Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
File: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer (raw, json)
Hash identifier: heyJY+45C2PH3RwcazwRDi0k/mreRzR12gWfXcvzdfo=
Subject key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422202CA8630D4C94D018463C4D8717F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.127.123.0 -- 194.127.127.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2c:a8:63:0d:4c:94:d0:18:46:3c:4d:87:17:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7995f91e998225015f47063c328e0c501d68b59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:e1:01:07:42:e8:8d:d0:29:d8:99:b7:d0:
f7:92:e3:60:65:a4:9f:4e:ea:65:30:7a:e6:2e:95:
73:42:1d:9a:27:71:dc:eb:d9:cf:d9:0a:1c:c7:2a:
64:f5:05:a8:96:77:ea:1d:fa:7b:41:fc:4d:30:66:
74:59:f4:46:79:8f:14:bb:04:45:52:91:ef:00:98:
3d:be:db:cf:54:19:b3:17:ac:76:76:6e:a4:60:1f:
b4:7c:4e:e0:45:b0:33:82:0a:ff:79:8b:9d:fe:17:
0b:cc:31:d5:3a:cf:f7:89:44:5d:46:40:c3:bb:49:
74:05:54:95:96:56:65:42:3b:c3:80:7b:b5:bb:e2:
69:02:a4:0b:c3:88:90:ed:32:fa:6d:2a:ea:2f:54:
0e:f1:3e:ab:e2:a3:ca:1e:95:0e:7c:1a:0e:17:ef:
f5:a3:3b:0e:44:95:0f:da:7d:0a:2c:9a:6f:65:08:
04:a5:a0:85:d2:cb:7c:99:7c:a7:08:f2:85:9f:35:
4c:2e:25:61:b5:0f:9a:7c:1e:63:f8:37:6e:bd:b4:
95:c7:45:03:ed:31:09:6b:d7:52:30:fd:68:e4:66:
7e:ab:8b:6f:ee:cc:ba:7b:de:ea:60:be:09:3f:cf:
64:a5:3a:01:5c:44:3f:60:cc:e7:2d:59:8d:5f:41:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.123.0-194.127.127.255
Signature Algorithm: sha256WithRSAEncryption
0c:70:8e:a4:18:ad:e6:3d:ae:26:3b:f3:68:76:6c:7d:3d:8f:
03:1d:ba:99:eb:7c:98:48:15:ef:89:85:49:e9:d1:af:1b:fb:
d0:23:1a:62:98:f0:26:f2:b3:ab:c3:40:04:fe:3f:a4:da:6c:
b9:1c:f7:b4:3b:c9:e4:16:f3:30:7c:f7:23:0a:1c:6c:fb:30:
5b:f2:f4:d9:06:46:ea:b5:f3:9b:85:43:07:3f:6f:f7:9c:61:
50:89:79:ee:92:1f:28:a8:eb:83:44:41:78:4c:4f:ed:65:86:
a1:7e:40:1c:d8:47:cd:23:41:bc:1d:05:20:a4:ef:5d:14:a8:
54:3b:ea:8e:c1:d3:9b:43:46:22:a0:f8:3e:ef:c4:d4:27:2b:
4a:1f:9c:bc:8d:40:88:86:37:4b:a5:10:ff:34:39:90:54:18:
89:ea:ec:87:18:72:fb:01:8c:96:45:d9:c4:d9:ca:fa:bd:c4:
a9:5b:63:81:47:d3:d7:a0:c7:21:43:06:17:cf:2c:44:3b:70:
d3:a9:f1:a4:26:84:25:6e:d5:15:84:fc:90:d3:fa:81:1f:11:
53:68:b4:d7:b6:45:1b:a1:5d:5f:3a:07:b8:7d:77:4e:6f:4a:
59:ad:09:2a:14:3e:fc:d0:5a:68:fc:e6:2b:d1:d9:89:ae:1a:
0a:aa:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:15 2025 by rpki-client