Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
File: UeK-E5rnec09T-68zTaCgaH156A.cer (raw, json)
Hash identifier: pZh/gD5GLvwPu6/7ZXoSw1vID0wPRCKb1Mlm62R5Znc=
Subject key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B3620BC046E453C27EF5980516E6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.5.184.0/22
IP: 2a02:7c40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:36:20:bc:04:6e:45:3c:27:ef:59:80:51:6e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:3c:47:23:2a:67:e1:c9:ec:5b:a4:00:c0:
91:68:0d:26:74:8c:74:36:7a:6f:eb:83:49:f5:90:
33:f8:f4:35:94:a1:1b:53:9f:1a:98:a2:05:84:dd:
6b:91:04:20:5e:13:bd:c9:67:0d:2f:97:77:60:6c:
a9:9a:e7:42:2e:8d:55:2f:bc:b0:57:82:db:8d:48:
e0:a8:ca:a7:76:9e:3c:61:38:7a:22:aa:2d:02:e3:
10:4b:3b:cb:3e:3e:67:bf:3e:d1:45:62:23:d3:3c:
6f:b4:36:ba:bc:2a:50:c9:6b:d0:a8:22:5a:12:99:
54:75:5f:26:79:e1:e5:ac:65:61:e2:0b:75:24:9f:
bf:40:aa:ba:59:45:5b:78:e3:42:08:6b:49:84:c6:
40:23:3d:f9:ba:d7:98:04:58:43:f5:81:05:23:d0:
d2:8b:2d:db:fe:1c:64:57:8d:be:af:47:d9:d0:18:
7f:25:8f:b1:69:96:f4:74:f5:04:2c:38:74:62:a8:
1f:f4:67:d7:3e:02:7f:ad:65:1e:bd:fc:e8:49:46:
c1:99:bd:6d:6e:13:f3:9e:07:35:e5:2d:ab:9e:ea:
60:c7:cb:13:a4:77:31:c2:13:43:60:e4:c1:56:52:
29:e3:69:7d:e2:aa:27:c1:27:a4:04:dd:cc:08:1d:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.184.0/22
IPv6:
2a02:7c40::/32
Signature Algorithm: sha256WithRSAEncryption
25:b1:d4:35:cf:b5:46:47:80:fa:a6:ef:df:8b:eb:8d:07:14:
7e:5b:c8:13:62:3e:e1:de:6f:72:2f:99:5c:31:60:34:03:2e:
98:be:20:83:e7:d8:a1:ae:9c:43:4b:38:9f:1f:16:85:a2:36:
5b:86:9c:80:49:68:40:d9:65:48:c7:ad:f6:cb:28:dd:35:ee:
66:b7:14:31:0d:ab:4c:33:a3:f2:5b:f0:50:a9:ff:9e:0d:a8:
ca:02:06:b1:c3:6b:81:10:06:68:12:b6:9a:cc:16:c9:8f:35:
a8:4f:88:ee:4a:83:3f:d2:80:e9:38:ba:61:80:c9:7d:96:97:
cb:3a:ce:3f:64:c8:c6:23:23:51:6d:8f:24:bd:22:11:52:0f:
54:98:04:ab:6f:cc:5e:e1:03:a3:db:31:22:06:ee:d7:44:97:
25:3b:d1:30:d7:e9:b2:98:4e:40:9c:b2:75:c5:c1:ce:3d:36:
91:b2:72:06:40:f3:ce:46:af:61:74:20:ef:6d:96:0c:7b:36:
c9:ad:d6:65:70:06:81:c2:94:8f:43:75:f8:3b:5e:d4:b4:e3:
d0:df:dc:fa:c1:69:30:47:e6:cf:45:07:6a:6a:12:1f:cd:b7:
21:ff:6d:62:7c:6b:0c:b3:ee:23:af:d2:7c:2c:2a:58:0b:cd:
44:00:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:45 2025 by rpki-client