Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
File: _dlCLeliA-XYc-CZVZGjppDdPZI.cer (raw, json)
Hash identifier: Khl4hO2sye9u/nImirVRO4ZVD2pHOaBPrIrU2F5EtSA=
Subject key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B9689FA8B9C7EBF24C86AF941A226
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 77.83.64.0/22
IP: 80.241.140.0/22
IP: 2a05:be80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:96:89:fa:8b:9c:7e:bf:24:c8:6a:f9:41:a2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:3e:8d:2a:fe:b0:f5:90:9e:33:70:00:d4:
d6:eb:cb:92:7f:37:1f:17:8c:6b:2e:be:11:a9:c9:
aa:7e:b6:fc:15:5e:47:fa:9c:0d:c5:27:2d:20:4b:
f7:01:e8:b9:4a:94:5e:79:3f:56:30:1f:89:de:86:
a9:78:64:d3:f3:25:30:de:64:99:8b:60:a2:00:6c:
15:97:1b:33:8f:29:9a:7d:83:a3:43:33:69:10:34:
11:cc:74:3f:b2:f7:88:f9:15:ff:32:13:60:7d:c0:
e7:26:5a:ad:ac:43:dd:87:cd:7f:11:16:18:7a:08:
d4:9a:ab:93:75:ee:21:e0:9a:60:1c:5a:4d:be:2d:
1e:62:1e:29:72:01:c0:e9:6c:1e:f9:f8:22:23:87:
ab:6b:90:72:8b:ef:a0:cf:89:f5:db:3c:e2:0b:1f:
ed:17:24:76:9c:35:4d:57:04:6f:2d:fa:8c:a1:21:
8d:be:3d:62:fe:df:04:c9:43:2f:33:fd:22:43:71:
f7:8c:00:48:d5:ee:0e:30:6f:6e:98:53:eb:a3:06:
c0:93:d4:68:1d:ff:d7:7e:e8:23:ab:b6:dd:6f:9e:
b0:78:5c:9a:5e:e9:1d:c7:29:e4:d7:ac:31:7a:f9:
9e:a1:5a:70:2c:9f:f2:48:a3:8d:09:84:25:ce:68:
64:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.64.0/22
80.241.140.0/22
IPv6:
2a05:be80::/29
Signature Algorithm: sha256WithRSAEncryption
54:19:5f:66:21:85:27:e1:a6:d7:0a:01:00:c3:7c:a6:19:45:
f7:f9:a3:b6:71:bd:7b:db:28:5b:55:bc:67:ce:2b:aa:22:5f:
66:65:d7:f6:33:6f:73:25:67:31:ac:60:57:ee:9e:6d:2c:a2:
34:30:01:b9:de:b7:a7:32:85:24:6a:80:40:ac:3b:f6:fb:24:
5e:a3:59:24:d3:0a:0d:e5:01:a8:cd:ce:47:51:9c:de:a0:cf:
0d:3f:32:d7:3b:58:59:2b:c4:85:6a:a6:f2:3b:48:c3:99:35:
7a:3a:83:79:da:cb:62:07:40:aa:fb:c2:c2:8b:08:cd:fb:6b:
fb:90:5a:00:9e:c4:8f:94:2c:8d:4d:d2:3d:ce:db:27:2b:14:
97:ea:94:3a:cf:66:c0:2e:eb:54:f4:04:fb:e7:51:93:df:aa:
08:fc:17:de:10:48:2b:a4:72:f9:7a:b6:88:08:a5:c0:59:08:
a8:0e:c0:a9:88:2a:d4:08:dd:c5:f2:3d:12:b2:2d:bb:22:4d:
b5:e8:b1:bf:69:03:0d:47:ad:56:0f:e0:9d:bd:14:74:af:d2:
88:36:a9:5f:8d:d0:df:bc:0e:ce:c3:8f:0e:fe:db:33:1c:e1:
1e:2a:0e:72:9d:61:db:25:a0:77:65:87:23:51:ff:34:51:d5:
52:0d:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:16:22 2025 by rpki-client