Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer
File: ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer (raw, json)
Hash identifier: I4iPWZ+iiuZgDZTK93qFPHCBY0x0L1iQikzGvxiZ2O4=
Subject key identifier: 50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424458865198074965567CDD8F31142F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 129.125.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:88:65:19:80:74:96:55:67:cd:d8:f3:11:42:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50bb4c781a5b393ff07fb405e528179f5ab87726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:3c:45:b6:2e:8b:32:80:c2:21:66:de:ce:
a5:c0:0a:34:08:7a:32:7b:5f:b5:28:6a:0e:1b:f4:
b0:81:95:28:05:19:b5:8a:1a:dc:83:2e:77:b7:1b:
08:50:9c:f2:c9:53:d6:c3:4f:02:de:f5:ef:cc:fc:
61:c8:39:51:bc:f8:e2:41:e3:dc:1e:b6:cb:2a:6d:
60:18:c6:15:ac:65:e4:9b:88:59:6e:a2:87:05:32:
ea:e7:ef:4a:52:f7:18:de:a4:d9:e8:a9:ad:1d:b2:
75:07:3e:02:d3:11:f7:58:53:e5:91:c8:5c:73:e6:
d1:18:e6:17:4d:2e:16:bc:03:9e:14:38:90:88:9f:
88:7b:71:b2:7e:7d:5e:37:f8:95:37:e8:a8:5c:b0:
51:22:bf:c0:a7:9a:a6:5c:3c:f0:0d:2a:02:fb:65:
17:36:d6:f4:05:d0:a1:45:ba:2b:2a:50:23:b1:8d:
52:c4:86:be:b5:07:fb:4c:18:f1:6e:aa:ea:8f:df:
f2:54:9e:be:7a:93:bd:2d:67:90:f8:76:55:4d:46:
3f:67:df:2d:e1:75:c2:b9:af:57:8f:f9:4b:5a:b3:
c0:a8:77:aa:f9:36:81:71:a8:1c:c8:19:80:77:94:
1b:a4:d8:e1:64:73:a9:05:5c:e9:e4:40:c8:44:10:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:1f:25:c9:77:65:03:bd:e2:d9:a2:bd:b4:e3:f5:d5:28:05:
8c:9f:e7:80:a9:44:17:a0:d2:3f:ac:33:2b:fc:75:97:da:25:
18:98:ae:46:d0:61:19:3f:45:31:df:64:52:08:8a:35:36:66:
d7:9d:c0:42:01:7d:b4:6c:6a:3d:f2:01:04:4b:8d:82:97:b6:
96:82:c3:fd:00:9e:9e:9d:e1:c8:2c:79:21:f1:59:51:4f:d9:
33:98:78:0b:ba:3a:67:7a:f7:b3:4d:87:07:fc:c7:85:79:9d:
72:1f:98:9e:65:ad:95:bb:1e:f5:b5:cf:32:b3:54:23:9a:00:
63:55:83:ef:7b:49:26:89:f9:d7:9c:a9:b5:5c:9e:41:2c:28:
a9:a5:e9:35:a1:eb:2f:97:67:c5:e7:4d:f1:99:d5:1c:fc:23:
2d:96:76:e4:5c:94:9c:45:ef:8b:bd:08:f4:fc:4a:bf:7c:78:
bb:54:dc:86:57:d6:fd:7c:7e:5f:89:ef:a4:4e:62:cc:15:ed:
cc:65:96:7d:17:7e:1a:ed:a2:e7:9d:70:ec:1d:05:57:0d:ae:
0b:19:a4:ad:36:6a:67:8c:09:5b:01:d8:e8:01:4e:b3:dc:04:
30:d9:e2:71:f2:ee:f6:a0:8e:1b:e0:c7:d5:0f:78:6f:6e:0b:
bf:9d:c8:9a
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZQkRYhlGYB0llVnzdjzEULxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGJiNGM3ODFhNWIzOTNmZjA3ZmI0MDVlNTI4MTc5ZjVhYjg3NzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOE8RbYuizKAwiFm3s6lwAo0CHoy
e1+1KGoOG/SwgZUoBRm1ihrcgy53txsIUJzyyVPWw08C3vXvzPxhyDlRvPjiQePc
HrbLKm1gGMYVrGXkm4hZbqKHBTLq5+9KUvcY3qTZ6KmtHbJ1Bz4C0xH3WFPlkchc
c+bRGOYXTS4WvAOeFDiQiJ+Ie3Gyfn1eN/iVN+ioXLBRIr/Ap5qmXDzwDSoC+2UX
Ntb0BdChRborKlAjsY1SxIa+tQf7TBjxbqrqj9/yVJ6+epO9LWeQ+HZVTUY/Z98t
4XXCua9Xj/lLWrPAqHeq+TaBcagcyBmAd5QbpNjhZHOpBVzp5EDIRBDjvQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFFC7THgaWzk/8H+0BeUoF59auHcmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzFiMTM4
ZS0xZTE5LTRjN2QtOGNhNC1iODdmOTFjMjliOWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMWIxMzhl
LTFlMTktNGM3ZC04Y2E0LWI4N2Y5MWMyOWI5ZS8xL1VMdE1lQnBiT1Rfd2Y3UUY1
U2dYbjFxNGR5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAgX0wDQYJKoZIhvcNAQELBQADggEBAEkfJcl3
ZQO94tmivbTj9dUoBYyf54CpRBeg0j+sMyv8dZfaJRiYrkbQYRk/RTHfZFIIijU2
ZtedwEIBfbRsaj3yAQRLjYKXtpaCw/0Anp6d4cgseSHxWVFP2TOYeAu6Omd697NN
hwf8x4V5nXIfmJ5lrZW7HvW1zzKzVCOaAGNVg+97SSaJ+decqbVcnkEsKKml6TWh
6y+XZ8XnTfGZ1Rz8Iy2WduRclJxF74u9CPT8Sr98eLtU3IZX1v18fl+J76ROYswV
7cxlln0XfhrtouedcOwdBVcNrgsZpK02ameMCVsB2OgBTrPcBDDZ4nHy7vagjhvg
x9UPeG9uC7+dyJo=
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:48 2025 by rpki-client