Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
File: XJK5qSx-uRPD2lWAAsZz6CONscc.cer (raw, json)
Hash identifier: v5zFwP6nj4fFxnAiCh2uZ56UNWM6xgAC7WE/gTD27iU=
Subject key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6F912DF77914996A278C26C79CB37
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.35.240.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f9:12:df:77:91:49:96:a2:78:c2:6c:79:cb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1f:be:8e:d0:70:89:f0:0b:c6:28:db:d7:b7:
c3:6e:98:12:af:9b:70:56:c5:95:8e:98:ec:68:a4:
2f:2e:00:51:6a:0f:dc:1c:e1:b8:64:1c:42:91:d3:
00:4d:66:8f:23:30:71:85:4c:36:d4:18:87:b2:2b:
cd:cf:0a:90:cf:7e:63:6c:77:53:ea:d8:52:c7:f6:
b5:a9:57:bc:64:1b:a6:f9:77:c3:fe:d4:7f:e2:28:
43:4c:7b:5a:b5:bc:ea:d8:f6:c2:4f:75:a5:2b:6a:
84:a1:e6:3d:fb:3b:16:be:1c:1b:c0:f9:72:05:8b:
20:13:22:ca:46:c0:03:39:ee:26:76:3b:70:ce:bd:
91:bb:a3:59:cc:6b:e7:94:28:70:9b:25:aa:4a:0d:
80:23:10:50:47:36:f5:99:08:9e:1d:2e:ce:00:3c:
2e:2a:24:c1:7e:b6:f3:dd:3d:07:51:24:bc:3a:a0:
22:1d:69:fd:b0:84:13:e9:00:ce:c8:74:b2:d4:bb:
8d:a7:42:ae:07:17:66:61:28:77:c3:c0:63:83:b0:
92:01:56:55:95:7b:72:25:95:a7:f1:44:47:f3:53:
f6:8e:ee:6d:56:d4:e9:32:d7:93:62:f0:f3:95:2c:
57:0c:4d:03:43:0c:a5:e9:4e:d1:74:ca:be:09:89:
68:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:37:61:a1:8d:70:c2:36:32:8d:9b:e0:66:36:56:3e:3c:09:
54:ac:5b:1f:5d:06:2b:54:18:3c:69:92:5f:10:cd:d8:ce:82:
89:97:6f:74:32:35:ae:e7:10:27:ec:8a:6c:47:3c:78:de:3a:
83:40:4a:3c:01:a5:74:fc:ab:c7:d5:e0:0c:71:6c:69:f9:2c:
91:97:ba:d6:c8:cf:31:ee:03:86:c2:5a:8f:d0:71:c9:d5:c2:
a5:c2:b7:92:7f:f1:1e:22:db:a4:d4:87:3a:2f:5c:70:3f:b9:
ba:31:d3:a2:7e:95:5c:28:f3:b2:85:f2:1d:fe:50:26:e5:25:
69:27:17:53:e7:66:b6:fa:3f:26:14:b9:2f:ff:32:a1:ea:83:
e8:46:7a:61:cb:a2:b6:79:43:01:cc:9a:f3:bd:a9:7b:74:69:
d6:1c:55:52:c2:4b:31:7e:86:56:21:e8:0d:a5:3f:c2:8f:bd:
c3:51:d7:d3:54:73:b9:bf:a2:76:b4:fd:39:dd:c2:6d:92:b6:
f4:2f:66:ba:50:57:17:9d:14:42:fe:26:fc:4f:bf:6b:d3:c4:
ee:b0:6b:90:07:af:a0:4a:d5:0e:59:56:cf:a6:8f:f7:05:4d:
af:0d:75:81:f4:ed:ca:c9:77:42:62:c2:6d:32:d6:39:8e:f7:
bb:e7:44:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:08 2025 by rpki-client