Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
File: lB8grdISwODmjj8a6OoqeWSfT0w.cer (raw, json)
Hash identifier: 2ioOEOHgxnLzEool8EBonLW8miKYTGmm15/W/AWtPHU=
Subject key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7576ED9921FF430C94E526FCE3AB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.67.76.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:57:6e:d9:92:1f:f4:30:c9:4e:52:6f:ce:3a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:8c:da:83:37:01:21:12:54:36:d2:f4:eb:
2f:ee:4e:b5:59:af:06:fb:36:05:fa:a1:c9:36:77:
1a:c5:77:47:54:bd:82:41:e8:8c:10:6a:6a:d9:f3:
63:1a:81:fb:1f:71:32:7b:ee:52:c2:3e:53:88:27:
90:d6:91:01:64:99:d0:18:86:d7:2a:25:a3:46:5c:
48:e7:01:c4:37:0b:4f:7a:8c:8e:10:c7:23:56:52:
8b:f3:77:11:77:cd:28:3a:9f:73:f9:33:6b:39:10:
08:4a:f6:71:c4:5f:cd:28:c3:d6:f0:e0:bd:18:93:
b2:1f:1d:c8:0b:a7:4b:a8:df:6d:55:dc:a9:a9:a3:
ca:71:19:e5:70:1d:66:25:40:99:07:0d:b0:97:71:
b3:55:d9:c6:0e:3d:48:33:e0:ce:aa:15:68:a3:3a:
bf:03:bb:95:35:18:8d:b0:cc:b7:2e:17:2b:57:3c:
41:d3:ba:7c:11:c4:e2:14:35:7d:26:52:4d:a6:97:
f6:04:85:ac:27:88:a9:b6:13:cb:ad:73:e5:68:9b:
78:f3:6e:39:fa:fb:ef:e3:84:54:c3:63:72:11:ae:
95:dc:1b:1f:0f:c4:27:18:e1:6d:62:a3:92:bf:80:
b3:b8:99:7d:91:07:36:72:96:17:da:33:58:47:a9:
36:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.67.76.0/24
Signature Algorithm: sha256WithRSAEncryption
07:59:4e:12:3d:20:1c:14:4a:3d:00:a8:5c:c8:af:c0:4a:fb:
8d:d9:96:e1:92:ab:07:27:03:22:62:63:7c:22:94:d2:96:02:
39:2f:18:e7:72:fd:0b:86:bd:d2:bb:b2:9d:60:e9:a5:9f:05:
ba:18:07:85:e5:9b:cc:23:cb:73:7a:dd:e1:da:95:2a:76:06:
fe:b9:9a:ef:8c:91:ce:4a:45:68:7c:c8:95:a7:74:2a:67:ec:
0a:6e:1e:f7:a5:d9:a6:ec:b4:f9:e8:fd:20:7b:bf:68:3c:84:
7b:b6:a2:f9:1c:7a:06:f0:05:b4:08:76:8c:1a:b8:3e:58:03:
e1:30:eb:3d:37:d2:5b:b6:97:f1:7c:c7:bf:84:54:7d:94:88:
3c:d4:78:0f:da:96:98:df:22:fa:d4:76:bb:b2:54:45:3f:32:
16:f0:a9:b3:48:88:8e:55:8b:77:fb:ac:1f:4f:bf:70:38:d1:
8b:0c:1a:6f:2a:8d:9c:f3:06:d0:73:07:75:e8:85:3f:40:6a:
77:5e:43:99:7c:05:ec:c9:49:db:45:0a:4e:30:f3:06:65:a8:
95:68:6f:b9:5b:25:b4:da:4f:8c:86:d9:18:97:22:19:fa:4d:
1b:b6:bd:df:00:c0:fd:a0:f4:01:49:1f:9d:a6:e0:df:7d:29:
81:ec:3c:33
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQj11du2ZIf9DDJTlJvzjqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDFmMjBhZGQyMTJjMGUwZTY4ZTNmMWFlOGVhMmE3OTY0OWY0ZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28aM2oM3ASESVDbS9Osv7k61Wa8G
+zYF+qHJNncaxXdHVL2CQeiMEGpq2fNjGoH7H3Eye+5Swj5TiCeQ1pEBZJnQGIbX
KiWjRlxI5wHENwtPeoyOEMcjVlKL83cRd80oOp9z+TNrORAISvZxxF/NKMPW8OC9
GJOyHx3IC6dLqN9tVdypqaPKcRnlcB1mJUCZBw2wl3GzVdnGDj1IM+DOqhVoozq/
A7uVNRiNsMy3LhcrVzxB07p8EcTiFDV9JlJNppf2BIWsJ4ipthPLrXPlaJt48245
+vvv44RUw2NyEa6V3BsfD8QnGOFtYqOSv4CzuJl9kQc2cpYX2jNYR6k2swIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJQfIK3SEsDg5o4/GujqKnlkn09MMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzE5MmM2
Ny05MzUzLTQ5YzMtOGEyZi0zNjVlMTNkYTYyZWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvMTkyYzY3
LTkzNTMtNDljMy04YTJmLTM2NWUxM2RhNjJlYS8xL2xCOGdyZElTd09EbWpqOGE2
T29xZVdTZlQwdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwENMMA0GCSqGSIb3DQEBCwUAA4IBAQAHWU4S
PSAcFEo9AKhcyK/ASvuN2ZbhkqsHJwMiYmN8IpTSlgI5Lxjncv0Lhr3Su7KdYOml
nwW6GAeF5ZvMI8tzet3h2pUqdgb+uZrvjJHOSkVofMiVp3QqZ+wKbh73pdmm7LT5
6P0ge79oPIR7tqL5HHoG8AW0CHaMGrg+WAPhMOs9N9JbtpfxfMe/hFR9lIg81HgP
2paY3yL61Ha7slRFPzIW8KmzSIiOVYt3+6wfT79wONGLDBpvKo2c8wbQcwd16IU/
QGp3XkOZfAXsyUnbRQpOMPMGZaiVaG+5WyW02k+MhtkYlyIZ+k0btr3fAMD9oPQB
SR+dpuDffSmB7Dwz
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:34:33 2025 by rpki-client