Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.cer (raw, json)
Hash identifier: oc6Fn1uKIgrQ8FqU7vEodYOQwCXZ7kiZyv3ylYQuHFk=
Subject key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369EEA09683F228ADC86EC32D35B152
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.149.71.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ee:a0:96:83:f2:28:ad:c8:6e:c3:2d:35:b1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:51:64:51:54:06:1a:f8:ee:d7:87:7b:ea:
cd:51:88:6a:09:01:4d:8c:38:65:80:0b:fe:2f:29:
28:ec:9b:1d:53:0e:bd:6a:b2:39:61:87:6f:7d:6d:
c8:d2:47:da:46:18:c0:51:25:54:50:25:ee:35:82:
a7:1a:a4:6d:27:bf:c2:3c:45:01:54:55:9a:23:10:
7b:20:46:e6:ad:17:06:89:91:7e:81:7d:9b:f9:9c:
3f:39:c2:2e:78:eb:6d:30:4b:b3:14:64:56:56:3e:
cc:7c:b9:ad:ff:e9:44:66:2c:98:5b:c9:7a:ad:8e:
ae:e1:25:bc:21:bc:e6:26:b0:76:a6:a5:13:be:6d:
b4:1e:9a:50:9a:fb:3b:ad:e7:01:c6:5c:be:f0:54:
a3:71:1b:5b:7a:86:ce:f4:43:45:32:fc:a7:85:c3:
4f:3f:33:10:7e:94:20:18:32:ba:f6:de:c0:e8:44:
dc:cd:a0:04:e4:01:5e:d7:bb:59:4f:3b:ba:d6:4c:
17:31:a5:e9:01:2b:a4:9f:b4:31:b9:1f:b9:26:26:
81:1c:86:11:20:24:1e:53:8f:25:c7:aa:b0:93:19:
29:bc:43:96:83:4c:97:e3:06:ca:78:c1:fd:58:a8:
80:76:ff:ec:74:71:37:90:a8:5e:ad:10:96:d2:2f:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.71.0/24
Signature Algorithm: sha256WithRSAEncryption
91:23:22:d5:fb:79:20:78:73:72:32:94:c7:b2:c7:11:59:ec:
2f:a5:9b:36:c1:8c:2c:0f:8c:ed:df:cd:d9:74:27:5f:bf:f5:
d0:1b:a2:69:37:8a:18:41:fb:4d:e7:68:cd:c7:c0:f9:88:5b:
70:44:6a:5f:4f:7b:b8:e1:dd:71:2a:9b:f9:14:ad:6e:d3:3a:
81:ff:8c:9e:ae:fa:fb:58:af:2d:c2:a8:8b:63:84:31:33:1a:
3f:91:ef:bd:bc:a6:4d:ef:56:28:72:ae:33:0f:4c:ef:fa:58:
54:0a:dd:00:bc:d8:a1:4e:8e:39:e9:76:76:26:de:d9:d5:00:
cb:38:f5:3a:88:47:6f:4b:43:51:98:f5:5b:99:2a:df:d1:30:
18:f0:ef:2c:82:7a:70:d0:ab:3b:4e:6f:d3:ef:53:52:46:bf:
56:c7:20:77:fe:5e:9e:db:20:ec:b8:08:46:45:ce:b2:4d:cd:
e7:d4:a2:45:ea:70:4a:3e:b6:1f:17:5d:e0:12:3c:8c:7b:c8:
47:5e:11:07:67:e2:53:c4:01:18:7c:0c:54:db:17:ce:87:6d:
ee:e7:a7:a7:7b:a2:3f:95:4c:1b:d2:ef:54:47:f9:43:ca:06:
91:b1:5c:6c:a4:19:61:c5:58:ab:3a:66:77:6f:38:8f:46:cc:
5f:a7:62:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:52 2025 by rpki-client