Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
File: j06-YGSqsD8mniKBWs1JSab7cmU.cer (raw, json)
Hash identifier: s22mYkAYTEj79S3CDItl2gpvK5AKJ9DNY/NWAaihNhc=
Subject key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942826CBFA48D41BA81E3FE8C324FD55F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:53:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.220.96.0/22
IP: 2a0b:f440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:cb:fa:48:d4:1b:a8:1e:3f:e8:c3:24:fd:55:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:53:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:d0:60:48:8c:ab:7c:9b:25:5b:14:f0:53:
19:66:e6:a8:82:2a:6e:13:76:ed:95:ae:d6:7c:21:
46:de:74:fd:a2:43:df:09:0a:77:4c:dd:f3:ac:35:
ca:f0:c5:ef:5d:6f:7d:9f:c2:76:1f:a6:da:af:a2:
07:f0:3d:0f:5c:0c:93:37:95:ac:ed:4e:12:28:d5:
60:12:f3:67:e1:c6:95:86:d2:3f:c0:97:54:12:4d:
d8:64:87:d9:5b:19:be:d9:a6:3a:98:76:78:77:46:
1c:49:35:cb:8a:21:45:60:34:b5:31:2b:75:2e:e8:
94:64:1f:cf:81:e8:7e:a4:42:d8:d3:2c:ae:e4:5d:
3f:ec:14:aa:b6:36:d5:36:a9:d5:4e:c8:a7:ca:9f:
c7:9c:8e:58:ef:ed:c3:12:5b:ca:c4:19:8e:ad:d0:
5d:22:c2:b9:4a:cb:76:64:f2:27:9e:f0:c2:69:14:
84:15:2b:d4:33:90:87:f4:3c:96:59:c4:f7:1a:7b:
3b:3e:4d:3e:94:9f:a9:bd:16:12:52:5e:9a:43:69:
ea:e7:e3:83:86:1b:a1:72:f5:99:47:6f:32:92:c3:
cd:e0:fd:90:4b:be:8b:72:d0:17:9a:01:8f:c6:d5:
b5:c1:6b:d7:78:f7:70:09:12:70:d9:18:21:5e:84:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.96.0/22
IPv6:
2a0b:f440::/29
Signature Algorithm: sha256WithRSAEncryption
a5:6e:09:1f:64:03:bd:2d:db:74:53:6a:b3:11:b2:dc:a1:61:
5e:82:ca:e7:2a:c3:d3:b2:5f:21:4f:49:54:f5:0f:11:50:43:
a6:39:98:50:9d:bd:75:6b:c6:48:a7:ae:26:6c:57:64:79:4e:
81:9b:ac:49:53:05:c7:ba:58:f4:5c:d7:c4:80:36:8e:90:84:
f5:3f:15:ea:f4:c7:59:0a:82:ce:3e:77:05:7e:f8:6b:69:f1:
2c:d5:2b:32:1a:4d:c9:1c:39:b6:f2:d8:8a:84:a2:83:81:7a:
43:1a:69:35:cf:6e:83:93:95:27:1d:97:a1:10:d9:43:58:f5:
e7:ca:36:94:dc:a3:8b:32:78:8e:e0:ea:1d:a0:f0:45:74:80:
3b:87:2e:05:3c:47:e3:4f:f1:47:39:04:fd:53:16:3b:ff:3e:
8b:e1:22:96:a8:ac:84:81:a7:32:41:cf:e9:0b:cb:7e:9c:33:
88:c7:4b:64:1a:4a:aa:34:9e:e2:28:f9:31:ff:fe:3b:eb:2d:
f9:ea:21:de:ed:51:6f:a7:b0:f3:45:92:a8:44:93:90:69:c9:
8f:86:43:47:5f:c4:a1:1d:14:82:0f:1f:a5:79:30:81:9e:06:
ff:9d:32:39:5c:7a:35:c6:b6:b5:ce:e4:0f:2a:e7:93:37:71:
91:2b:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:57:38 2025 by rpki-client