Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
File: XsF2nT_wQhJGmOMcRytju_G7ta0.cer (raw, json)
Hash identifier: 4vllf64L6hiVYUgZuHDNSQI+mA10kNaszYQ6uCAY4ys=
Subject key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194739D4416D165A3070DAA267B3F494426
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Jan 2025 09:34:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.84.159.0/24
IP: 2a14:1040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:9d:44:16:d1:65:a3:07:0d:aa:26:7b:3f:49:44:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 17 09:34:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:c8:50:15:ca:e5:88:79:23:45:da:46:6b:
ab:13:b1:9b:fc:04:42:36:9c:47:61:c1:78:92:f7:
e0:5a:00:c1:ad:9b:b0:18:a6:74:7b:46:3f:f1:dd:
37:69:89:d6:80:ad:d3:06:ce:72:6c:fc:12:92:ef:
87:c0:55:46:20:f0:8b:b1:28:d0:47:97:c0:d4:58:
49:ac:29:c4:97:ed:7f:37:12:4b:32:81:e8:31:b0:
2b:be:46:fe:ca:70:64:ab:a9:fd:99:dd:96:07:72:
ac:bf:da:d8:8d:be:e3:c1:c8:ed:53:42:f2:62:3c:
72:bc:da:bd:8f:11:e7:77:30:d0:26:a9:2d:cd:f6:
82:29:55:e2:93:d4:0e:fe:1c:d9:5d:6c:d9:8f:4d:
68:88:14:80:9c:8c:c4:3e:10:8e:5f:44:d6:53:f3:
75:23:01:15:4b:2a:06:1a:33:6a:59:55:69:8c:3c:
b4:1c:8c:83:a0:48:3c:ac:3e:7e:e1:92:85:79:7a:
5d:cf:95:30:26:6a:7a:6f:1b:93:b3:e3:3b:b0:45:
a9:6a:bb:1d:25:30:71:2f:73:fc:7c:03:8a:c2:7f:
cc:42:4e:f8:01:c3:c4:3c:22:9c:a7:ce:a3:16:82:
1c:d2:68:e6:7d:aa:b9:2a:aa:98:1a:9d:8b:9c:a3:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.159.0/24
IPv6:
2a14:1040::/29
Signature Algorithm: sha256WithRSAEncryption
30:60:65:7f:e8:7f:a9:fc:23:00:77:da:a8:95:f8:98:d1:f9:
b6:cf:ad:41:8b:e8:d1:77:e5:5c:32:63:2f:1e:d6:3a:80:b4:
ff:5c:31:de:b2:6d:07:77:08:41:73:24:8a:6e:84:53:b8:48:
47:42:6b:c7:d0:43:87:d0:55:7e:4b:f7:86:1a:24:00:a3:2b:
a0:0e:40:e6:14:f0:84:e6:81:27:5c:c7:b2:a8:ea:5f:63:2d:
6e:0f:4f:91:86:27:4b:a1:ec:7d:5f:4e:1e:47:9b:1e:ce:e8:
aa:c4:2a:b8:1f:55:5e:67:18:38:7e:af:6f:98:26:ee:56:26:
2b:9b:12:f2:f1:72:e3:69:54:7c:5d:40:5f:ae:3b:d8:9d:9c:
cc:8b:69:a7:06:aa:5a:69:01:eb:c6:c9:25:b3:f9:7a:95:2f:
b9:71:8d:b8:9b:e1:5d:74:89:f5:76:12:6f:96:80:4f:fe:0a:
2c:82:4a:ff:1e:92:02:f6:cc:7b:40:b3:69:8a:a2:f5:38:b3:
83:f6:4b:aa:3d:9e:7f:37:0b:dc:e9:20:16:41:a0:6e:7c:44:
df:1d:e4:a9:89:2a:c2:44:31:86:36:90:ac:97:11:70:cc:32:
a0:f8:88:bf:49:b3:ef:a0:b6:dc:16:81:db:82:68:06:5a:73:
05:dd:e8:24
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZRznUQW0WWjBw2qJns/SUQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTE3MDkzNDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWMxNzY5ZDNmZjA0MjEyNDY5OGUzMWM0NzJiNjNiYmYxYmJiNWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRXIUBXK5Yh5I0XaRmurE7Gb/ARC
NpxHYcF4kvfgWgDBrZuwGKZ0e0Y/8d03aYnWgK3TBs5ybPwSku+HwFVGIPCLsSjQ
R5fA1FhJrCnEl+1/NxJLMoHoMbArvkb+ynBkq6n9md2WB3Ksv9rYjb7jwcjtU0Ly
YjxyvNq9jxHndzDQJqktzfaCKVXik9QO/hzZXWzZj01oiBSAnIzEPhCOX0TWU/N1
IwEVSyoGGjNqWVVpjDy0HIyDoEg8rD5+4ZKFeXpdz5UwJmp6bxuTs+M7sEWparsd
JTBxL3P8fAOKwn/MQk74AcPEPCKcp86jFoIc0mjmfaq5KqqYGp2LnKPjbQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFF7Bdp0/8EISRpjjHEcrY7vxu7WtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzI5ZmIw
NC1lMDdiLTRlMzAtYjhmNS01NDIwNGRkZDJjYTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMjlmYjA0
LWUwN2ItNGUzMC1iOGY1LTU0MjA0ZGRkMmNhNi8xL1hzRjJuVF93UWhKR21PTWNS
eXRqdV9HN3RhMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuVSfMA0EAgACMAcDBQMqFBBAMA0GCSqGSIb3
DQEBCwUAA4IBAQAwYGV/6H+p/CMAd9qolfiY0fm2z61Bi+jRd+VcMmMvHtY6gLT/
XDHesm0HdwhBcySKboRTuEhHQmvH0EOH0FV+S/eGGiQAoyugDkDmFPCE5oEnXMey
qOpfYy1uD0+RhidLoex9X04eR5sezuiqxCq4H1VeZxg4fq9vmCbuViYrmxLy8XLj
aVR8XUBfrjvYnZzMi2mnBqpaaQHrxskls/l6lS+5cY24m+FddIn1dhJvloBP/gos
gkr/HpIC9sx7QLNpiqL1OLOD9kuqPZ5/Nwvc6SAWQaBufETfHeSpiSrCRDGGNpCs
lxFwzDKg+Ii/SbPvoLbcFoHbgmgGWnMF3egk
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:20:42 2025 by rpki-client