Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.cer (raw, json)
Hash identifier: KcfSwKf/07pK6zhEWaEuqlJg1WWnS6BQsKJsK1yy5yM=
Subject key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D737D1CC250B23F036F53D662615F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.25.164.0/22
IP: 185.67.24.0/22
IP: 2a00:8120::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:37:d1:cc:25:0b:23:f0:36:f5:3d:66:26:15:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:42:84:b4:18:68:d7:85:fa:b0:fe:c7:41:
1e:66:5a:70:72:a1:81:3c:df:a8:56:9c:93:de:4c:
34:fc:b4:5b:fc:ca:d6:ab:fa:55:e8:d4:cf:e8:83:
d4:ca:76:b7:a9:cc:a0:d9:bf:fe:49:79:ec:af:3e:
a7:57:d8:f7:2c:98:31:fc:1e:00:83:07:78:f6:f6:
86:a4:ee:b9:98:8e:58:93:7f:16:4c:ff:fc:be:e1:
ee:44:2d:2f:ce:a8:06:07:0c:97:fa:63:eb:65:01:
b8:db:d8:b3:7e:fd:84:ca:4c:18:09:0b:3f:5c:00:
47:16:d6:c1:3a:fc:d0:73:d1:a5:d8:ae:d5:00:f1:
08:10:15:f6:43:f6:c2:96:09:9c:8c:5d:84:23:0a:
e8:10:50:e2:ae:cd:30:a4:e6:dc:74:05:82:cd:9d:
71:4a:00:4e:86:eb:e1:37:b2:cc:df:fa:34:d3:32:
19:5e:96:52:c6:63:43:ee:e8:57:57:a0:a3:ef:52:
b8:d5:af:00:d8:1d:ce:70:c1:a7:25:51:26:3f:38:
aa:ac:71:e6:45:ac:7e:ac:86:72:5d:94:94:36:13:
ed:3d:2e:c9:71:19:96:91:16:ac:76:81:fa:ae:d9:
4b:82:df:35:1b:00:f7:22:2f:45:24:d4:e0:79:c6:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.164.0/22
185.67.24.0/22
IPv6:
2a00:8120::/32
Signature Algorithm: sha256WithRSAEncryption
24:48:db:db:3c:dc:b1:fd:9e:af:77:0c:0a:20:3c:04:f3:d0:
36:59:0f:eb:d5:c2:d8:a8:b2:60:b2:3c:75:c2:cb:0a:72:b1:
4e:85:d8:d1:c7:53:fc:76:46:0c:85:e0:cf:16:57:ee:dd:a8:
a2:cb:f6:1c:ca:83:ce:3a:1e:d8:d4:cf:6b:b6:35:03:87:35:
db:91:e4:d2:aa:30:43:5b:5a:63:d0:af:1c:85:a5:3f:79:ae:
c4:3b:19:e0:f4:96:83:ff:ac:90:0a:d5:4a:b3:32:e3:f0:16:
1f:7c:8e:d9:92:b0:35:44:8e:b0:b4:af:4c:44:b8:5a:50:6c:
c9:7b:b7:9e:a5:ec:c0:8d:41:e0:93:c4:ce:e1:70:66:85:83:
02:e5:f1:10:2d:b9:02:14:d6:53:5e:97:9d:c2:f5:ad:15:2b:
84:79:11:3c:89:2f:cf:c7:58:12:22:6b:26:ef:f9:8a:da:89:
9b:e4:8f:5b:18:7f:7f:2f:c5:06:35:d0:cf:54:61:c9:79:f7:
64:2f:d7:c7:f1:ad:28:66:c3:bb:a9:20:b8:3d:ff:64:8e:82:
60:38:98:4b:ea:22:3e:dd:35:fb:7f:c0:a3:62:f4:f1:61:85:
73:77:1a:15:11:d5:92:e6:5d:3c:ca:35:25:20:58:c5:75:c2:
9b:95:a1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:25 2025 by rpki-client