Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
File: j-7pSg47IoCXZK7h4o8Hj61ja8M.cer (raw, json)
Hash identifier: gwrlBs+ON7WKJKns6ldcuRETfMLDcKk6L4umnFvX0Ng=
Subject key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427487A2DF6185932771DF901CE50A211
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.199.26.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7a:2d:f6:18:59:32:77:1d:f9:01:ce:50:a2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:cf:20:59:e6:e8:b5:32:d3:95:e6:3a:9a:
44:8a:d6:03:67:cb:18:5c:17:34:ef:3e:c6:fc:e0:
5c:65:01:86:11:a2:10:2b:1d:22:30:24:d0:f0:0b:
5e:84:c2:67:80:bf:1f:ed:0d:ad:05:13:56:92:ad:
bc:bc:3e:6f:86:a3:3c:64:7d:43:a2:d6:7f:17:89:
1a:35:d5:29:82:db:3d:61:ee:35:51:8c:f2:de:d8:
0e:c9:ad:be:0f:ed:d2:34:d4:be:02:32:64:2d:06:
71:c4:5c:63:b8:58:2e:bd:e8:66:c3:52:d8:c5:84:
bc:31:4a:9d:7d:2a:9d:af:c9:12:bf:0d:49:2f:61:
21:94:68:aa:49:55:c3:5b:9e:8a:8e:d8:93:91:f3:
1b:8d:9e:b4:3a:db:87:13:10:07:90:43:77:95:7f:
ea:6a:ba:a6:67:64:39:90:68:e1:8f:a0:4f:03:3a:
33:a0:af:3a:30:83:33:2e:8d:58:7b:4c:48:b2:7c:
01:1e:0f:a9:e8:94:45:42:40:27:bc:4c:1f:c5:a3:
d9:80:ab:30:30:78:7e:8b:67:a6:a8:e9:e7:59:3c:
e3:62:0e:1c:a3:b0:be:5e:80:5c:56:e0:7a:a8:3d:
f4:fe:36:db:a3:90:78:4c:50:1b:0c:a9:49:d7:16:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.26.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:8a:da:71:95:d3:9b:d7:7a:3a:51:f9:b1:b9:9f:0f:da:4e:
69:db:c7:ca:a9:ea:6a:41:4f:cf:ca:f6:69:99:4e:01:8c:4a:
58:30:62:5e:b0:5d:f2:d3:98:73:39:6f:54:be:51:52:e7:41:
07:e2:96:68:9b:4b:47:d0:aa:2e:64:32:84:92:c6:f8:68:b7:
65:9b:ce:b4:09:34:7e:11:54:24:62:9c:2a:b2:ef:d1:b6:14:
ad:d7:bd:bf:44:55:f5:00:c0:ce:7f:b6:0f:05:f2:17:0d:e2:
f5:1b:cc:bd:93:d3:2f:78:0c:7c:ae:7c:5b:25:c0:80:b2:6c:
e2:75:1b:ac:f8:16:af:0f:09:66:15:5d:14:80:0b:1d:02:fd:
20:c4:d5:6c:7f:af:91:d0:84:4a:9f:14:fd:2d:e9:08:d3:9c:
a0:ef:5e:94:5e:78:5e:b1:88:20:9b:49:ef:5b:e8:a4:8c:06:
ff:fc:07:f1:dd:80:0a:63:9b:c6:bf:b3:62:bc:8a:68:30:a5:
96:ff:1d:9d:90:60:1e:10:40:b4:b4:44:ee:6b:46:b8:4a:ec:
5c:53:4e:a0:0e:07:5a:11:7e:d8:6e:21:e1:17:d0:3c:32:3f:
95:d0:4b:6d:82:d1:6b:8e:bc:a3:78:af:0e:4a:39:41:cf:72:
43:76:d7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:06:05 2025 by rpki-client