Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
File: S6P83Yf0VkMMzLLYY45hSM06Euw.cer (raw, json)
Hash identifier: Klnalt4bmbSm1pIrF3zmhYj2eLKzeBND2noMmJb038I=
Subject key identifier: 4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427482996EE0A8E59344CB26C24DBA497
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.231.116.0/22
IP: 2a09:c740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:29:96:ee:0a:8e:59:34:4c:b2:6c:24:db:a4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:1a:35:f2:e3:98:3f:b9:22:c5:99:d1:89:
87:17:e8:c0:4e:45:d4:ea:2c:f5:c6:0c:1c:e8:59:
d9:eb:f2:c2:13:48:91:54:0f:c8:29:aa:64:5d:1f:
4e:9c:1d:49:3f:48:93:ff:84:86:a6:49:ed:92:15:
d4:05:2f:c5:c9:55:26:63:78:9a:44:e5:01:78:f1:
ab:31:41:44:be:8b:f9:b7:60:3f:c1:39:07:ab:88:
0d:e7:5d:0f:b9:79:71:bb:88:65:5e:8b:54:fe:c1:
4d:e9:9b:d4:a6:92:1d:02:24:8b:2e:1c:3d:6b:f8:
f3:df:c2:0d:5f:04:c2:38:86:a1:4b:47:6c:be:94:
6b:88:3f:cc:14:dd:5d:82:a7:3b:f6:89:09:ee:d1:
3a:04:26:cb:53:78:77:89:d2:6c:0b:db:50:90:b1:
d9:11:85:4b:31:c4:92:99:2c:fa:8d:ac:16:33:69:
fa:66:f7:a9:35:3f:e3:73:35:11:cf:ba:91:c7:da:
e1:d7:a8:f8:9c:2d:66:16:1b:a4:61:66:d2:e3:84:
6e:84:e6:5f:6c:31:e5:d5:ae:8d:0e:e6:22:02:6c:
03:48:c9:84:46:f6:a1:c0:7a:73:45:1f:0c:03:c1:
77:14:ca:37:d3:95:f4:94:c4:c5:31:fd:67:77:1f:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.116.0/22
IPv6:
2a09:c740::/29
Signature Algorithm: sha256WithRSAEncryption
26:0c:26:72:93:71:b1:95:4f:70:e6:af:e9:b8:fb:03:59:de:
c4:64:26:41:88:1a:9c:ba:e5:15:e0:71:b5:bf:b0:4f:e3:1b:
2a:cf:ce:1f:d7:c4:6c:63:05:75:1f:e1:45:90:20:f8:56:63:
db:5b:08:cf:bb:15:5c:ce:8a:01:08:4b:85:a0:64:d4:13:ed:
5b:e3:f0:40:fe:8a:1d:1e:1f:86:df:85:3e:cd:34:9f:63:46:
ff:93:05:38:b7:97:73:9f:99:01:29:05:20:7a:2b:3c:ba:f5:
32:e5:98:63:4e:7f:aa:c6:64:ca:03:e2:14:9a:23:c2:86:59:
34:ad:14:50:78:be:c3:86:5b:07:3d:4f:aa:f6:ba:6d:63:c4:
7c:09:4c:9f:f7:cf:15:29:14:2a:9f:45:12:3f:9f:d3:e2:f9:
16:7c:6b:61:fa:72:e9:1b:e1:d3:04:8e:17:7e:9c:4d:b6:5c:
da:0d:96:50:a9:fc:f5:ba:a5:be:ef:88:d5:a1:d5:4f:d6:84:
82:14:19:a7:1a:78:49:d6:6a:a2:df:05:84:27:4f:ae:65:ca:
bc:3f:76:6f:11:cd:a7:8a:b1:a6:54:2b:9d:48:7d:21:5c:e0:
13:02:d2:dd:47:ee:73:e0:db:4d:d4:8b:5a:33:5e:03:37:af:
9b:a8:68:14
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQnSCmW7gqOWTRMsmwk26SXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmEzZmNkZDg3ZjQ1NjQzMGNjY2IyZDg2MzhlNjE0OGNkM2ExMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb8aNfLjmD+5IsWZ0YmHF+jATkXU
6iz1xgwc6FnZ6/LCE0iRVA/IKapkXR9OnB1JP0iT/4SGpkntkhXUBS/FyVUmY3ia
ROUBePGrMUFEvov5t2A/wTkHq4gN510PuXlxu4hlXotU/sFN6ZvUppIdAiSLLhw9
a/jz38INXwTCOIahS0dsvpRriD/MFN1dgqc79okJ7tE6BCbLU3h3idJsC9tQkLHZ
EYVLMcSSmSz6jawWM2n6ZvepNT/jczURz7qRx9rh16j4nC1mFhukYWbS44RuhOZf
bDHl1a6NDuYiAmwDSMmERvahwHpzRR8MA8F3FMo305X0lMTFMf1ndx+AWQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFEuj/N2H9FZDDMyy2GOOYUjNOhLsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2Y5Y2U5
Yi05MDU5LTQ5YzUtYTM2ZC1hNzMxZWE1MWIyMGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvZjljZTli
LTkwNTktNDljNS1hMzZkLWE3MzFlYTUxYjIwZC8xL1M2UDgzWWYwVmtNTXpMTFlZ
NDVoU00wNkV1dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCued0MA0EAgACMAcDBQMqCcdAMA0GCSqGSIb3
DQEBCwUAA4IBAQAmDCZyk3GxlU9w5q/puPsDWd7EZCZBiBqcuuUV4HG1v7BP4xsq
z84f18RsYwV1H+FFkCD4VmPbWwjPuxVczooBCEuFoGTUE+1b4/BA/oodHh+G34U+
zTSfY0b/kwU4t5dzn5kBKQUgeis8uvUy5ZhjTn+qxmTKA+IUmiPChlk0rRRQeL7D
hlsHPU+q9rptY8R8CUyf988VKRQqn0USP5/T4vkWfGth+nLpG+HTBI4XfpxNtlza
DZZQqfz1uqW+74jVodVP1oSCFBmnGnhJ1mqi3wWEJ0+uZcq8P3ZvEc2nirGmVCud
SH0hXOATAtLdR+5z4NtN1ItaM14DN6+bqGgU
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:52 2025 by rpki-client