Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
File: WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer (raw, json)
Hash identifier: /Ii1b63jOMcBSxr6AD3RBnOmTUFgK64J1dqLIum7vR4=
Subject key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258EA56FC7C14C3E0BD9F8047D7017C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.244.6.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:a5:6f:c7:c1:4c:3e:0b:d9:f8:04:7d:70:17:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=596a5fee9345fcd48010348877b7853afccc6474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:ec:f8:83:21:28:81:88:79:d6:e1:09:23:
a8:af:65:af:bd:1a:2c:48:5f:3f:14:92:a9:c5:af:
75:c0:ae:b4:bc:a8:7d:92:cd:22:d8:ae:65:54:67:
e0:a7:1c:04:99:76:37:7c:32:c9:0c:35:ce:d6:f1:
94:72:27:4a:24:e9:24:f9:9d:13:eb:7d:dc:56:60:
86:ee:de:9f:fa:8f:ff:a6:ba:63:5d:ed:70:b2:9c:
11:0d:e7:b8:92:5a:58:6d:00:9e:d2:76:8c:b8:c3:
66:19:79:4c:e2:4b:07:b2:45:d3:8e:7e:ec:54:91:
55:8c:11:f2:63:0d:9c:41:cb:15:53:23:55:ff:df:
68:25:c8:30:ef:c0:c1:57:23:b4:93:38:4d:7b:2c:
4e:6e:3e:8e:f0:b4:03:83:fa:e2:8b:53:5e:d2:d8:
23:2b:b2:16:44:0c:e5:d5:b9:54:67:05:b0:07:0b:
13:ab:ac:96:61:fe:c1:51:48:93:c4:36:ad:2c:bf:
62:44:f4:3c:5c:67:b0:1e:4f:72:8a:0e:32:64:e8:
04:6a:25:88:48:12:33:9f:27:be:c9:91:77:cc:0d:
9b:29:42:73:a0:da:76:e1:e8:1c:a5:3e:31:68:c3:
aa:19:df:ec:ee:e8:c1:16:cd:b9:8c:b7:b8:19:ad:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.6.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:05:9a:ea:dc:62:c5:f8:5d:fe:eb:c3:84:35:52:86:06:88:
3f:fd:a5:1a:79:2f:26:20:fb:88:1e:97:22:30:f6:61:43:3c:
ee:76:4b:ab:df:e5:af:29:33:24:75:4e:43:d3:6a:ef:d6:87:
b0:6a:66:7b:3b:80:19:a4:cf:53:d7:d2:3f:7d:04:ee:f3:81:
e8:39:f3:71:b4:44:d6:e6:c9:ad:50:66:10:50:60:de:f1:1e:
81:48:71:26:94:bf:6c:c9:65:91:74:57:a5:d5:bd:f1:5e:09:
f8:f6:a2:ad:8b:b2:c8:bc:bb:05:ba:fa:c0:0a:22:cc:2a:f2:
b8:6a:1f:c2:a7:42:79:ea:1d:62:ca:74:22:b3:ed:43:96:7c:
ab:03:93:47:8f:d8:1a:13:74:4f:5c:84:dd:2e:09:46:4a:6e:
0b:82:f3:5c:44:06:c8:58:b6:52:bc:44:73:d7:b5:d8:e7:17:
2f:05:99:ca:91:20:82:05:b2:bc:a0:7c:fa:bf:b2:dc:f3:b5:
61:0b:1b:a0:50:89:10:38:99:df:53:fe:68:b8:cb:23:f8:66:
c4:e3:25:87:06:4d:43:b5:d8:36:20:d6:f9:37:97:2e:97:de:
d8:89:6b:39:a9:b9:e2:90:da:72:34:2f:35:0c:e6:59:fe:d3:
e0:fb:26:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:40 2025 by rpki-client