Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
File: XpgU1DFdMK28jeMGAFVq6cPPns4.cer (raw, json)
Hash identifier: ZkJ5+rjm/YoijV9qZlhYggkmGhKz73uFF/kWJQi4JMc=
Subject key identifier: 5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5B98B45EF96DAF81330F4CCDD0EF1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.33.248.0/23
IP: 195.5.175.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b9:8b:45:ef:96:da:f8:13:30:f4:cc:dd:0e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:93:3c:8a:fe:6f:71:f5:8c:6a:bb:dc:84:
f3:63:5d:bb:21:49:b8:25:29:07:1b:d5:5b:f8:8a:
d8:24:15:2f:8b:45:f1:c1:94:a4:fd:40:76:07:32:
d8:71:e9:81:ac:d6:e1:24:fe:c4:15:3a:1a:58:9d:
a7:91:d8:fc:78:51:f9:c9:3e:62:43:10:5e:41:92:
c7:0a:37:27:aa:e5:49:3f:a3:aa:7a:25:e1:b3:e8:
87:0f:f9:56:0c:32:48:7f:20:2c:e7:42:9d:57:5b:
bf:0c:cb:3c:ff:e9:c9:02:50:1c:33:2f:c6:98:d9:
5b:30:40:b2:16:27:a0:3a:76:ba:54:a1:b2:5e:fb:
82:fc:3d:f7:07:0e:5c:1c:79:05:08:51:02:b9:24:
e2:24:4f:02:93:57:f0:8c:05:78:be:e5:51:4b:4b:
06:5a:a8:12:9a:f8:e0:fa:59:8a:9c:65:3b:4b:08:
35:0d:76:04:71:3e:3f:93:28:d5:8d:4d:a0:77:a0:
be:c9:3d:78:42:85:8a:75:a4:23:e8:9c:0a:4e:6b:
17:21:19:be:f3:c8:48:1f:4b:96:f6:1b:0d:1f:ae:
94:15:32:9b:2d:8b:da:b9:90:5f:4f:58:0c:e6:b6:
f9:73:5d:c8:a3:7f:26:f3:9e:7d:3e:f0:47:a2:35:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.248.0/23
195.5.175.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f2:9d:5e:8d:21:c4:ec:1a:4c:a1:8d:37:07:a6:c9:f8:fc:
39:fa:50:ad:35:29:39:b0:f2:2a:f9:62:71:bf:ae:5d:45:e2:
b6:de:7f:61:84:c2:fc:82:8f:d9:6d:49:b1:df:59:0c:1c:10:
25:97:0e:80:80:ec:b6:24:c6:93:6a:fc:37:5e:f4:de:e0:68:
ab:f7:b8:55:2e:64:ba:f2:51:87:44:a9:5f:53:b5:b2:bf:f3:
c7:3b:69:58:9f:43:cb:b6:e9:9a:9a:93:e6:52:82:d1:78:a8:
69:fa:d9:96:45:de:bb:88:c3:51:64:5e:f0:38:96:7d:6f:9f:
f5:32:ea:3f:49:6b:38:15:42:c9:e8:10:95:75:99:25:15:3d:
4d:8f:80:17:82:cb:db:4c:2f:df:25:ff:a4:59:4c:62:e0:55:
59:e0:08:8f:ab:3c:18:c7:53:29:6b:1b:7b:a8:72:7a:18:22:
46:f5:f2:50:75:3c:51:2a:c5:6b:8f:d6:c5:cd:54:b6:b7:a4:
0c:c8:75:bc:e9:af:22:1c:58:53:ba:76:fd:b4:0a:e3:87:a0:
ed:28:25:c8:9d:dc:eb:24:ea:26:78:ca:dd:95:ad:68:a5:ef:
63:d4:13:bb:b6:b2:32:52:50:30:84:1c:4b:24:a1:ff:18:3a:
b3:57:56:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:55:17 2025 by rpki-client