Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
File: irPpZch0fi-l3dEoV2c_BgQu-kM.cer (raw, json)
Hash identifier: FCPUuVBkwVwz53IITr4vV9boejNmuznrjOBFnvW4L7I=
Subject key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E4219D7CCD25A142EF6682D195410
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.208.28.0/24
IP: 193.105.47.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:42:19:d7:cc:d2:5a:14:2e:f6:68:2d:19:54:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9e:a0:fc:37:86:81:28:16:73:55:02:09:55:
04:2f:68:71:9a:eb:ae:66:8c:49:35:93:eb:58:60:
93:9a:6a:94:5b:fc:07:d3:4b:26:ab:33:26:dc:2d:
aa:42:e3:85:b2:49:21:d5:15:94:5b:f3:bd:0b:13:
b4:12:2b:60:04:f5:5b:c9:76:b2:56:60:8a:75:99:
20:c7:95:94:54:8b:73:6e:4f:95:28:4e:d5:8e:9e:
73:b4:ef:61:c7:6f:f8:f7:cd:57:79:a1:15:70:80:
14:e0:ea:20:8f:44:fa:44:d9:b9:8f:de:a2:ec:50:
e1:fe:03:95:75:45:52:4a:e2:a2:a1:e0:ec:fc:e2:
9c:77:e5:92:15:25:35:36:ae:9c:64:24:49:75:4e:
ec:2f:b2:ae:cf:1d:dc:01:c0:7e:05:f3:4c:3c:ef:
1d:eb:92:64:e8:b9:db:f6:d0:e2:3d:50:73:78:9c:
af:c9:1f:84:87:73:9e:76:9b:c8:f8:ec:c4:bb:46:
b6:8b:2e:64:6e:b7:96:31:9a:06:8b:8f:54:d8:fb:
08:d4:ea:06:24:c9:59:4f:9f:bc:d6:3d:4c:d3:63:
33:cb:9e:6e:77:02:29:fd:82:b1:79:d7:33:25:32:
93:c4:ca:0f:7c:42:88:37:72:f8:89:73:c0:d9:c7:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.28.0/24
193.105.47.0/24
Signature Algorithm: sha256WithRSAEncryption
02:88:55:e0:b5:a0:72:e6:94:77:29:32:2c:5d:16:fb:37:7f:
bb:b1:f3:ce:63:f2:bc:0b:91:60:7f:86:b0:e6:1f:69:30:7c:
cf:36:3c:29:10:61:36:ec:c8:88:1e:45:fb:92:15:b0:77:c9:
21:59:24:31:1f:8e:21:46:b5:ac:1d:c0:53:78:83:cb:aa:9f:
b6:eb:37:19:64:db:1c:93:43:7e:13:8c:dd:bb:57:56:a3:36:
02:de:a7:6c:2c:ec:42:f8:48:cd:8c:ce:3d:f7:f3:01:ac:e5:
9b:31:8b:5b:af:90:8a:da:05:1a:98:61:58:d3:e7:ae:8d:0c:
51:7f:f0:3b:1c:6d:2f:8f:38:ab:68:f6:c0:ad:39:7a:3e:ca:
68:73:b4:77:8e:1a:40:79:84:ae:f3:cf:25:9f:3d:5f:c3:37:
d7:fe:cb:30:df:9c:d0:9c:49:31:b8:24:13:c9:dd:c6:55:b2:
68:86:e5:87:a6:7d:50:d6:94:1c:ee:06:0c:db:b1:e4:18:d8:
56:71:5e:5a:e5:99:1b:b8:d1:f8:1d:d4:22:eb:10:9a:a0:65:
2e:34:08:1c:bf:c7:9d:f6:21:80:10:41:52:68:14:c9:ed:79:
cb:7c:34:1a:94:5d:d0:2c:5e:f5:2a:ab:80:29:f0:22:d1:68:
54:2b:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:44 2025 by rpki-client