Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.cer (raw, json)
Hash identifier: /JPZ5XPaWIZODy/2+3DEucddsGxMvCtlvT6IsZTytb0=
Subject key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444AC75694702BABC147677871860AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.167.217.0/24
IP: 2a0d:cd00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ac:75:69:47:02:ba:bc:14:76:77:87:18:60:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:17:89:66:5e:0e:e8:24:c5:82:60:e1:62:11:
82:88:d1:37:0f:16:a1:dc:5d:73:a8:81:fc:f0:03:
cb:e2:9e:d8:34:7e:ad:da:11:73:36:a0:cb:75:3b:
2e:64:94:44:ee:2a:45:fd:b3:30:47:46:26:ca:85:
1f:4d:16:41:04:c9:9c:78:28:91:49:67:6a:8a:11:
79:96:e5:70:05:61:f5:df:20:2a:f9:8a:75:7f:ef:
5c:51:46:9a:9f:68:b2:43:af:a6:07:ab:48:d4:82:
2e:67:a1:28:3b:4f:f4:be:47:f6:31:fb:4e:73:35:
0e:ae:52:8a:0a:e4:73:4e:27:68:bb:8f:bd:28:72:
4f:08:4c:2c:6e:62:ba:94:13:84:1e:d0:05:d2:a3:
01:e7:50:85:56:70:d8:ab:4e:29:4f:31:f8:dd:79:
e8:f1:0b:1a:4d:4e:bc:86:77:02:68:51:61:a2:ff:
82:a5:9e:8f:7e:83:9e:22:b6:5d:d7:a9:99:cd:98:
79:dc:67:8a:6e:5c:59:5d:ed:b9:90:b4:c8:18:49:
ab:5a:e1:8b:57:2f:bb:28:4c:a4:c6:61:87:cf:6c:
3a:c2:4e:28:75:6b:9d:6d:ce:df:eb:1a:ad:cc:e2:
88:99:a6:eb:b6:27:67:08:01:79:c6:66:73:ee:3b:
45:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.217.0/24
IPv6:
2a0d:cd00::/29
Signature Algorithm: sha256WithRSAEncryption
5c:12:06:a3:8b:a2:84:fb:18:d3:9d:2b:4f:8a:4c:68:d1:a4:
ae:87:c7:e5:76:72:e8:1a:15:b0:be:90:31:d7:01:d5:7a:a2:
d0:97:8e:d6:45:ae:c0:cb:e4:b9:a2:3f:26:fe:07:a0:8c:77:
7f:2b:64:f5:f3:b8:45:66:62:30:cd:a1:d8:cc:47:22:db:f7:
8e:c1:08:9f:dc:ed:63:77:75:d9:66:a2:d7:3a:d9:a4:a1:04:
a8:fd:27:7c:07:6b:30:4d:b3:8e:b1:5b:7c:7a:94:d4:f9:c0:
10:4e:f2:0b:e8:80:ef:a9:f1:14:f5:6e:60:7f:7c:aa:24:3b:
ab:12:05:85:b2:cd:2b:2e:41:fc:d7:47:c7:e9:04:c1:19:d5:
b7:22:f9:46:d5:ad:d1:6a:e3:50:60:27:9b:2a:ec:91:15:53:
3b:25:42:c3:49:4a:74:ba:74:c5:a9:dc:18:0a:25:69:c8:cd:
20:46:ec:c9:1a:a0:13:b1:f2:da:63:ff:c2:2e:20:14:e1:82:
df:eb:25:27:10:f4:09:2b:84:12:7f:46:36:78:c4:f6:a3:07:
46:77:26:05:cd:c9:65:be:c7:9d:0e:57:23:b7:99:74:06:b3:
7b:21:00:e1:6e:e1:40:e5:5a:a6:10:06:6b:33:77:8e:38:77:
a7:d8:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:28 2025 by rpki-client