Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
File: jDPdzqsVS99j54n0RDSErVVIZkw.cer (raw, json)
Hash identifier: 869bot+MFksa/clmrKn2TvK9y6HbjspaxUU4qXhAZHA=
Subject key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B2755D956D523005DC654FC22DA9C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25445
IP: 193.178.184.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:75:5d:95:6d:52:30:05:dc:65:4f:c2:2d:a9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:3b:d3:f2:fb:c9:ce:ab:43:63:f7:9a:18:
4c:0f:50:fe:63:ec:95:20:aa:b9:9e:28:34:e1:ed:
40:a9:de:f0:99:32:91:4d:59:0a:e3:60:ae:7c:91:
17:b2:20:6f:f3:00:19:5f:b7:6e:ff:40:2c:de:72:
99:96:49:81:b3:b6:95:95:c3:b6:f0:9a:8c:02:12:
dc:ae:bc:58:2a:35:9a:dd:43:33:36:43:d5:57:53:
c5:c1:42:9e:f2:5a:e1:9b:5c:25:2d:b7:8b:65:a4:
bd:db:2b:b0:56:58:50:8f:52:05:da:a1:c7:97:87:
27:f8:da:1b:12:c4:b3:f5:90:8b:d4:09:63:8a:57:
d1:13:75:4e:b8:22:bc:13:19:f4:94:2b:84:10:a1:
05:98:fe:f2:8a:27:0e:9a:2a:45:7d:72:ed:73:a7:
bb:4d:10:b4:29:44:50:56:99:81:49:b8:3e:4d:9b:
51:c1:10:fb:c3:ee:83:4f:1a:17:60:a5:22:1b:66:
6e:95:c6:d2:1f:54:39:34:48:65:87:07:a2:9a:42:
d7:82:6b:93:75:71:93:c1:2d:12:73:cc:da:97:be:
5a:95:f4:bc:1a:76:53:9e:67:73:13:c5:db:8a:7e:
b3:c3:3c:0d:bc:b3:a4:7e:2a:40:50:5c:ec:07:fb:
a8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.184.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25445
Signature Algorithm: sha256WithRSAEncryption
1e:2c:92:26:4a:de:a7:00:6e:01:be:43:2d:12:63:41:e1:3d:
87:8d:b7:3e:c9:bd:f8:d8:77:74:36:e1:2e:c7:05:21:fa:39:
9a:8f:f2:3d:c0:43:de:5b:1b:5f:44:f9:98:cb:19:df:b8:d1:
9a:30:9c:2c:6b:03:5b:84:ba:d6:23:50:c1:1b:93:05:6b:1d:
9b:0a:b5:e8:a5:1b:a5:7a:a3:86:e1:05:c8:55:5f:63:7f:78:
0e:d3:22:4e:ca:da:a5:5d:31:15:a8:be:33:d8:dd:4b:68:34:
07:46:36:1d:41:4a:90:a4:f1:a1:91:9e:1c:31:2f:ba:7f:65:
3d:84:66:1f:79:da:10:26:88:0c:8a:a1:aa:c0:24:87:7e:0f:
80:56:5e:41:fd:26:70:63:1e:63:8e:e2:b1:40:ad:d4:7a:c3:
33:69:85:4c:1f:37:d5:92:cd:0b:b0:0e:74:ae:3f:e6:25:98:
b5:f0:95:25:7a:3d:9f:1a:c2:d1:fd:88:72:9f:c9:90:e2:52:
c2:53:bf:f7:6f:c8:28:66:5a:89:88:8f:5d:2b:1d:2c:33:e6:
97:65:74:ce:ed:8c:76:a2:f0:5e:b4:bf:32:0a:41:bc:7c:8f:
01:ba:f0:bd:c0:db:5e:b6:a7:3e:45:fb:8f:3b:30:90:9b:97:
69:6a:75:39
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQksnVdlW1SMAXcZU/CLanGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzMzZGRjZWFiMTU0YmRmNjNlNzg5ZjQ0NDM0ODRhZDU1NDg2NjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fU70/L7yc6rQ2P3mhhMD1D+Y+yV
IKq5nig04e1Aqd7wmTKRTVkK42CufJEXsiBv8wAZX7du/0As3nKZlkmBs7aVlcO2
8JqMAhLcrrxYKjWa3UMzNkPVV1PFwUKe8lrhm1wlLbeLZaS92yuwVlhQj1IF2qHH
l4cn+NobEsSz9ZCL1AljilfRE3VOuCK8Exn0lCuEEKEFmP7yiicOmipFfXLtc6e7
TRC0KURQVpmBSbg+TZtRwRD7w+6DTxoXYKUiG2ZulcbSH1Q5NEhlhweimkLXgmuT
dXGTwS0Sc8zal75alfS8GnZTnmdzE8Xbin6zwzwNvLOkfipAUFzsB/uo7wIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFIwz3c6rFUvfY+eJ9EQ0hK1VSGZMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2NjNDUx
Ni0xYjk0LTQ1YWItYjE2MS1mMmIwZmQzYzMxMzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvY2M0NTE2
LTFiOTQtNDVhYi1iMTYxLWYyYjBmZDNjMzEzNy8xL2pEUGR6cXNWUzk5ajU0bjBS
RFNFclZWSVprdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwbK4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AmNlMA0GCSqGSIb3DQEBCwUAA4IBAQAeLJImSt6nAG4BvkMtEmNB4T2Hjbc+yb34
2Hd0NuEuxwUh+jmaj/I9wEPeWxtfRPmYyxnfuNGaMJwsawNbhLrWI1DBG5MFax2b
CrXopRuleqOG4QXIVV9jf3gO0yJOytqlXTEVqL4z2N1LaDQHRjYdQUqQpPGhkZ4c
MS+6f2U9hGYfedoQJogMiqGqwCSHfg+AVl5B/SZwYx5jjuKxQK3UesMzaYVMHzfV
ks0LsA50rj/mJZi18JUlej2fGsLR/Yhyn8mQ4lLCU7/3b8goZlqJiI9dKx0sM+aX
ZXTO7Yx2ovBetL8yCkG8fI8BuvC9wNtetqc+RfuPOzCQm5dpanU5
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:31 2025 by rpki-client