Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer
File: eNMexT3EQF1pFeGCWWS5fXoRb4E.cer (raw, json)
Hash identifier: l+Ke+sKcJK5Sb5Q8DvpCKg1JL1X0YiBTXsy9847Jcx4=
Subject key identifier: 78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D5BE382C674C9C38C30D5B991249C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211999
IP: 185.232.234.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:5b:e3:82:c6:74:c9:c3:8c:30:d5:b9:91:24:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d31ec53dc4405d6915e1825964b97d7a116f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:fb:0a:00:e3:f6:3e:82:de:f3:f5:87:6f:
0a:89:8b:67:04:95:a0:84:51:56:52:79:0a:cc:e4:
bd:57:c5:3e:06:f3:2d:c2:b1:5e:0d:28:cd:d9:f7:
7f:a0:46:28:0c:49:77:bc:8d:2a:e5:90:a6:98:e0:
bd:a5:bf:94:5f:82:c5:3d:cc:25:41:ba:c1:f9:a9:
e5:fa:02:be:be:de:f3:0c:60:f3:8b:23:43:db:f7:
67:45:60:28:8c:36:a9:aa:dc:c3:e1:13:51:80:5d:
1b:b8:cf:ab:c7:aa:20:0a:80:30:0d:44:16:78:d3:
ec:31:96:49:3e:56:83:2c:2d:e9:57:39:3c:1c:f6:
7d:0a:1e:f8:56:89:b8:ad:81:18:8d:76:e9:16:6b:
75:4a:9b:85:32:2c:59:02:06:1d:9a:82:8f:de:22:
d3:5f:b9:be:32:5d:d9:bf:74:ab:4c:6b:c9:c8:49:
f4:e7:ac:10:80:47:d1:42:3f:db:21:79:4d:6f:2d:
b8:f1:b5:ba:0b:25:ae:ea:91:e2:e0:db:1f:56:c1:
e4:f8:22:f8:ab:41:fb:ae:f9:d0:fd:59:6c:d8:b3:
0a:9c:dc:b2:8d:03:7b:c8:f7:3e:76:f6:58:d4:8a:
ec:9f:79:b2:35:5a:ab:89:ab:9b:ed:43:08:2c:42:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.234.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211999
Signature Algorithm: sha256WithRSAEncryption
5e:12:11:23:34:e8:48:d7:7c:16:c5:ab:28:69:15:09:e4:8f:
e0:31:4a:d2:d4:a3:c6:77:df:b1:46:2b:d5:54:bd:dc:1b:32:
29:3e:02:e5:b2:0e:72:7f:af:8b:18:03:3c:9d:bc:7f:25:81:
ee:30:85:53:f7:74:53:82:c1:d2:fb:79:fa:81:05:81:56:d5:
7c:c2:19:22:14:ba:27:df:d3:ef:ae:c5:de:87:e6:64:10:00:
29:72:e1:71:d4:01:af:c9:69:50:46:5a:e9:49:66:6a:00:bc:
dd:d5:3c:a2:c4:ef:13:64:0e:35:01:be:e8:75:50:88:ca:8e:
8e:08:aa:54:50:6a:79:be:64:b1:10:35:0a:ef:6b:5c:cb:be:
e4:a4:eb:09:00:91:ab:23:d5:50:cf:1c:bd:25:83:3f:19:24:
7a:4d:0f:36:03:03:24:03:45:1d:90:05:99:8f:dc:d7:77:fd:
1a:7f:e9:b6:a0:d7:bc:0d:ba:7d:91:5e:7c:12:61:b0:28:c1:
ff:66:19:6d:10:17:a5:7a:4f:45:82:bf:d7:f2:d9:4e:b4:cf:
9f:0d:ba:06:5f:62:d8:e5:f8:74:cf:e7:22:34:82:3f:59:4c:
3e:16:c1:3b:18:81:f3:62:af:77:cd:8b:ce:37:5b:b7:f9:3a:
2d:df:8f:48
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQijVvjgsZ0ycOMMNW5kSScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGQzMWVjNTNkYzQ0MDVkNjkxNWUxODI1OTY0Yjk3ZDdhMTE2ZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6f7CgDj9j6C3vP1h28KiYtnBJWg
hFFWUnkKzOS9V8U+BvMtwrFeDSjN2fd/oEYoDEl3vI0q5ZCmmOC9pb+UX4LFPcwl
QbrB+anl+gK+vt7zDGDziyND2/dnRWAojDapqtzD4RNRgF0buM+rx6ogCoAwDUQW
eNPsMZZJPlaDLC3pVzk8HPZ9Ch74Vom4rYEYjXbpFmt1SpuFMixZAgYdmoKP3iLT
X7m+Ml3Zv3SrTGvJyEn056wQgEfRQj/bIXlNby248bW6CyWu6pHi4NsfVsHk+CL4
q0H7rvnQ/Vls2LMKnNyyjQN7yPc+dvZY1Irsn3myNVqriaub7UMILEKLhwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFHjTHsU9xEBdaRXhgllkuX16EW+BMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3L2JmODc4
ZC0wZTRlLTQ4MjItODgxZS0xMjliY2U4NjRjMjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvYmY4Nzhk
LTBlNGUtNDgyMi04ODFlLTEyOWJjZTg2NGMyMi8xL2VOTWV4VDNFUUYxcEZlR0NX
V1M1ZlhvUmI0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuejqMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM8HzANBgkqhkiG9w0BAQsFAAOCAQEAXhIRIzToSNd8FsWrKGkVCeSP4DFK0tSj
xnffsUYr1VS93BsyKT4C5bIOcn+vixgDPJ28fyWB7jCFU/d0U4LB0vt5+oEFgVbV
fMIZIhS6J9/T767F3ofmZBAAKXLhcdQBr8lpUEZa6UlmagC83dU8osTvE2QONQG+
6HVQiMqOjgiqVFBqeb5ksRA1Cu9rXMu+5KTrCQCRqyPVUM8cvSWDPxkkek0PNgMD
JANFHZAFmY/c13f9Gn/ptqDXvA26fZFefBJhsCjB/2YZbRAXpXpPRYK/1/LZTrTP
nw26Bl9i2OX4dM/nIjSCP1lMPhbBOxiB82Kvd82Lzjdbt/k6Ld+PSA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:43 2025 by rpki-client