6c:30:98:ce:2a:3d:71:
ab:a1:b8:37:04:a9:0e:fa:51:60:29:54:b0:79:1e:b1:2a:d7:
a1:f1:a6:e6:13:4c:4f:4c:3c:4d:f8:4b:6f:e7:f4:0a:a0:54:
04:9d:6c:f4:d6:7d:32:9e:9b:c9:42:b0:e1:c9:85:df:41:d2:
6a:94:dd:d6:61:d7:a8:13:ce:d5:73:51:6e:ce:5a:dd:8f:ec:
3f:56:be:9c:c6:ab:cc:89:21:15:53:bf:44:5a:9e:4d:90:2e:
f4:29:46:ff:75:32:1f:64:b0:7c:1e:bd:c2:d6:1c:9b:9a:3e:
ba:be:fb:24:db:94:4c:c8:0d:2d:46:55:a7:a7:ef:04:d1:a1:
90:86:f9:8e:6b:12:26:f4:23:d6:47:5d:bf:ae:eb:07:e9:8b:
ed:43:4f:1b:a1:48:58:9a:e3:4e:31:d0:43:47:9d:2b:35:3c:
f9:5e:80:d2:8d:5f:06:25:49:cc:32:8f:fd:bc:c7:e7:37:9b:
a4:97:08:74
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQsCilYFidrzWMlqgpsQLgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAzMTIwMDUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzRkNDc0Zjk0Njk0YTgxMDRmNWU0MTNhYjJiOWMwOTU1OWI3OWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXggF2EaDqurvogO7WxUwONuxEQh
q9H/BK6A06gm8J579qsICx3QoLa0jiplAHzPPdo+qwmaI48KWtrgaUHcZXmy8Hr9
8c/YurpLAMI1X0eKYq9nocEYLxD53QSxMFaoKCQvJ4CMJY3Addn8pfjTN0CfnhDA
HCkttSK4JseKGrKwj7qxh0/DxxC++Bhu/qDn4rw4oBmt4wlCSnTSPYBfozf5htjv
JVJnBiymQwRvJ/r2NT51GXQMamkru30JRDwC1++KHtBbg8GSJERZlBdlh5/45Zqi
o+NZQXfOvbPISY8cPfAEHssEr7O1z+zzQ8eQevxtX5E+KICzOAd6AxYDmQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEdNR0+UaUqBBPXkE6srnAlVm3nwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzYzOGJj
My1lOTQ1LTQwMGEtYWY3OS0wYjZmMDAyZDE5NzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvNjM4YmMz
LWU5NDUtNDAwYS1hZjc5LTBiNmYwMDJkMTk3OC8xL1IwMUhUNVJwU29FRTllUVRx
eXVjQ1ZXYmVmQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+omMA0GCSqGSIb3DQEBCwUAA4IBAQAeu0Hl
A0u0OPCjZhxnh+qVbIrhTpN/yybOr1hTQJqhF1bwrrClxf/hBCfR5e+1WbUqCk4x
6pqpYzY4HyLfA4sm7GwwmM4qPXGrobg3BKkO+lFgKVSweR6xKteh8abmE0xPTDxN
+Etv5/QKoFQEnWz01n0ynpvJQrDhyYXfQdJqlN3WYdeoE87Vc1Fuzlrdj+w/Vr6c
xqvMiSEVU79EWp5NkC70KUb/dTIfZLB8Hr3C1hybmj66vvsk25RMyA0tRlWnp+8E
0aGQhvmOaxIm9CPWR12/rusH6YvtQ08boUhYmuNOMdBDR50rNTz5XoDSjV8GJUnM
Mo/9vMfnN5uklwh0
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:02 2025 by rpki-client