Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
File: ia6mmISBzqS5W2UTHMSYhPPtDj8.cer (raw, json)
Hash identifier: sf2wxyuh8aNBwQE3ZjST/arRx3YYbbDbPtnqwPDo5pE=
Subject key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B2340A3D973138EC937E8B683FED27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.16.4.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:34:0a:3d:97:31:38:ec:93:7e:8b:68:3f:ed:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:54:6e:2e:d2:21:d2:c8:19:15:fc:46:f5:
b2:0d:5c:3f:aa:f9:a2:12:e5:76:59:33:ee:f9:71:
1e:9a:5e:d4:47:e3:d7:06:38:54:c8:1c:d6:0e:1b:
70:9b:94:f7:e6:6e:54:a3:09:10:ef:a7:c8:cb:b2:
23:d2:25:4f:e1:b5:f0:5f:f6:d0:0d:09:12:66:eb:
7e:ac:b0:46:e1:a7:f5:65:c7:96:2c:ad:1d:b1:a4:
a9:66:f4:49:da:ed:fd:e2:71:dc:d0:2f:6c:4f:9e:
0f:7b:ee:29:73:79:99:f4:a2:c6:a8:32:8d:3d:47:
2e:8c:9d:50:7d:33:9b:b9:a8:9b:e2:df:0c:a0:87:
7a:9a:78:1b:21:47:fb:ae:60:30:3b:24:2f:da:f1:
5e:8c:d1:0d:b3:78:82:28:6a:ba:1a:e0:0a:cd:ec:
08:2e:fc:ce:2e:51:df:0c:0d:35:04:13:d5:06:4b:
a6:95:a1:6a:6a:f3:96:15:88:04:e0:d6:5e:cb:c7:
28:7c:42:eb:26:2e:c4:fc:f0:c0:19:7b:81:2c:35:
1c:f9:1e:32:7c:a6:dd:1b:87:7f:27:1d:99:e8:b5:
49:ed:3d:26:30:49:d2:fd:c0:ae:32:81:a2:4f:e6:
5d:5d:82:1b:6d:ed:5d:07:22:d8:c9:b3:eb:83:e2:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.4.0/22
Signature Algorithm: sha256WithRSAEncryption
44:be:28:72:6e:60:de:e6:33:ed:e7:ce:bf:a7:13:62:fa:f5:
3b:aa:0f:97:09:c4:01:3a:b6:12:2d:5d:44:0a:fa:87:82:1c:
f3:60:ec:ec:cb:5b:5c:9f:be:d0:07:0f:d3:df:5b:40:5c:c3:
88:aa:01:42:c3:52:38:01:70:ca:1b:14:f1:8d:22:df:38:f3:
3c:d0:f4:eb:00:d9:76:58:48:ba:17:86:4e:ac:77:12:33:88:
17:36:03:71:77:f2:74:bc:3d:85:fe:6a:be:a2:ba:a2:59:35:
25:b1:98:75:bd:6e:4c:21:8d:27:12:21:ca:20:6d:5c:e6:d4:
d5:e2:17:d8:4b:78:56:f3:c1:31:66:52:b3:6e:66:4c:9e:0b:
3c:28:c6:25:85:e1:b3:d0:95:99:97:08:a0:a1:0c:3f:a6:4a:
c5:ea:fe:a8:38:6d:2f:c8:78:a0:70:e0:3b:fe:26:4a:e8:ea:
f5:5c:b0:17:e9:02:e5:07:09:ae:4d:d3:e2:df:35:0d:42:b2:
6d:18:e5:ae:cd:ff:ae:11:6f:68:a8:f2:80:aa:8a:4d:2a:d6:
77:ae:c8:e2:d4:6e:18:3e:3f:e4:a8:2d:3c:49:53:b3:ea:24:
e3:17:04:87:3f:de:2b:e0:96:18:0d:1c:99:10:d5:47:14:73:
67:e8:cc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:34:35 2025 by rpki-client