Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
File: XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer (raw, json)
Hash identifier: EsfO0N/q63l6QsuzwLdi594yusyMbR8Wr47LLeYoxRw=
Subject key identifier: 5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369248CAA917F3E9F52D24B6D6DB150
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 85.31.32.0/22
IP: 2a0d:a8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:24:8c:aa:91:7f:3e:9f:52:d2:4b:6d:6d:b1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e55afde34211bcee6a7fd992488a24927b46947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:55:c5:10:86:fe:17:f8:9e:af:63:70:17:
3c:6a:ae:64:56:87:d1:0f:79:b2:8e:f0:e3:92:27:
c8:ae:df:57:d4:c3:e6:f6:fd:1d:8a:34:06:0d:bf:
4c:e9:d1:62:ca:25:df:9d:ef:74:5e:72:b1:77:e9:
dd:e5:44:b6:aa:75:8d:e8:15:13:00:ec:87:45:5b:
37:92:8d:e8:f9:d0:c0:44:53:94:c9:09:69:6b:65:
1b:9f:6e:b2:63:c0:92:9e:33:57:83:eb:82:98:76:
7a:44:51:3c:06:a4:65:00:4e:ae:05:00:06:9f:eb:
11:ce:f3:39:3a:95:95:31:44:0b:1e:98:59:24:54:
96:ab:4d:3e:f3:8e:b3:b1:88:c2:c8:3a:b1:1d:a8:
96:d2:e6:18:d2:31:c5:70:91:42:a5:57:45:a0:07:
f6:2d:1e:39:35:9a:1f:06:0c:ed:66:a9:fa:8f:0a:
c7:10:69:4c:f6:88:a3:1f:f5:89:90:13:d5:05:6d:
0e:b6:c2:28:00:c6:fe:d7:fa:b6:3d:61:c4:b5:09:
07:55:26:c1:48:3d:61:d3:d1:2c:f8:a9:0c:dc:cf:
8f:f2:42:d6:a9:e2:2f:f0:5e:13:8b:66:cf:1f:db:
04:19:ff:d6:94:2f:a9:26:28:94:3c:10:af:31:34:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.32.0/22
IPv6:
2a0d:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:0a:28:ec:15:75:0b:bc:c8:3e:45:15:fb:fb:1f:84:b9:b4:
e7:ef:c1:0e:53:ee:5d:e9:a1:56:f7:a5:0b:76:bf:4f:0e:3a:
fd:ce:30:39:6d:e3:67:19:fa:f8:53:3e:01:ee:f7:a6:81:f7:
b6:00:c8:35:c3:0b:cb:a6:17:2b:15:bd:ec:ba:b8:b6:64:ad:
48:d0:0d:d1:d9:9e:10:ac:c0:15:c0:55:b2:82:92:e8:9f:35:
4f:f9:c6:6e:f0:2c:83:af:a8:ac:2a:67:a9:ce:88:28:a3:b5:
58:14:e7:f2:34:65:55:1b:91:7f:f2:28:1f:88:62:71:b5:cf:
b5:95:4c:5c:88:b1:a5:a9:2d:a2:a8:81:c0:74:ed:07:b5:2d:
d5:3f:01:54:e0:cd:cf:9e:85:bd:36:b4:fc:58:71:a3:0d:c6:
0d:fd:f1:91:22:98:49:43:07:88:32:8a:92:6f:87:29:2c:89:
80:b2:a9:07:4d:4c:c7:c0:71:55:3c:a4:a5:af:e4:d8:a1:09:
e1:73:34:cc:e2:52:42:55:ae:7e:84:18:e7:a2:7c:0b:cb:03:
5d:0b:a6:e7:62:22:a6:f1:92:d9:95:f9:06:15:aa:0e:01:fa:
40:74:cf:90:31:6e:68:cf:c8:f6:8b:cf:fa:cf:31:e9:0a:f9:
24:9e:ca:e1
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQjaSSMqpF/Pp9S0kttbbFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTU1YWZkZTM0MjExYmNlZTZhN2ZkOTkyNDg4YTI0OTI3YjQ2OTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8FVxRCG/hf4nq9jcBc8aq5kVofR
D3myjvDjkifIrt9X1MPm9v0dijQGDb9M6dFiyiXfne90XnKxd+nd5US2qnWN6BUT
AOyHRVs3ko3o+dDARFOUyQlpa2Ubn26yY8CSnjNXg+uCmHZ6RFE8BqRlAE6uBQAG
n+sRzvM5OpWVMUQLHphZJFSWq00+846zsYjCyDqxHaiW0uYY0jHFcJFCpVdFoAf2
LR45NZofBgztZqn6jwrHEGlM9oijH/WJkBPVBW0OtsIoAMb+1/q2PWHEtQkHVSbB
SD1h09Es+KkM3M+P8kLWqeIv8F4Ti2bPH9sEGf/WlC+pJiiUPBCvMTTrLwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFF5Vr940IRvO5qf9mSSIokkntGlHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhL2QyOGFj
OC1mNmI4LTRiNDctYmE5My1kZTdiNDE2NzhiNmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvZDI4YWM4
LWY2YjgtNGI0Ny1iYTkzLWRlN2I0MTY3OGI2Zi8xL1hsV3YzalFoRzg3bXBfMlpK
SWlpU1NlMGFVYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCVR8gMA0EAgACMAcDBQMqDajAMA0GCSqGSIb3
DQEBCwUAA4IBAQBtCijsFXULvMg+RRX7+x+EubTn78EOU+5d6aFW96ULdr9PDjr9
zjA5beNnGfr4Uz4B7vemgfe2AMg1wwvLphcrFb3suri2ZK1I0A3R2Z4QrMAVwFWy
gpLonzVP+cZu8CyDr6isKmepzogoo7VYFOfyNGVVG5F/8igfiGJxtc+1lUxciLGl
qS2iqIHAdO0HtS3VPwFU4M3PnoW9NrT8WHGjDcYN/fGRIphJQweIMoqSb4cpLImA
sqkHTUzHwHFVPKSlr+TYoQnhczTM4lJCVa5+hBjnonwLywNdC6bnYiKm8ZLZlfkG
FaoOAfpAdM+QMW5oz8j2i8/6zzHpCvkknsrh
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:43 2025 by rpki-client