Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.cer (raw, json)
Hash identifier: kVt46rHFTBa4FxeexJVTl3mse8zraRh/nZUKrN6+Rwo=
Subject key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D93BB94E6CCE115CA4E4518E9E8DA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.1.109.0/24
IP: 2001:7f8:c3::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:3b:b9:4e:6c:ce:11:5c:a4:e4:51:8e:9e:8d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:58:ef:02:4a:03:44:42:16:e2:43:00:12:
fa:a2:55:31:cd:86:f4:b8:ec:a3:d8:1b:3e:f4:56:
f2:08:af:f5:98:bb:c9:50:d5:91:a2:12:02:06:45:
31:8c:94:77:bf:c8:21:5e:f0:68:50:55:31:a0:3e:
20:50:f3:17:a8:3c:5d:cf:d7:46:28:24:24:d8:6c:
60:e7:0f:d6:b0:b1:6d:94:14:d7:69:45:27:e0:23:
4c:95:c3:92:7a:bc:65:a3:2f:77:a8:9f:12:fa:d9:
fb:92:cc:28:95:ec:e6:39:68:6a:69:8f:65:dc:eb:
77:eb:47:49:10:3c:b9:ed:22:ec:fb:1d:4c:81:37:
c5:28:0f:75:fe:f9:c3:16:9b:80:32:aa:be:8c:61:
6d:b0:b5:89:0b:7c:e8:33:f4:90:db:80:0b:7e:0c:
d0:bf:fd:f6:e9:f2:02:48:f8:bf:cb:04:e4:78:b1:
73:32:f3:8f:ef:ed:91:b5:e5:6f:5f:c9:ba:c7:06:
6d:1d:c6:f0:6b:c0:88:cc:72:45:dc:a4:00:2a:6e:
c3:45:b3:8c:76:2b:50:b9:d9:fb:2e:67:5e:f3:df:
c9:b2:78:84:87:80:da:8a:21:9f:ad:5b:4f:57:70:
36:11:6a:ce:d2:d6:80:db:80:b6:79:2f:8e:10:91:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.109.0/24
IPv6:
2001:7f8:c3::/48
Signature Algorithm: sha256WithRSAEncryption
4b:d8:34:25:22:2e:74:34:e4:fb:71:da:9b:48:97:de:d6:27:
97:72:fc:ea:ee:61:54:19:35:9f:e6:fe:33:55:69:6c:50:6d:
bc:b9:9d:fd:2f:0c:e1:0f:a1:08:42:03:40:63:f9:14:6c:5d:
98:30:16:86:62:14:53:2f:3d:e0:0b:4d:4a:31:e9:3e:bc:84:
3d:66:46:30:28:67:69:51:ae:79:46:58:2e:61:44:de:45:f4:
c8:1f:22:52:43:de:f9:6c:9a:3f:c2:d6:fc:ce:5b:85:80:a2:
ec:d1:67:a7:ff:6c:e1:f8:f9:51:bd:53:fe:c6:07:62:77:51:
87:0c:fc:26:8a:c3:7d:73:83:a9:ce:20:0b:23:8f:c6:00:04:
3f:f7:d8:7d:ef:24:1a:dd:b7:3b:7c:df:ed:39:7d:c0:4b:30:
06:e2:60:7e:e9:21:3b:c8:70:7e:45:e2:6f:24:00:ec:4d:0b:
d5:e1:80:79:9f:06:e9:83:6c:5a:74:14:bc:de:bf:f5:05:e3:
d5:ae:36:ed:b9:a9:ee:d3:13:f1:b0:a0:64:d5:c7:de:9e:18:
23:7b:5d:59:19:c6:a8:6d:b2:69:2a:a7:c0:50:87:b1:22:7e:
ad:11:57:a6:1f:8b:be:f9:03:4d:d4:93:cb:4f:c5:a5:88:80:
3e:e2:e5:09
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAZQm2Tu5TmzOEVyk5FGOno2iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzdkNGFiNzc2MWFiYTI0ZjMzZDViNmRmYmMyN2NhYjczOGJiNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFtY7wJKA0RCFuJDABL6olUxzYb0
uOyj2Bs+9FbyCK/1mLvJUNWRohICBkUxjJR3v8ghXvBoUFUxoD4gUPMXqDxdz9dG
KCQk2Gxg5w/WsLFtlBTXaUUn4CNMlcOSerxloy93qJ8S+tn7kswolezmOWhqaY9l
3Ot360dJEDy57SLs+x1MgTfFKA91/vnDFpuAMqq+jGFtsLWJC3zoM/SQ24ALfgzQ
v/326fICSPi/ywTkeLFzMvOP7+2RteVvX8m6xwZtHcbwa8CIzHJF3KQAKm7DRbOM
ditQudn7Lmde89/JsniEh4DaiiGfrVtPV3A2EWrO0taA24C2eS+OEJH9IwIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFPx9Srd2Grok8z1bbfvCfKtzi7XuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzAyODdj
Zi04NTNiLTQ1MTYtOWYwNi00NTJlYzNhOTU4OGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvMDI4N2Nm
LTg1M2ItNDUxNi05ZjA2LTQ1MmVjM2E5NTg4Yi8xL19IMUt0M1lhdWlUelBWdHQt
OEo4cTNPTHRlNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAuQFtMA8EAgACMAkDBwAgAQf4AMMwDQYJKoZI
hvcNAQELBQADggEBAEvYNCUiLnQ05Ptx2ptIl97WJ5dy/OruYVQZNZ/m/jNVaWxQ
bby5nf0vDOEPoQhCA0Bj+RRsXZgwFoZiFFMvPeALTUox6T68hD1mRjAoZ2lRrnlG
WC5hRN5F9MgfIlJD3vlsmj/C1vzOW4WAouzRZ6f/bOH4+VG9U/7GB2J3UYcM/CaK
w31zg6nOIAsjj8YABD/32H3vJBrdtzt83+05fcBLMAbiYH7pITvIcH5F4m8kAOxN
C9XhgHmfBumDbFp0FLzev/UF49WuNu25qe7TE/GwoGTVx96eGCN7XVkZxqhtsmkq
p8BQh7Eifq0RV6Yfi775A03Uk8tPxaWIgD7i5Qk=
-----END CERTIFICATE-----
Generated at Sun Apr 13 15:51:41 2025 by rpki-client